School has sent an email with ALL the emails of parents attached...

[notthefirstagainstthewall]

for the second time. Doesn't this break some sort of data protection and what can we do about it? It's a small state primary.

[ThisIs]

Yes, it's a breach of data protection. They should already be investigating assuming that someone has noticed. You should make a complaint using the schools formal complaint procedure and you can also report directly to the Information Commissioners Office.

[meditrina]

Yes, the school should not be providing the personal data (which includes email addresses) to any third parties (including other parents) without consent.

Do you know what, of any, complaints were made the first time, and what steps were meant to have been taken to prevent repetition?

[MissStrawberry]

It is obviously an accident. Didn't you call them to tell them?

[TiredDog]

What ThisIs said. I have made a formal complaint over this issue myself. It's a basic error and completely unacceptable

[tizzwozz]

My DD's school did that. One of the other parents who does some sort of home selling of overpriced tat saved my email address and added it to her mailing list

I should have complained but felt like I couldn't as its a tiny school and the secretary who made the mistake is also a head PTA honcho and I am sick of making myself unpopular...

[notthefirstagainstthewall]

MissStrawberry Yes a few people mentioned it to the head (who sits in the same room as the school secretary) the first time. I'm sure a few will mention it this time.

We have a couple of children not allowed in school photo's, a couple of parents with sensitive jobs and one very minor celeb. Not that anyone wants their details broadcast but they really need to be more careful. I have no faith that it won't happen again.

[HeartsTrumpDiamonds]

Which is why you need to complain, properly, through the correct channels this time. If this happened in my school, heads would roll!

[ThisIs]

In your written complaint to the school make sure you tell them that you have also complained to the ICO. They should put training or awareness in place for their admin staff anyway, but if the ICO is not satisfied that it is being adequately addressed, or they deem it a serious breach the school may be fined or at the very least closely monitored for a while.

[notthefirstagainstthewall]

Thank you. We have something to go on now.

tizzwozz that's what I'm worrying about too...