I am told that nothing that might be regarded as an OSFC/Megastream "asset" (including student records) can be touched until the legal wheels have turned.
[
my emphasis]
Surely this is totally wrong, unless the student has done the relevant training and ground exams and
not paid for it, which is practically unheard of in the PPL training business.
It's not illegal in the sense that the police won't get involved in civil matters but student records are not as asset of the school.