ICO Findings: Why Schools Keep Missing SAR Deadlines (and How to Fix It)

Schools continue to struggle with Subject Access Requests and the ICO findings are clear.

Common issues identified by the ICO include:

• SARs being delayed during school holidays, despite statutory deadlines still applying

• Staff failing to recognise SARs made verbally, by email, or via social media

• Weak or missing procedures for identity checks and parental responsibility • Poor record keeping to evidence decisions, redactions, and exemptions

• Over reliance on one person, with no resilience during absence

• Little or no quality checking before information is released

‍

The message from the ICO is simple. Good intentions are not enough.

Without clear procedures, trained staff, and senior oversight, schools remain exposed to complaints and potential enforcement action. If SAR handling feels inconsistent or reactive, you are not alone.

At FiSAR we can assist in automating the time consuming search and retrieval of information, remove duplications, redact information (written, audio and CCTV) and securely deliver information.

We take what is usually 40-50 hours of work and the cost of redaction paid to companies and reduce this to a 20-30 minute task the relieves staff of the burden of manual searches and redaction costs allowing them to do what they are best at, educating our children.

Ready to Transform Your SAR Process?

FAQ

Everything you need to learn about Fisar

Common questions about our platform, security measures and how we help schools manage Subject Access Requests efficiently and compliantly.

01
What is Fisar?
Fisar is a specialised platform designed exclusively for schools to automate Subject Access Request processing. We transform the traditionally manual, time-consuming SAR process into an efficient, secure and compliant automated workflow that reduces processing time from 30 days to approximately 15 minutes.

01
What is Fisar?
Fisar is a specialised platform designed exclusively for schools to automate Subject Access Request processing. We transform the traditionally manual, time-consuming SAR process into an efficient, secure and compliant automated workflow that reduces processing time from 30 days to approximately 15 minutes.

02
What problem does Fisar solve?
Schools currently spend 20-30 hours of staff time processing each SAR manually, pulling teachers and administrators away from their core educational duties. This creates compliance risks, resource drain and significant anxiety around meeting ICO deadlines. Fisar eliminates these challenges through intelligent automation.

03
How does Fisar integrate with our existing school systems?
Fisar connects seamlessly with major MIS platforms including SIMS, Bromcom, Arbor, Juniper and IRIS. We also integrate with email systems (IMAP), CCTV storage and other data sources. Our one-time setup process ensures all your systems work together without disrupting current workflows.

04
Is Fisar secure and GDPR compliant?
Security is our top priority. Fisar uses AES-256 encryption at rest, TLS encryption in transit, per-tenant data isolation and maintains full audit trails. We're designed specifically to meet DfE digital standards and educational compliance requirements, giving you complete peace of mind.

05
How long does it take to implement Fisar?
Implementation is straightforward with most schools operational within 24-48 hours. Our team handles the technical setup whilst your staff receive comprehensive training on the simple dashboard interface. No complex IT projects or lengthy deployment periods.

06
What happens to our data?
Your data remains completely secure and isolated. We use per-school S3 buckets with enterprise-grade encryption. Data is only processed for SAR purposes and automatically expires according to your retention policies. We never access or use your data for any other purpose.

07
What if we have technical issues or need help?
Our UK-based support team provides assistance during school hours with emergency support available. We also maintain comprehensive documentation and video tutorials. Most issues are resolved within hours, not days, ensuring minimal disruption to your SAR processing.*

Get Started

Blog

ICO Findings: Why Schools Keep Missing SAR Deadlines (and How to Fix It)

Common issues identified by the ICO include:

The message from the ICO is simple. Good intentions are not enough.

Ready to Transform Your SAR Process?

FAQ

Everything you need to learn about Fisar