My contact details being shared with DS’s class

[NameChangerDanger]

DS recently started primary school. There’s a WhatsApp parents group that I’m a member of, but have no inclination to actively use.

A message has come through from one of the parents saying that it’s assumed we’re all ok with our details being compiled into a list and put into book bags

Another parent has asked what details this will include and it’s child’s full name, parent’s full name, contact number and e-mail address. It’s going to be sent out tomorrow or the next day unless people actively object.

I am really quite annoyed by this. My mobile number is obviously available via the WhatsApp group, but I haven’t given my e-mail address out to everyone on the list or given permission for this list to be created. AIBU?

Would gdpr even apply to name, email and phone number- its hardly identifying/sensitive data.
Its probably for sending round party invites, organising teacher collections etc- I'm glad the other parents in my dcs classes are not as dramatic as you

@NameChangerDanger - if I were you, I would email immediately saying you do not consent to your details being included, AND that they should not include anyone’s details unless they have specific consent. A simple failure to respond to the email should not count as explicit consent - and you think they should reissue the email asking for all parents who are happy to have their details included should give consent, and no-one’s details will be included without this consent.

They shouldn't be including anyone's details unless that person has explicitly agreed - that's just good manners, even if you ignore privacy concerns

I did paper invitations in the past but chased the non-RSVPers by text.

I just set up a WhatsApp Group now, much easier than paper invitations going missing.

@user1474894224 I have to disagree - the class reps (parents) frequently send out info in relation to class trips at my DD school, asking for volunteers for trips etc

Also re party invites - I’ve never received a paper one, all the other parents send them by email only.

Would gdpr even apply to name, email and phone number

Yes it would, but they are explicitly asking for parents to provide them and therefore opt in. Parents have already consented to sharing name and phone number by being in a WhatsApp group.

This sounds like the school is not following GDPR legislation. Surely you should be actively opting in, rather than the school assuming consent? I'd want a conversation with the head teacher.

It's also brilliant to be able to get reminders that it's non-uniform day on Friday, bring a pound and all the myriad other bloody things to remember.

What is it to do with the school? It's parents organising the list.

I'd say no and point out other parents might not have checked, so parents need to opt in rather than opt out.

It's not a breach of GDPR if they are getting your express consent and saying what it's for. That's literally why they are asking!

Nope

There are plenty of rules around GDPR and you can't simply use the 'Oh I got their permission'.

You need to state clearly why you need the info, how long it will be stored, what security measures are in place and a load of other things. The person who set it up needs to register with the official government site too.

I don't have an issue with anyone having my email. You can easily delete or put emails into spam but a phone no is more intrusive.

@Inertia The OP says it's a parent setting this up not the school. That parent needs to go to the GPDR site and register if they want to collect data, and pay the fee.

Would gdpr even apply to name, email and phone number- its hardly identifying/sensitive data. yes of course it would. Storing anyone's data includes their name and number and more.

whatsapp groups are only used for stealth boasts and bullying

You must know some really shitty people 😂
My class whatsapp group is lovely, we use it to remind each other of school things, discuss homework, children’s parties etc.

I don’t think yabu, I don’t see the point of compiling a list of details for the parents at all. You should let them know ASAP.
The whatsapp hate from OP is funny though.

They’re not asking for additional info from us- they have it. Via what means, I’ve no idea.

I spoke with a teacher. He said he didn’t know what was on the list but he would check that consent is being properly obtained before agreeing to share anything. Said he was glad I spoke up, but probably has my card marked

.....because of gdpr the school will not be doing anything by assumption.

That's a cute idea, but wholly at odds with reality.

My organisation works with schools, and with children's data. We had everything wrapped up watertight before the legislation was enacted.

Somehow schools have got even worse with data security. We're very clear about the absolutely minimal staff and child data we need to provide our services, but we've been sent children's logins to secure sites, teacher's staff absence records... you name it.

Schools have no handle on this whatsoever, and a little knowledge goes the wrong way.

Of course you can refuse and I do take your point about the short notice for other parents to refuse but out of interest what are the unsavoury things one could do with this information should the list fall out of a bookbag?

OP the parent who set this up needs to read this..

www.gov.uk/data-protection-register-notify-ico-personal-data

The whatsapp hate from OP is funny though.

I don’t hate WhatsApp! I’m not a massive fan of receiving hundreds of messages all telling me the same thing the school e-mailed and sent me a written note about, but that’s not WhatsApp’s fault.

@Booboostwo Identity theft for a start. It doesn't take much to piece together a name, phone no, email, address and then start to hack into accounts or try to commit fraud.

@CosmiaGreen ah OK- it sounded to me as though the school had prepared the information lists from the information they held, and had just left a parent to run the distribution. I didn't realise that the parents had already given the information to the class rep.

Just text on Whatsapp and say you are only happy with using the Whatsapp group and don't want to share any other details with other parents.

CosmiaGreen so ID theft guy is walking along, finds the list on the pavement and then hacks into accounts and commits fraud? Doesn't that seem a tad exaggerated to you? Also impractical, as there are much, much easier ways of getting this information online, especially if you are a hacker?

what are the unsavoury things one could do with this information should the list fall out of a bookbag

It’s easy these days to make it look like you’re using someone else’s number. A call to the school along the lines of “hello, this is [parent name], parent of [child name]. I can’t collect them today due to an emergency...”

This is very unlikely to happen to me and my child, but a child who is vulnerable already, is put at unnecessary risk. It doesn’t really matter how small the risk is either.

It sounds like the class rep is very enthusiastic in their new role and got carried away with themselves, hopefully now you have spoken to the class teacher it will get sorted.