---
title: "Prepare the file for a student-record access request"
url: "https://ailawframework.com/practice/education-law/prepare-the-file-for-a-student-record-access-request"
type: "task"
site: "AI Law Framework"
id: "A59-PU20261022-5"
practice_area: "Education Law"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-10-22"
---

# Prepare the file for a student-record access request

> From the request and the provider's record list, note who asked, whether identity has been checked, what personal information is asked for, where the provider holds or controls a record of it, and the date the request…

Canonical page: https://ailawframework.com/practice/education-law/prepare-the-file-for-a-student-record-access-request  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Education Law](https://ailawframework.com/practice/education-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the request and the provider's record list, note who asked, whether identity has been checked, what personal information is asked for, where the provider holds or controls a record of it, and the date the request was received. Do not decide to grant or refuse access, and do not write the refusal notice. |
| What the lawyer must review | The lawyer decides whether the provider is an APP entity that holds the information, whether the requester is the individual or a person authorised to ask, and whether an agency ground or an organisation ground for refusal applies. An agency must respond within 30 calendar days after the day it receives the request, by giving access or refusing it. An organisation must respond within a reasonable period, which as a general guide should not exceed 30 calendar days. A refusal needs a written notice with reasons. Access is given in the manner requested if that is reasonable and practicable. A government school may be under a state information law rather than the APPs, and the lawyer confirms which regime applies before the APP periods are used. |
| Written for / versions | 1 jurisdiction versions below |

## Checking plan

**Source-by-source verification**

Trace the request date and the holdings to the provider's records, and leave the grant or refusal to the lawyer.

- What the AI does: From the request and the provider's record list, note who asked, whether identity has been checked, what personal information is asked for, where the provider holds or controls a record of it, and the date the request was received. Do not decide to grant or refuse access, and do not write the refusal notice.
- What the lawyer does: The lawyer decides whether the provider is an APP entity that holds the information, whether the requester is the individual or a person authorised to ask, and whether an agency ground or an organisation ground for refusal applies. An agency must respond within 30 calendar days after the day it receives the request, by giving access or refusing it. An organisation must respond within a reasonable period, which as a general guide should not exceed 30 calendar days. A refusal needs a written notice with reasons. Access is given in the manner requested if that is reasonable and practicable. A government school may be under a state information law rather than the APPs, and the lawyer confirms which regime applies before the APP periods are used.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Practical workflow informed by the linked primary sources; the traffic light and working checks are editorial guidance, not a court classification.
- Why: The level reflects what the work is, the consequence of an error, and how much of the output the lawyer must independently re-derive.

## Checks the lawyer makes

1. Confirm the response period is counted from the day after receipt, and that the agency or organisation rule has been selected.
2. Confirm identity was checked with the least personal information needed, and that another person's privacy has been considered before access.
3. Confirm a refusal, if there is one, is a notice the lawyer writes, with reasons, and is not generated from the file note.

## Notes

- These are suggested working checks. Confirm the required checking with the responsible lawyer before work starts; the checking approach does not establish permission to use AI.

## Sources

- [OAIC: Chapter 12, APP 12 Access to personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-12-app-12-access-to-personal-information) (checked 2026-10-22)

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [United States](https://ailawframework.com/practice/education-law/prepare-the-file-for-a-student-record-access-request/united-states.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*