A governor at school has broken confidentiality and data protection about pupils. How can this be addressed? Seems unprofessional.