When the Information Commissioner’s Office (ICO) published its recent findings on the City of London Police’s Subject Access Request (SAR) backlog, it highlighted a challenge that extends far beyond policing. According to the ICO, the force responded to less than half of SARs between April 2023 and March 2024, leaving 45 requests unanswered and prompting 24 complaints over the period.
It’s a stark reminder that even well‑resourced organisations can struggle to keep pace with the growing volume and complexity of information requests.
The ICO’s post makes one thing clear: organisations must provide people with access to the information held about them, and they must do so securely and within statutory timeframes.
But in practice, many teams face the same obstacles:
Requests arriving through multiple channels
Manual processes that rely on email, spreadsheets, or shared drives
Difficulty coordinating colleagues and tracking progress
Sensitive data scattered across systems
Limited auditability and oversight
When these pressures collide, backlogs form — and the risks escalate. Missed deadlines, security vulnerabilities, and reputational damage are all too common.
Although this case involved a police force, the underlying issues are familiar across the NHS, local authorities, central government bodies, education, housing, and private organisations.
We see it every day: teams doing their best with tools that were never designed for SARs or FOIs.
This is exactly why we built the AMS Request Management Portal — a secure, centralised platform designed specifically for managing SARs, FOIs, and other statutory information requests.
Capture requests through a structured, digital process
Manage every step from one centralised dashboard
Collaborate with colleagues and communicate with requestors securely
Track progress with a full audit trail
It’s already widely used across the NHS, where the volume and sensitivity of requests are exceptionally high. Now, as more public sector and private organisations face similar pressures, we’re helping them modernise their processes too.
The ICO’s advice is clear: organisations must take SAR handling seriously and equip themselves with the right tools and processes. Their guidance is valuable — but guidance alone can’t fix operational bottlenecks.
By moving away from fragmented, manual workflows and adopting a purpose‑built platform, organisations can reduce risk, improve compliance, and deliver a better experience for the people they serve.