I investigate misconduct, harassment and grievance allegations for education providers, and build the complaints processes that regulators now require organisations to run.
Ransford Stanley, independent investigator and regulated complaints specialist. Fifteen years in higher education, eight of them leading complaints, appeals and conduct casework to Office of the Independent Adjudicator standards.
Results from in-house roles and client engagements. Each is the kind of problem I am now instructed to solve.
25%
A university of 15,000 students from more than 160 countries had little visibility of where cases stalled. I designed and implemented a complaint-tracking process across the complaints and appeals function.
Resolution 25% faster. University of East London.
95%
Conduct cases involving special category data, safeguarding referrals and police liaison, each needing a defensible report within regulatory timeframes.
95% within timeframe in the first six months, and a contract extension. University of Plymouth.
20%
I streamlined appeal-handling workflows and led the procurement of a university-wide casework system to make case records auditable and reporting consistent.
Appeal responses 20% faster, with full data governance compliance. Canterbury Christ Church University.
30%
Client organisations needed UK GDPR and information security policies that would stand up to audit. I delivered targeted policy guidance and documentation support across their sites.
Compliance audit scores up 30%. Compliance & Data Guard Services clients.
Commissioned by education providers where internal handling would create a conflict of interest, where capacity is short, or where independence has to be visible.
Scoping allegations against your regulations, interviewing the parties and witnesses, testing the evidence, and producing a report a decision-maker can act on. I establish facts on the balance of probabilities. I do not decide the outcome, recommend sanction, or sit on the panel.
Code of student conduct, academic misconduct, disciplinary regulations
Trauma-informed interviewing that minimises avoidable distress without lowering the standard of proof or the fairness owed to the responding party. Safeguarding interfaces, precautionary measures and criminal-process liaison are handled explicitly rather than assumed.
OfS harassment and sexual misconduct condition, Equality Act 2010
Where the allegation sits inside the reporting line, or involves someone senior enough that internal investigation would be challenged. Same methodology, same separation between finding facts and taking decisions.
Grievance, bullying, whistleblowing referrals
Independent review of a complaint your own process has not resolved, or an audit of how your complaints and appeals procedure would stand up on external review. Findings come with the procedural and systemic issues observed along the way, not just the outcome.
OIA Good Practice Framework, QAA and the UK Quality Code
Every instruction follows the same published framework, shared with the commissioning provider and available to the parties on request.
You set out the allegation and the regulations. I confirm capacity and complete a conflict of interest and independence declaration before anything else happens.
The questions to be answered, the regulations in scope, what is excluded, the timescale and who receives the report. Signed by both of us. Nothing is investigated outside them.
Parties are told in writing what is alleged, who is investigating, their right to be accompanied, the support available and the expected timescale.
Documentary evidence is indexed first where possible, then interviews. Records go back to each interviewee to check. Adverse evidence is put to the party it affects before any finding is made on it.
Findings of fact with reasons, traceable to indexed evidence, written so a decision-maker who has seen none of it can follow how each conclusion was reached.
Report, bundle and index go to the commissioning officer. I stay available to clarify the report, and take no part in the decision.
Since June 2026 every UK controller has had to run a complaints process that meets a statutory standard. Most organisations have privacy expertise. Far fewer have ever run a complaints function.
A structured gap assessment across five areas: accessibility of the route, whether staff recognise a complaint that does not use data protection language, handling and timeliness, signposting across notices and rights responses, and third-party and assurance arrangements. You get a scored position and a prioritised action list.
Typically one to two weeks
Triage that separates complaints from rights requests and breach reports, proportionate investigation, scheduled progress updates, reasoned outcomes, and a register that evidences compliance if the Commissioner asks.
Any UK controller, in any sector
Recognising a data protection complaint arriving through a non-standard route, setting proportionate investigation depth, writing an outcome the complainant can follow, and avoiding the delay that turns a defensible case into a regulatory one.
Front-line teams, DPO functions, complaints teams
Handling complaints directly where volume has outrun capacity, or where a case needs someone outside the team that did the processing complained about.
Interim, project or retained
Twenty questions across the five areas, with a score and a prioritised action list. Your answers stay in your browser.
Since 1 September 2026, staff, applicants for academic posts, visiting speakers and non-student members can take a free speech complaint to the Office for Students. From 1 April 2027, conditions E11 and E12 apply to every registered provider in England.
The pressure points are procedural. A complaint can reach the OfS once 90 days have passed from the start of your internal process, whether or not that process has finished. The OfS normally publishes information about the complaints it receives, and under its proposed guidance a justified complaint would be treated as indicative of a breach of condition E12.
A review of complaints, staff grievance, student and staff disciplinary, and visiting speaker and event approval procedures. Can the people the scheme covers actually use the route? Will a free speech complaint be recognised when it arrives as a grievance or a general complaint? Can the process conclude inside 90 days? Are decisions recorded with reasons that would stand up on external review? Do outcomes signpost correctly to the OfS scheme, or to the OIA for students?
You get a scored position and a prioritised action list, timed against 1 April 2027.
Registered providers in England, typically two to three weeks
Where a complaint involves senior staff, a contested speaker decision, or a case already drawing attention, I establish the facts, test whether your procedures were followed, and produce a report the decision-maker can act on. Whether particular speech was lawful is a question of law for your legal advisers. I make sure they have a clean, evidenced record to answer it from.
Complaints, grievances, speaker and event decisions
Recognising a free speech complaint that does not use the words, separating fact-finding from decision, keeping records that will survive an OfS review, and avoiding the delay that hands the case to the regulator.
Events teams, complaints and casework teams, HR, committee chairs
When a complaint is heading to the OfS, I review the case record, build a chronology and an indexed bundle, and identify gaps in reasons or timing while there is still time to address them.
Single cases, interim support
Compliance & Data Guard Services is the practice of Ransford Stanley, an independent investigator and regulated complaints specialist based in London.
Fifteen years in higher education, including eight leading complaints, appeals and conduct casework to Office of the Independent Adjudicator standards at the University of Plymouth, Canterbury Christ Church University, University College London and the University of East London. The work has consistently been the contested end: allegations involving special category data and safeguarding, appeals under external scrutiny, and the design of the policies and training that follow.
The second strand is data protection. Subject access request handling, information sharing governance, and the UK GDPR applied to decisions that are genuinely disputed rather than routine. That combination, someone who has run a regulated complaints function and understands data protection law, is what the section 164A duty now asks organisations to find.
No. This is an independent investigation and complaints consultancy, and I do not give legal advice. Where a question of law arises, such as whether particular speech was lawful, I make sure your legal advisers have a clear, evidenced record to answer it from.
Every instruction starts with a written conflict of interest and independence declaration. Investigations follow agreed terms of reference, and I establish facts only. I do not decide outcomes, recommend sanctions or sit on panels.
Case papers are exchanged through a secure route agreed at the start of each instruction. I am registered with the Information Commissioner's Office and hold information security qualifications, and the privacy notice sets out how personal data is protected and how long it is kept.
Investigations and free speech work are for education providers. Data protection complaints work, including readiness assessments, procedures and training, is open to any UK organisation that handles personal data.
Short, practical pieces on the procedural side of new regulatory duties.
Most organisations have the policy. Far fewer have a process that works when a complaint arrives in the wrong inbox. Where processes fail, and what a working one looks like.
A slow internal process no longer keeps a complaint inside the institution. Five questions to ask about your procedures now.
For investigations, tell me the nature of the allegation, the procedure it falls under and your timescale. For complaints work, tell me where you think the gap is. Initial conversations are free and confidential, and I will say if the work is not something I should take.
Please do not send case papers or personal data about a third party in a first email. I will set up a secure route before anything of that kind is exchanged.