Subject Access Request to WJEC (Eduqas)

WJEC and Eduqas are one organisation. WJEC CBAC Ltd is a registered charity and a company limited by guarantee based in Cardiff, and its privacy notice says in terms that "WJEC is the data controller for the personal data we process". It awards qualifications in Wales as WJEC and, in its own words, is "one of the leading qualification providers in England and Northern Ireland, where we offer qualifications under the 'Eduqas' brand". The route below is the same whichever brand you sat your exams under: the Eduqas data protection page carries word-for-word the same instructions and the same mailbox, and refers to "WJEC's data protection policy" rather than to Eduqas's. The route is a form returned by email, and WJEC publishes no online portal. Complete its Access to Personal Data form and send it to the address above with a copy of one identity document; the form's own closing line says so. A written request is valid however you send it, and the postal address above reaches the same team — the privacy notice asks you to address a letter to "Data Protection Officer, WJEC". WJEC publishes no telephone number for a subject access request: 029 2026 5000 is its reception and results-day line, and the rights section of its privacy notice routes requests to email only. WJEC's two documents give different deadlines, and the shorter one is not your entitlement. The privacy notice says "Generally, we are required to respond to any request you make within 1 month"; the frequently asked questions published beside the form say "We are required to respond to a request within 30 days provided we have received all the relevant information and proof of ID". One calendar month is what the law gives you, and in most months that is longer than 30 days. WJEC also says the service "is free of charge", and that it is "not permitted to charge you for exercising your data subject rights, unless a request is manifestly unfounded or excessive". What comes back is a report, not a certificate, and WJEC says so on both documents. Its FAQ describes "a report containing details of series, year, candidate name as held on our system, school/college, qualifications taken and grades achieved", and warns that it "is not a certificate and is not usually accepted as proof of achievement by employers, training providers or Universities/Colleges". The request page says the same in its own words. If what you need is to know what WJEC holds — or whether it holds anything at all — this is the free way to find out. If you need a document an employer or a university will accept, that is a separate chargeable service. WJEC issues an Electronic Letter of Confirmation, which it says contains the same information as a Certifying Statement of Results: £30 and around two weeks for the digital version, or £40 and around six weeks on paper, with £10 or £20 for each further copy. Its application form says WJEC "should be able to provide confirmation of qualifications taken from 1951 onwards". WJEC states twice that a third party "cannot apply on behalf of the candidate" for that service, so it is one you have to use yourself — unlike the subject access form, which has a section for authorising someone else. One caution: the subject access FAQ still prints an old certificate application link that now returns a 404, and prints it as plain text rather than as a link, so start from the certificates page instead. A request will not get you your exam script and cannot change a grade. Access to scripts is a separate service and it is free — WJEC's post-results fees document offers "Free access to scripts via the view script access page for 6 months following the publication of results" — but it goes through your school or college, which has to obtain your written consent first. Reviews of marking, clerical re-checks and appeals also go through the centre and are chargeable: for the June 2026 series a clerical re-check is £11 and a review of marking £45 at GCSE or £51 at A level, all closing on 24 September 2026, and an appeal is £130 with a further £218 if it goes to a hearing. WJEC warns that "candidates marks and grades may be lowered" by a review. Private candidates can apply to WJEC directly through prs@wjec.co.uk. Your own answers are among the things a request cannot reach; the marks and the marker's record are not. If a university place depends on a grade, check the priority deadline with your centre rather than with WJEC's student pages. Its "Unhappy with your results?" page says the priority review deadline "is August 22" and names no series and no year; its June 2026 fees document gives 20th August for that service. Two days matter here, and it is the centre that has to submit the application. The application itself, the personal statement and the reference that went with it sit with UCAS, which is a separate controller with its own route. The Welsh-language route is separately maintained and its own documents disagree with each other. CBAC's data protection page publishes a Welsh form and the address swyddog.diogelu.data@cbac.co.uk; the Welsh form itself asks you to return it to a different address, swyddog.gwarchod.data@cbac.co.uk; the Welsh privacy notice prints the first address once without its .co.uk ending; and the frequently asked questions the Welsh page links are the English ones. If you are requesting in Welsh and want to be sure it arrives, send it to the address above as well. WJEC publishes little about a request made by someone else. Its form has a section in which you authorise a named third party, signed by you. On children, its privacy notice says that if you are "below 13 years of age" it assumes "you will be represented by your parents", and that "if you are 13 years of age or older, we will require your consent" — so a parent asking for a teenager's results needs that candidate's authority, and the rules on children's records explain how that is judged. For post-results services WJEC is firmer still: correspondence about a candidate entered by a school "must be undertaken by the centre and not by candidates or their parents/guardians". Nothing WJEC publishes sets out a route for a request about someone who has died, and rights of access end at death in any case. Two complaints go two different ways. A complaint about how WJEC handled the request goes to WJEC — its privacy notice gives complaints@wjec.co.uk, a different mailbox from the request address — and then to the Information Commissioner, and what to do when an organisation does not comply sets out the steps. A complaint about a grade or about the exam service goes to WJEC's regulator instead: Qualifications Wales in Wales, Ofqual in England and CCEA in Northern Ireland, all three of which WJEC names in its privacy notice. The Commissioner does not review grades and the regulators do not handle data protection. Check which board holds your records before you ask, because WJEC can only answer for its own. AQA, OCR and Pearson Edexcel hold theirs, and Scottish qualifications are held by Qualifications Scotland, formerly SQA. If what you want is your school's own file on you rather than the exam board's, that is a records request to the school. Old records are likely to still exist: WJEC's privacy notice says it will "store Candidate personal data indefinitely". If a reply arrives and you cannot tell whether it is complete, our free response checker will show you what is missing.

Made under UK GDPR Article 15, subject to the examination exemptions in Schedule 2, Part 4 of the Data Protection Act 2018

An exam board holds your entries, candidate number, marks, moderation and appeal records, and its correspondence with your school or college about you. A university or college holds all of that plus your student record, admissions file, misconduct and fitness-to-practise files. Requests usually arise from a disputed grade, an appeal, a misconduct allegation, or simply needing a record of results from years ago.

Your exam answers are treated differently in law. Under paragraph 25 of Schedule 2, Part 4 of the Data Protection Act 2018, the right of access does not apply to information recorded by candidates during an exam — so, as the ICO puts it, candidates do not have the right to copies of their answers to the exam questions. What the marker recorded is a different matter: the ICO's guide to the exemptions states that information recorded by the person marking the exam is not exempt, so marks and examiners' comments are within scope even though the script itself is not.

There is a timing rule for marks, and it is narrower than it is often described. It applies only where you ask before the results are announced. In that case the organisation must answer within five months of the request, or within 40 days of the results being announced if that comes sooner. Ask after results day and the ordinary deadline applies in full, as set out below.

• Marks, moderation records and examiners' comments
• Entry records, candidate numbers and the results held against your name
• Appeal, review-of-marking and malpractice records
• The full student record and admissions file, at a university or college
• Emails about you between staff, or between the organisation and your school

Deadline. An organisation must respond without undue delay and within one month. It may extend by up to two further months where the request is complex or you have made a number of requests, but it must tell you within the first month that it is doing so, and why.

Cost. There is normally no fee. A reasonable fee may only be charged where a request is manifestly unfounded or excessive, or where you ask for further copies.

Proving who you are. An organisation may ask you to verify your identity, but only where it has reasonable doubts about who you are, and it should ask for the minimum needed. Where it needs further information to deal with your request, the one-month clock pauses until you provide it.

How hard they have to look. An organisation has to carry out a reasonable and proportionate search — not an exhaustive one. What counts as reasonable depends on the volume of information, the difficulty of locating it, and the size and resources of the organisation. This is a common reason for a partial response, and it is worth being specific about what you want.

If they ignore you. Complain to the organisation first. Since 19 June 2026 every organisation has had a legal duty to give you a clear way to raise a data protection complaint, to acknowledge it within 30 days, to look into it properly and to tell you the outcome. If it does not, or the answer is incomplete, you can then complain to the Information Commissioner's Office.