Subject Access Requests- A Common Misconception.

by | Apr 23, 2025 | Uncategorized

Subject Access Requests- A Common Misconception.

Subject Access Request (SAR)

Last week I spoke to a new client and asked if they had ever had any problems in responding to a Subject Access Request. (SAR) To my surprise they told me that they had never had one. 

I was very surprised by this as experience told me this would almost be a unique situation.  

 
When asked if they had ever been asked by a parent for details relating to their child they said “Oh yes, but that was just asked at reception not by completing our form on the website so it isn’t recorded as a SAR”. I immediately explained that they had not been complying with UK GDPR. 
 
This is probably a common misconception amongst many schools so here are a few points that should be considered and understood. 
 
A SAR is when an individual exercises their right to find out what data is being held about them or their child and how it is being used.  Individuals may also ask for a copy of the data itself.
 
When such requests are made to the school you must respond within one month of receipt of the request or you may face legal proceedings and regulatory action.
As in the scenario above, a person does not need to state it is a SAR when submitting a request so its vital that all staff recognize a request. They can be made in person to anyone in the school, by email or even via social media if you use it. 
The request may be made in writing but also verbally. 
Once the SAR has been received make sure the staff know to inform the data protection lead in the school or the DPO. They should log the request and track it so that it is responded to in the appropriate manner. This includes some potential time delays for excessive requests and exemptions under the Data Protection Act 2018. 
SARs are on the rise as more people understand their rights so don’t be caught out and face a complaint. 
If you have any questions contact info@dpoforeducation.co.uk 
Age Appropriate Design Code / The Children’s Code and Schools

Age Appropriate Design Code / The Children’s Code and Schools

ED TECH - The Children's Code and Schools It has been an interesting year or so, watching the Children's Code (aka Age Appropriate Design Code or AADC) go through consultation, effectively missing out on what is needed for schools to be part of it, or how it could...

Mindfulness in Schools

Mindfulness in Schools

Mindfulness in schools / Mental Health Absafe have expanded their Health and Safety Education to include looking after the community's mental health. We give you the skills to look after your mental health. Students, like everyone else, face the modern challenge of...

Key HR issues and how to solve them

Key HR issues and how to solve them

5 Key HR Issues Underperformance but signed off sick: It’s not unusual to start a process of managing underperformance with someone only for them to go off sick. At this point you cannot continue to manage their performance, there simply isn’t performance to manage....