University referred to Information Commissioner over disclosure failure