I have taken a quick (unqualified) look again at some of the Data Protection Act and its application
If I am correct under the following legislation, there is a duty to share information under certain circumstances:
1. Common law duty of confidentiality
2. The Data Protection Act 2018
3. The General Data Protection Regulations (GDPR)
also under a couple more Acts
The sharing of personal or sensitive data (information) is deemed allowed even if the person who has provided that information in confidence does not give their express consent to share that data. This is why each Universities understanding and acknowledgement of the need for robust Data Protection Act policies are so important
As I understand it, if a student alleges a rape or serious sexual assault to a University staff member or University body under certain circumstances, this highly confidential information should be shared between relevant bodies (whichever are the most relevant bodies) ie the Police GP’s, Health Authorities, Housing Departments, Social Services, Office of Public Guardian etc and any other nominated authority. This information should be open to be shared without a student giving their explicit consent. Even if they refuse to share the data a staff member can pass the information to relevant bodies for their attention to prevent the following:
• To prevent death or serious harm to others
• Prevent abuse and harm (to others or other members of the public)
Some frontline staff and managers understandably could be over-cautious about sharing personal information, particularly if it is against the wishes of the individual concerned, or against the wishes of a line manager. The staff member or line manager may not have a good understanding of the Data Protection Act. In many circumstances even if a line manager disagrees with that staff member's intentions to share that information, the staff member can still share information and be 'covered' under the clauses of these Acts (But yes you are right thinking it would be a brave staff member!) So in the University policy you would expect that if a student alleged a rape against another student (or staff member) that the information would be immediately transferred to the Police, and this should be openly communicated in University policy.
The following criteria should be considered by persons who hold that data and may consider passing that information to other authority organisations:
Staff should consider the following:
1) To encourage the consideration of the risk of
NOT sharing information (you know nothing whatsoever about the background of the alleged offender) and further students are at risk
2) That the sharing of that information could prevent further crime
3) That a serious crime has been committed
If I have interpreted the information on these Acts correctly then perhaps these Universities are failing students by not reporting this information to the police. The police have an immediate duty to investigate such a serious crime ie the alleged offences of rape or sexual assault as soon as they receive it. The police have privileged access to an individuals criminal record, other allegations against that individual and other sensitive data. Their investigations and due justice process could possibly prevent a student from committing further serious offences (certainly if they are remanded in custody or given bail conditions) The police can ultimately assess professionally the allegations and collate information thereby providing evidence to the CPS to make a decision on whether to go ahead and prosecute.
This negates a University from having to investigate an allegation of rape or serious sexual assault received from another student (in and amateur fashion (other than to record the first account of allegation from them) If there is a robust policy of process and this is communicated to all students at the start of each term, then it is unlikely that there will be abuse of the use of University process to hold trials against certain students. If all students are made aware of the University policy at commencement of term it also prevents the one sided 'money privilege' argument to be used in serious allegations as an evasion of justice that some are trying to raise here as an issue.
Some of the information used here is listed in the following link:
https://www.scie.org.uk/safeguarding/adults/practice/sharing-information