Active discussions

Meet the Other Phone. Only the apps you allow.

Meet the Other Phone.
Only the apps you allow.

Buy now

Please or to access all these features

Talk
AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Original poster

What does the school have to do now?

140 replies

MrsDylanBlue · 27/05/2018 17:04

My data protection consent form arrived from DS2 school yday.

It contained the slip along with a form which had my address, DS2 dad’s address and his mother’s (who is emergency contact) and phone numbers, our with our Drs info and DS2 medical info and all three of my children’s full names and dates of birth.

The envelope was unsealed and the flap hadn’t even been folded down meaning any number of people may have read it and replaced it.

I have emailed the school alerting them to this and asking them to follow their data protection breach policy.

Can anyone tell me what they need to do now (obvs after half term!). Do they need to contact everyone whose data protection has been breached etc?

OP posts:
ScoobyGangMember · 27/05/2018 17:11

While this is obviously not good, it's a near miss not a breach. The letter was delivered and didn't fall into the wrong hands. (Its possible that a post worker read the contents but not likely. Why on earth did they send all that in the post anyway unless you asked them to? They only need to describe tbe data they hold, not list it all.They were idiots and need to apologise to you and tighten up procedures. They don't have to report this to the ICO.

grasspigeons · 27/05/2018 17:12

I think they need to report the breach to the ICO who will help them look at their processes

Original poster
MrsDylanBlue · 27/05/2018 17:13

The letter was delivered and didn't fall into the wrong hands

Hmm how do I know it didn’t fall into the wrong hands before it got to me?!

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 17:13

Bold fail sorry

OP posts:
hoopdeloop · 27/05/2018 17:14

Are you sure everyone in the school received their envelope like that? Could it be the case that whoever was doing all of them simply forgot to fold your son’s over properly (not saying it’s right, just a possibility)

To be honest, I’m not sure what they can do, it’s unlikely they will ask everyone if they saw your son’s form or anything. I think they may say to you that they will follow up with whoever had to print out the forms to put them in envelopes to see what happened and if the procedure had been followed correctly

Original poster
MrsDylanBlue · 27/05/2018 17:18

I have no idea if anyone else received theirs like that I can only speak for myself.

The glue bit hasn’t even been used - as in I could lick it and seal it.

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 17:19

I meant everyone as in DS2 Dad and grandmother.

OP posts:
scrumples · 27/05/2018 17:23

This reply has been deleted

Message withdrawn at poster's request.

ICantCopeAnymore · 27/05/2018 17:24

Seriously?

Biscuit
Anasnake · 27/05/2018 17:25

Was it posted or just put in the child's bag ?

Original poster
MrsDylanBlue · 27/05/2018 17:26

It was posted - he is yr 11.

OP posts:
Anasnake · 27/05/2018 17:26

If it was just put in the child's bag then you're being ridiculous

Anasnake · 27/05/2018 17:26

Sorry cross post

ScoobyGangMember · 27/05/2018 17:27

They do not need to contact the ICO about this.

Original poster
MrsDylanBlue · 27/05/2018 17:27

Having been the victim of having my identity stolen I actually take things like this quite seriously. That is a lot of very private info wide open to quite a lot of people.

ESP DS2 medical information!

OP posts:
Sugarhunnyicedtea · 27/05/2018 17:28

Ok. So the school have to report a potential data breach within 72 hours. As it's half term they would be in breach of that even before they know about it, which I believe means a potential hefty fine.
In reality I imagine nothing will happen as it's not a data breach, you received a letter with your information on it.

Original poster
MrsDylanBlue · 27/05/2018 17:29

The fines though are to make companies and organisations accountable and to be more careful with peoples personal information.

OP posts:
scrumples · 27/05/2018 17:30

This reply has been deleted

Message withdrawn at poster's request.

SalsaLala · 27/05/2018 17:31

FFS, really? Well that’s one way to mark yourself as ‘that parent’ forevermore!

scrumples · 27/05/2018 17:32

This reply has been deleted

Message withdrawn at poster's request.

mrsm43s · 27/05/2018 17:32

Talk about making a mountain out of a molehill!

I presume you already have some kind of beef with the school and are looking to cause them as much trouble as you possibly can.

The envelope was accidentally not sealed, or accidentally became unsealed - big deal. There is zero evidence at all that there has been a data breach.

I'd advise that you grow up, and stop looking for ways to make trouble for your child's school. Working co-operatively with your child's school is what is in the best interests of your child. Wasting their precious resources investigating a non-event is detrimental to the school and the pupils it serves, including your child.

ICantCopeAnymore · 27/05/2018 17:32

You do realise that if you are on the electoral register, anyone can buy your data?

Sugarhunnyicedtea · 27/05/2018 17:32

Seriously??
Having just completed GDPR training I'm not even sure it is a data protection breach. There is no evidence and you have your own information

Original poster
MrsDylanBlue · 27/05/2018 17:34

FFS, really? Well that’s one way to mark yourself as ‘that parent’ forevermore

A) any number of people could have had access to that information. A letter was posted to me which was wide open for anyone who handled it to read!
B) I couldn’t care less DS2 is about to leave anyway.

OP posts:
SmileEachDay · 27/05/2018 17:34

You seem to really want your school fined.

The fines though are to make companies and organisations accountable and to be more careful with peoples personal information

Do you not like them?

Swipe left for the next trending thread