Active discussions

Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Talk
AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Original poster

What does the school have to do now?

140 replies

MrsDylanBlue · 27/05/2018 17:04

My data protection consent form arrived from DS2 school yday.

It contained the slip along with a form which had my address, DS2 dad’s address and his mother’s (who is emergency contact) and phone numbers, our with our Drs info and DS2 medical info and all three of my children’s full names and dates of birth.

The envelope was unsealed and the flap hadn’t even been folded down meaning any number of people may have read it and replaced it.

I have emailed the school alerting them to this and asking them to follow their data protection breach policy.

Can anyone tell me what they need to do now (obvs after half term!). Do they need to contact everyone whose data protection has been breached etc?

OP posts:
Sugarhunnyicedtea · 27/05/2018 17:35

Is it @scrumples?
Our training manual was wrong then - it was the one thing we had concerns about 😂

Original poster
MrsDylanBlue · 27/05/2018 17:35

CantCopeAnymore You do realise that if you are on the electoral register, anyone can buy your data

I am fairly sure they cannot but my families medical information.

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 17:35

*buy

OP posts:
scrumples · 27/05/2018 17:36

This reply has been deleted

Message withdrawn at poster's request.

MsJolly · 27/05/2018 17:36

Go for it and get your kids school fined then...and then come back on here moaning that your son is in a class of 40children with only one teacher and no TA and that you've been asked to provide all his stationary.

This happened to me in that I actually received another child's data(same surname). I phoned school and they did an internal investigation and it was taken seriously and I am sure won't happen again

willdoitinaminute · 27/05/2018 17:36

Report the breach to School, they will then investigate and report. Their Data protection officer will make a decision re reporting to ICO.
This is just what GDPR has been brought in for, however in the mad rush to comply with the new rules organisations have been misinformed by ‘specialists’, charging vast sums of money and quite frankly creating chaos.
The school will be able to learn from this

  1. not to include sensitive data
  2. to seal bloody envelopes
I would suggest to them that it would have been better to send out a blank form to update your contact details with a section for the new consents.They probably got ‘the memo’ from the LEA at 4pm on Thurs because someone realised at the last minute that it would need to be done.
scrumples · 27/05/2018 17:36

This reply has been deleted

Message withdrawn at poster's request.

TheDrinksAreOnMe · 27/05/2018 17:37

Ahhhh as expected, everyone’s an expert and offended thanks to GDPR being touted so loudly recently.

We are only human.

ScoobyGangMember · 27/05/2018 17:37

It was a near miss, not a breach.
No need to report to the ICO.
There is no chance of the school being fined for this.

sprinklesandsauce · 27/05/2018 17:37

Total over reaction on your part and people like you are going to cause a serious problem to schools and businesses.

If the school emailed your details to everyone then that would be serious, this isn’t.

Our school were still applying card charges on things under £10; which became illegal in January. I emailed them to point it out so they could amend it and not get into trouble. That’s the sensible thing to do in your case too, notify them and accept the apology.

Original poster
MrsDylanBlue · 27/05/2018 17:38

It’s nothing to do with not liking the school.

It’s about them being accountable.

I have to give them and trust them with a huge amount of my personal information.

To just flagrantly disregard my confidentiality is disgusting.

It had sensitive information in there.

OP posts:
Sugarhunnyicedtea · 27/05/2018 17:38

I'm not saying I don't believe you. It makes perfect sense that way. I should have googled it at the time

scrumples · 27/05/2018 17:39

This reply has been deleted

Message withdrawn at poster's request.

Original poster
MrsDylanBlue · 27/05/2018 17:40

So no one would be pissed off if they received a letter from the Drs which wasn’t sealed or even folded down.

OP posts:
Sugarhunnyicedtea · 27/05/2018 17:40

To just flagrantly disregard my confidentiality is disgusting.

Ffs they haven't! It was an error. What do you want to happen??

Gemini69 · 27/05/2018 17:42

Maybe you could send the school a supply of cellotape for all your future correspondence... just ensure secure transit .. put your name on it though.. in case they inadvertently use it for someone else's correspendence.. Grin

Original poster
MrsDylanBlue · 27/05/2018 17:42

These things normally are an error!

OP posts:
Nicknacky · 27/05/2018 17:44

I think I would have barely given it a second thought if it was unsealed.

Original poster
MrsDylanBlue · 27/05/2018 17:45

I would be pissed off if it was the bank, the Drs or the school.

I don’t have any beef with the school at all.

OP posts:
scrumples · 27/05/2018 17:45

This reply has been deleted

Message withdrawn at poster's request.

Fruitcorner123 · 27/05/2018 17:45

OP I get why you are annoyed. People are being harsh here.

ICantCopeAnymore · 27/05/2018 17:46

No, I wouldn't be pissed off in the slightest.

Are you usually this neurotic?

scrumples · 27/05/2018 17:46

This reply has been deleted

Message withdrawn at poster's request.

Original poster
MrsDylanBlue · 27/05/2018 17:47

It’s got info about DS2 ASD diagnosis and other health issues and all the phone numbers and info about his dad etc.

I am not after anything other than whoever is responsible for this to realise how serious this could have been.

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 17:48

It’s a consent form to give permission to handle my data - ironically.

OP posts: