Watch this space for interesting product updates and discussions on relevant topics.
The ICO
When the Information Commissioner’s Office (ICO) published its recent findings on the City of London Police’s Subject Access Request (SAR) backlog, it highlighted a challenge that extends far beyond policing. According to the ICO, the force responded to less than half of SARs between April 2023 and March 2024, leaving 45 requests unanswered and prompting 24 complaints over the period.
It’s a stark reminder that even well‑resourced organisations can struggle to keep pace with the growing volume and complexity of information requests.
SARs Are a Legal Obligation - But Also an Operational Burden
The ICO’s post makes one thing clear: organisations must provide people with access to the information held about them, and they must do so securely and within statutory timeframes.
But in practice, many teams face the same obstacles:
-
Requests arriving through multiple channels
-
Manual processes that rely on email, spreadsheets, or shared drives
-
Difficulty coordinating colleagues and tracking progress
-
Sensitive data scattered across systems
-
Limited auditability and oversight
- Increasing public awareness of data rights
When these pressures collide, backlogs form — and the risks escalate. Missed deadlines, security vulnerabilities, and reputational damage are all too common.
A Challenge Across the Public and Private Sector
Although this case involved a police force, the underlying issues are familiar across the NHS, local authorities, central government bodies, education, housing, and private organisations.
We see it every day: teams doing their best with tools that were never designed for SARs or FOIs.
Digitising the Process: Practical Way Forward
This is exactly why we built the AMS Request Management Portal — a secure, centralised platform designed specifically for managing SARs, FOIs, and other statutory information requests.
Our solution helps organisations:
-
Capture requests through a structured, digital process
-
Manage every step from one centralised dashboard
-
Collaborate with colleagues and communicate with requestors securely
-
Track progress with a full audit trail
- Respond efficiently and compliantly
- Protect sensitive data with UK‑based Microsoft Azure hosting and strong encryption
It’s already widely used across the NHS, where the volume and sensitivity of requests are exceptionally high. Now, as more public sector and private organisations face similar pressures, we’re helping them modernise their processes too.
Learning from the ICO's Message
The ICO’s advice is clear: organisations must take SAR handling seriously and equip themselves with the right tools and processes. Their guidance is valuable — but guidance alone can’t fix operational bottlenecks.
Digitisation can
By moving away from fragmented, manual workflows and adopting a purpose‑built platform, organisations can reduce risk, improve compliance, and deliver a better experience for the people they serve.
