You receive a telephone call from a man who says his daughter is a student at the University and that he has mislaid her address but needs to get in touch with her. He is able to provide her full name and date of birth and this matches information held for a current student on ESIS.
Establish, if possible, the reason for the contact. Do not routinely confirm even whether or not the student is at the University, let alone any of the personal details we hold. Explain that UK data protection law prevents us from passing on information directly to a third party and that the University has a policy on how third-party contact are handled.
Take the caller's details including contact details and offer to pass this on to the student - IF they are registered here. Don't offer/ promise/ agree to call back.
As the student is on ESIS contact the student direct passing on the message from the man (as he might not even be her father), make a note on the student's file.
If the reason for contact appears urgent or serious - eg the illness or death of a family member, seek advice during office hours from Student Support and out of office hours from Patrol Staff (who can contact the on-call Resident's Support Network) as support may need to be offered to the student.
Bear in mind, however plausible the caller may be, students may be estranged from parents and not wish them to know that they are studying here. If the daughter did not appear on ESIS you should not confirm this either.