Active discussions

Please or to access all these features

Talk
AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Original poster

Gdpr breach

83 replies

Whatsthebl00dypoint · 14/12/2023 00:31

If your child's school sent out an email CC"ing in over 80 parents with their child's name and parent's email addresses, and it was a specific category of children eg. SEN or Pupil Premium, is that a serious breach of data privacy?

I'm considering whether to make a formal complaint to DD's school since this happened the other day as we have not recieved an official apology or explanation how this was able to happen although it was likely human error. I know mistakes do happen but this seems pretty big for them to remain silent over. There was no sensitive information in the email, just a very general one. But it's the fact that the list of children is very specific and not all families will want this information public for obvious reasons.

OP posts:
ACynicalDad · 14/12/2023 00:59

We had a cc incident at school with a reception teacher sharing a list of first names for Christmas cards. It’s a lovely idea but should have been bcc. I told the school so they can train the teacher, no need for more than that.

Youcannotbeseriousreally · 14/12/2023 00:56

Was this the school that sent out the behavioural incidents with all the personal information on????

Reugny · 14/12/2023 00:56

Well then you should today.

Original poster
Whatsthebl00dypoint · 14/12/2023 00:51

It's a very multicultural school with English not being the first language for many families. So I can't see many people complaining in all honesty which is probably why the school isn't too bothered. I've sat on my hands the past couple of days to see what the school does and whether someone gets in touch. Nobody has of yet.

OP posts:
Tinkerbyebye · 14/12/2023 00:50

Any identifying data sent out without that persons consent is a GDPR breach

so yes this is a breach and the school should be taking it seriously

Original poster
Whatsthebl00dypoint · 14/12/2023 00:48

Thanks @Objectrelations what if though, it was a child with a hidden disability and they didn't want others knowing? Or a FSM child who'd hidden this from their peers for fear of bullying? Or a vulnerable family and now the child's name and parent's email address is out there for 80+ families to see?

I'm hoping the school will have reported itself to ICO as per the rules, but just an apology would be enough for me. They cannot just gloss over this mistake as if it didn't happen.

OP posts:
ASandwichNamedKevin · 14/12/2023 00:48

But even if everyone could tell your child has SEN you still wouldn’t necessarily want them all to have your email address.

So the two issues are sharing information that some children or families might have wanted to keep private, AND sharing of parents’ email addresses.

I would be asking the school what they are going to do about it.
An apology and a reminder to people to delete the information and contact details would be first steps, the rest depends on how sensitive the information and how much people complain I guess.

Objectrelations · 14/12/2023 00:39

I wouldn't personally but it's up to you. Everyone can tell my child has SEN - so an email won't make any difference!

Swipe left for the next trending thread