Why Speed Is the Wrong Primary Metric for Disclosure

by

in ,

Speed is the wrong primary metric for DSAR and FOI handling because timeliness is a statutory constraint, not the objective: a response delivered on time that cannot be explained afterwards still fails. This applies to any team measured on turnaround — one month for DSARs, measured since 5 February 2026 from the relevant time under Article 12A UK GDPR as inserted by the Data (Use and Access) Act 2025, and twenty working days for FOI under section 10 of the Freedom of Information Act 2000. Deadlines matter. Reasoned decisions matter more.

What do the statutory deadlines actually measure?

Statutory time limits exert a powerful influence on disclosure practice. Deadlines are visible, measurable, and difficult to ignore. It is therefore unsurprising that speed has become a dominant metric in DSAR and FOI handling. But the deadline measures only when a response left the building — not whether the decisions inside it were sound, consistent, or recorded. When speed becomes the primary objective, it distorts decision-making in subtle but consequential ways.

How does optimising for speed distort decisions?

Fast disclosure is not inherently problematic. The difficulty arises when processes are designed to prioritise throughput over record integrity. In such environments, decisions are made quickly but documented lightly, if at all. Reviewers focus on clearing queues rather than capturing reasoning, and informal shortcuts become normalised.

This approach often appears successful in the short term. Responses are issued on time, request volumes are managed, and immediate complaints may be avoided. The risks emerge later, when decisions are revisited. Under scrutiny, the question is rarely whether a response was timely. It is whether it was reasoned. Organisations that have optimised purely for speed often find that they cannot easily explain how relevance was assessed, how exemptions were applied, or why particular material was withheld. The faster the original process, the harder it becomes to reconstruct it later — the pattern set out in why most DSAR redaction processes fail under scrutiny.

There is also a human dimension. Reviewers operating under constant time pressure are less likely to apply criteria consistently across cases. Without structured prompts or recording mechanisms, judgement becomes variable. This variability may go unnoticed internally, but it becomes problematic when similar requests produce different outcomes.

Why does complexity get masked?

Speed-focused metrics treat all disclosure decisions as equivalent units of work. They are not. Some require careful balancing of competing rights, particularly where third-party data is involved. Measuring only turnaround encourages superficial handling of exactly the cases that deserve the most care.

What should organisations measure instead?

A more resilient approach treats timeliness as a constraint rather than a goal. It recognises that meeting deadlines is necessary, but not sufficient. Processes are designed to preserve reasoning alongside efficiency — a decision record for every document, an audit trail that captures reasoning — ensuring that decisions remain intelligible beyond the moment of response. Structured tooling makes this compatible with the deadline rather than in tension with it; that is the premise behind Redaktr’s defensibility approach.

Disclosure that is merely fast may satisfy immediate requirements. Disclosure that is both timely and well-reasoned is far more likely to withstand later challenge.

Frequently asked questions

How long do organisations have to answer a DSAR?

One calendar month, but since 5 February 2026 it runs from the relevant time under Article 12A UK GDPR — the latest of receipt of the request, any identification you reasonably requested, or any permitted fee. It remains extendable by up to two further months where requests are complex or numerous, and the requester must be told about any extension, with reasons, within the first month.

What is the FOI deadline for public authorities?

Twenty working days from receipt, under section 10 of the Freedom of Information Act 2000. Limited extensions apply in specific circumstances, such as where a public interest test is being considered.

Does responding on time protect against complaints?

No. Timeliness is only one ground of challenge. Complaints about completeness, exemptions, and the handling of third-party data turn on the quality and recording of the decisions, not the speed of the response.