“A review into the university’s sexual assault policies and procedures is meaningless if it does not examine how the university and its staff actually use these policies in practice. It is meaningless if it does not examine how survivors have experienced the system in place.”