Active discussions

Meet the Other Phone. A phone that grows with your child.

Meet the Other Phone.
A phone that grows with your child.

Buy now

Please or to access all these features

Talk
AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Original poster

What does the school have to do now?

140 replies

MrsDylanBlue · 27/05/2018 17:04

My data protection consent form arrived from DS2 school yday.

It contained the slip along with a form which had my address, DS2 dad’s address and his mother’s (who is emergency contact) and phone numbers, our with our Drs info and DS2 medical info and all three of my children’s full names and dates of birth.

The envelope was unsealed and the flap hadn’t even been folded down meaning any number of people may have read it and replaced it.

I have emailed the school alerting them to this and asking them to follow their data protection breach policy.

Can anyone tell me what they need to do now (obvs after half term!). Do they need to contact everyone whose data protection has been breached etc?

OP posts:
Sugarhunnyicedtea · 27/05/2018 17:49

In which case an email to the school would have sufficed. Not asking them to active data protection breach procedure then asking what they have to do now.

scrumples · 27/05/2018 17:49

This reply has been deleted

Message withdrawn at poster's request.

Original poster
MrsDylanBlue · 27/05/2018 17:49

The form with all the info has (Restricted Access) on it.

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 17:50

I am never going to know who read it - am I?

OP posts:
scrumples · 27/05/2018 17:50

This reply has been deleted

Message withdrawn at poster's request.

Sugarhunnyicedtea · 27/05/2018 17:50

No. End of

scrumples · 27/05/2018 17:50

This reply has been deleted

Message withdrawn at poster's request.

Bohemond · 27/05/2018 17:50

Discusting

Original poster
MrsDylanBlue · 27/05/2018 17:51

But they don't need consent to handle all of that dats you described there. Perhaps the granny contact details but not most of it

Of course they do?! His medical records and mine and his father’s names addresses phone numbers and all the kids dates of birth?

OP posts:
Dreamingofkfc · 27/05/2018 17:52

What do you think someone would do with the medical information?

Lou222 · 27/05/2018 17:52

If this happened to me I’d just think, oh they forgot to seal the envelope, and then move on with my life.

Original poster
MrsDylanBlue · 27/05/2018 17:53

What do you think someone would do with the medical information

It’s confidential information about him - I don’t care what they do with it - that’s not the bloody point.

OP posts:
Nicknacky · 27/05/2018 17:53

Why worry about who read it? You will never know if anyone did or not so I wouldn't waste energy on it.

ICantCopeAnymore · 27/05/2018 17:54

What do you possibly think could now happen?

Eveforever · 27/05/2018 17:54

I'm actually with you OP. I've had experiences with people not handling sensitive information about me properly and I found it rather distressing. I understand that mistakes happen, but that doesn't mean you shouldn't complain. Not taking the time to ensure the envelope was sealed is really careless. Given that your child is leaving the school soon I don't see any reason not to bring it up with the school. I seriously doubt the school would be fined over this, but I would hope they would learn to take more care in future.

Original poster
MrsDylanBlue · 27/05/2018 17:54

I find it quite worrying that people are so lax about what happens to their data actually.

OP posts:
Isleepinahedgefund · 27/05/2018 17:54

It’s a near miss and needs to be reported as such to the ICO, as per the GDPR. For all those saying it’s no big deal, it’s called a NEAR MISS because there was no consequence. It is still a problem though. It’s not making a mountain out of a molehill, and I bet you wouldn’t be saying that if it was you it had happened to.

Biologifemini · 27/05/2018 17:55

Go on, get the school a fine so they have to pay legal fees too.
That’ll teach them and any kids who need extra help and books but can’t get them next term.

Original poster
MrsDylanBlue · 27/05/2018 17:55

DH also has a job with high security clearance too so yes I am protective of our privacy and data.

OP posts:
Jaxhog · 27/05/2018 17:56

You've reported it Op. My understanding is that the rules are PRECISELY to stop this sort of sloppy, idiot behaviour, putting people's personal data at risk. Which it did. Hopefully, the school will learn from this that they need better procedures.

Original poster
MrsDylanBlue · 27/05/2018 17:56

Go on, get the school a fine so they have to pay legal fees too.
That’ll teach them and any kids who need extra help and books but can’t get them next term

It’s separate pots of money and the school will be insured under personal liability.

OP posts:
Original poster
MrsDylanBlue · 27/05/2018 18:02

It is still a problem though. It’s not making a mountain out of a molehill, and I bet you wouldn’t be saying that if it was you it had happened to

Exactly!

OP posts:
Jaxhog · 27/05/2018 18:02

The school won't get fined. But they need a rap on the knuckles for their lack of care. I'd report it to the ICO and/or ask the school what they will be doing to ensure this doesn't happen again.

The ICO are far more interested that people take better care than they are in fining people. Only persistent offenders will get fined.

A school should know better, quick frankly.

Jaxhog · 27/05/2018 18:02

quite frankly!

Isleepinahedgefund · 27/05/2018 18:03

It’s not “getting the school a fine”

If they get a fine (doubtful), they got themselves a fine!

If someone commits a crime and you report them and they go to prison, did you put them in prison?

FFS.

By the way I think you’ll find the school wouldn’t be insured for that. Insurers tend not to insure when you break the law. But the reason the legislation exists is so that your data is protected. The school needs to know so they can learn from the mistake and make sure it doesn’t happen again.

Swipe left for the next trending thread