The Government Information (Public Access) Act provides for two avenues of external review of decisions:
1. Information Commissioner Review
If you made an application for access and are unhappy with the decision by the University you have the right to seek review by the NSW Information Commissioner. If you were consulted regarding the release of information and the Univeristy decided to release it contrary to your views you must seek internal review of the decision before going to the Information Commissioner.
Applications for review by the Information Commissioner must be made within 8 weeks of receiving the University's decision.
The NSW Information Commissioner has broad investigative and some coercive powers. The Commissioner can make recommendations considered appropriate, including that the Univeristy reconsider the matter. The University can reconsider an application regardless of whether or not it has conducted an internal review.
For more information see: Information and Privacy Commission
2. NSW Administrative Decisions Tribunal
If you are unhappy with a decision made by the Univeristy under the Act you have the right to seek review by the NSW Administrative Decisions Tribunal. You do not have to seek review by the Information Commissioner before applying to the Tribunal.
Matters must be taken to the Tribunal within 8 weeks of the decision by the University, or 4 weeks after an Information Commissioner review.
The Tribunal has the power to make the "correct and preferable decision" on the merits of the case.
For further information see: NSW Administrative Decisions Tribunal