Is there a link between autism and data requests?

By Kieron JH, Founder, The Reasonable Adjustment

Autistic and otherwise neurodivergent people often end up making more data requests than everyone else. Subject Access Requests (SARs), Freedom of Information requests, copies of school files, clinical notes, safeguarding records, internal emails, the lot.

Ask anyone who works in complaints, safeguarding, SEND, casework or data protection and they will quietly admit that neurodivergent people turn up a lot in their inbox. What we do not have is hard data to prove it.

There are no statistics, but there is a very obvious pattern

There is currently no published dataset that shows how many autistic people submit SARs compared to everyone else. Public bodies do not, and probably should not, record disability status as part of their FOI or SAR metadata. That would create its own privacy and discrimination problem.

So officially:

• No breakdown of SARs by disability.
• No figures for how many neurodivergent people use data rights.
• No clean way to prove the trend with numbers.

At the same time, anyone who has spent time around autistic adults, especially those with long histories in education, health or the justice system, will recognise the reality. We lean on documentation and data access rights far more than most people do.

Why autistic people lean on data rights more than most

You do not need a formal study to understand why. The reasons show up in day to day life.

1. Clarity is not optional

Autistic communication is literal and detail driven. When information is vague, inconsistent or half delivered, most people fill the gaps with guesswork and social assumptions. Autistic people usually cannot do that without a cost. We want to know what actually happened, who decided what, and why.

Often, the only way to get that level of clarity is to use a Subject Access Request and ask for the full record.

2. More contact with services means more records to untangle

Many autistic and neurodivergent people have long running contact with:

• schools, PRUs and alternative provision
• SEND and education services
• mental health services
• social care and safeguarding teams
• benefits, housing and criminal justice agencies

More contact means more paperwork, more case notes and more decisions made in rooms you were not invited to. Eventually, people want to see what was written about them. That is not being difficult. That is basic self respect.

3. Inconsistency and missing pieces create real anxiety

Autistic people often get told things like:

• “We no longer have that file.”
• “Those records are on another system.”
• “We cannot show you that, but trust us.”

For a lot of autistic people, that is not reassuring. It is a trigger. When you have already experienced poor practice, lost paperwork or decisions that harmed you, “just trust us” is not going to cut it. A data request is sometimes the only way to check whether the story you are now being told matches the historic record.

4. Trauma and masking make documentation essential

Many autistic adults are trying to make sense of things that happened when they were children or teenagers:

• misdiagnosis or late diagnosis
• exclusions and managed moves
• physical intervention or restraint
• denied reasonable adjustments
• professionals talking about them, not to them

When you have masked for years, or dissociated through stress, memory is patchy. The paperwork is often the only objective timeline left. That is why historic school records, social care notes and old assessments matter so much to autistic people. They are not just documents. They are evidence.

5. Systems are not built around autistic communication

Most organisations communicate in a way that assumes a neurotypical brain:

• vague reassurance
• careful PR language
• half answers in emails
• verbal explanations with no written record

For a lot of autistic people, that style creates more confusion, not less. A clean bundle of documents is often easier to process than three polite but unhelpful emails. That is why the pull towards SARs and data rights is so strong.

The law is neat, real life is messy

On paper, UK GDPR and the Data Protection Act give a clear rule. Controllers have one calendar month to respond to a Subject Access Request, with some room to extend for complex cases.

In practice, that plays out inside:

• small schools running on skeleton admin teams
• local authorities that still rely on paper and ancient databases
• overstretched safeguarding and SEND teams
• historic archives that are not indexed properly

Autistic people often request large, historic, multi agency records. That is not because we want to “break” organisations. It is because that is where our lives were handled. The law expects those organisations to be neat and organised. Many are not.

The holiday problem

One quiet unfairness is how the one month SAR deadline works around public holidays. A request sent in early December runs over Christmas. A request sent before Easter runs into school closures. The law does not care. The clock keeps ticking.

From the autistic side, that is simple. A month is a month. From the controller side, it can be chaos, especially when paper archives are locked in a closed building and the people who understand the files are on leave.

A more grown up system would probably allow a small, tightly controlled grace period for defined public holiday windows, and in return would take late or sloppy responses more seriously when there is no such excuse.

Autistic decision making and when to escalate

There is another gap that rarely gets talked about. Autistic people often struggle to judge:

• when a delay is serious versus just annoying
• whether a mistake is malicious or just human error
• when escalation to the ICO is proportionate
• whether a late response is worth a full complaint

Neurotypical people lean on social context and instinct. Autistic people are much more rules driven and literal. If the law says one month, then one month feels like a hard line. If that line is crossed, it feels wrong, and there is a natural pull to report the breach.

That does not mean autistic people are being vexatious. It means nobody has ever clearly explained where the system itself expects a bit of proportionality, or how to weigh up whether a mistake is worth an ICO case.

What would better guidance look like

The solution is not weaker rights. Autistic and other neurodivergent people often rely on data rights precisely because other safeguards failed.

What would actually help is:

• clearer examples of what counts as a “complex” SAR that justifies an extension
• transparent guidance on how public holidays interact with deadlines
• models for phased disclosure when records are old, mixed format or multi agency
• plain English guidance for autistic and neurodivergent people on when escalation is likely to be useful
• firmer consequences for organisations that habitually ignore deadlines or misuse the “complexity” excuse

That would make life easier for everyone. Autistic people would not have to guess when to push and when to let something go. Organisations would have a clearer framework for when they can genuinely ask for more time, and when they are simply failing at record keeping.

Why this matters

For neurodivergent people, especially autistic people, data requests are not a hobby. They are often the only way to reconstruct what happened, who decided what, and why certain things in life went the way they did. That is not overreaction. That is survival.

Systems forget people like us very easily. Files get boxed. Staff move on. Safeguarding logs gather dust. Policies change and everyone pretends the old way never happened.

Our instinct to keep receipts and to pull records is not a character flaw. It is a rational response to being on the sharp end of systems that did not understand us in the first place.

Until the law, guidance and day to day practice catch up with that reality, autistic and other neurodivergent people will keep using SARs and other data rights more than most. Not because we want to cause trouble, but because sometimes the only way to protect yourself is to know exactly what is on file with your name on it.