Privacy issues extend to students as universities acquire and use their personal information for various reasons. This research study was aimed at determining the awareness, expectations and confidence levels of students when the university processes their personal information. The research was also aimed at validating the Information Privacy Perception Survey (IPPS) instrument. The instrument was designed based on the Fair Information Practice Principles, incorporating privacy principles and guidelines from the Organisation for Economic Cooperation and Development’s Protection of Privacy and Transborder Flows of Personal Data document, the General Data Protection Regulation and the Zimbabwe Data Protection Act bill. A survey research strategy was used following a quantitative research design where data were collected from 287 students at a selected university using a convenience sampling method. The IPPS instrument was validated using exploratory factor analysis. Seven factors resulted; university confidence, privacy expectations, individual awareness, external awareness, privacy education, practice confidence and correctness expectations. The IPPS can be used by universities to establish the level of awareness and confidence students have regarding how their privacy is upheld by the university. The results show the areas of improvement in the university’s privacy practices to create an environment that instils and favours upholding the privacy of students’ personal information. Aspects for improvement can be integrated in the university’s awareness programmes or policies.