School and data protection

Ginandcolic · 2023-03-08T13:59:19+00:00

Hello all, I don't know if I'm being massively oversensitive and looking for reasons to get angry at DD's school or not. Quick background: DD (YR6) was bullied a few months ago - the school dealt with this well, put appropriate sanctions in place, have followed up with additional measures for the bully and checking in on DD. I'm not sure how much of this they would have done without me driving it but to be fair to them, they have responded to my concerns whenever raised. However, one of the teachers has a DC in DD's year (not same class) and has clearly accessed notes from conversations I've had with the school about the bullying and reflected them back in WhatsApp chats with me. We are not particularly close and neither are our kids. I know she may need to access data like that as part of her role but to use the detail of sensitive conversations out of context has really pissed me off. Today, the school has sent out an email to approx 50 parents from different year groups with everyone on cc rather than bcc. Both of these incidents have given me the rage and I do not know if it is reasonable to complain? I think I am just really angry about the clear use of private info about DD but this, compounded with the email fuck up is making me question their data protection / privacy policies. I work in a field where either of the above incidents would be a sackable offence - or at least one that would lead to huge disciplinary interventions - so again, this could be colouring my reaction. Would love some calm perspectives on this - should I complain about both / either incident? Or just go and have some tea and calm down!

BibbleandSqwauk · 08/03/2023 14:02

Id be more worried about the cc issue than the messages..if the teacher works at your dd's school she probably is aware of issues anyway and "normal" bullying is something all staff should be aware of to look out for anything. (Different to a safeguarding type of thing which is need to know only). I'd get onto to them about the email. That is a breach of gdpr and needs fixing quickly.

SnowLemons · 08/03/2023 14:04

The CC instead of BCC is an amateur mistake and they need to be made aware as there's no need for any capable email user to do this. They possibly need to sack the person who sent this and rehire.

Original poster

Ginandcolic · 08/03/2023 14:04

Thanks @BibbleandSqwauk ! That's very helpful and interesting that the bullying would be widely known about to help watch out for DD, makes me less rageful

OP posts:

MoneyInTheBananaStand · 08/03/2023 14:04

I would be concerned personally at a teacher using WhatsApp to communicate with me.

Was this originally because of events outside school for the children? I.e. not to do with her teacher role?

I think the blurring of boundaries there is unprofessional - you say neither you or the teacher are friends and neither are your children.

That combined with referencing material that should be held in school would warrant a reminder to the teacher about confidentiality and professionalism, in my opinion

(Not a teacher, but work in a professional role in a school)

The cc/bcc problem is an issue and I think they should be raised separately if possible. Is there a gdpr/data protection lead in the school? Go directly to them.

Comefromaway · 08/03/2023 14:05

I would be very worried about the cc. In my children's school alone I could name parents who were teachers, police officers, social workers, a psychiatrist (who was followed around town with his kids by an ex patient) and all sorts of parents with reasons not to give out their email addresses to other parents.

Original poster

Ginandcolic · 08/03/2023 14:05

Thanks @SnowLemons , good to know it's not just because of my ridiculous job that I'm prickly about this!

OP posts:

Original poster

Ginandcolic · 08/03/2023 14:08

MoneyInTheBananaStand · 08/03/2023 14:04

I would be concerned personally at a teacher using WhatsApp to communicate with me.

Was this originally because of events outside school for the children? I.e. not to do with her teacher role?

I think the blurring of boundaries there is unprofessional - you say neither you or the teacher are friends and neither are your children.

That combined with referencing material that should be held in school would warrant a reminder to the teacher about confidentiality and professionalism, in my opinion

(Not a teacher, but work in a professional role in a school)

The cc/bcc problem is an issue and I think they should be raised separately if possible. Is there a gdpr/data protection lead in the school? Go directly to them.

No it was raised along the lines of, "I heard xyz happened" and then asked if her DC was involved so referencing it did feel very inappropriate (even if her seeing the info was not).

Yes good shout re the GDPR lead, thanks

OP posts:

SnowLemons · 08/03/2023 14:09

Ginandcolic · 08/03/2023 14:05

Thanks @SnowLemons , good to know it's not just because of my ridiculous job that I'm prickly about this!

I might be bias as I work in a job where that would mean I'd be in trouble. If on probation I'd be let go. It's that serious.

Original poster

Ginandcolic · 08/03/2023 14:09

Comefromaway · 08/03/2023 14:05

I would be very worried about the cc. In my children's school alone I could name parents who were teachers, police officers, social workers, a psychiatrist (who was followed around town with his kids by an ex patient) and all sorts of parents with reasons not to give out their email addresses to other parents.

Same in DD's school. I'm far too boring to be endangered by the sharing of any personal info but there are others who are not.

OP posts:

Original poster

Ginandcolic · 08/03/2023 14:10

SnowLemons · 08/03/2023 14:09

I might be bias as I work in a job where that would mean I'd be in trouble. If on probation I'd be let go. It's that serious.

Show quote history

Same here - I'd be out on my ear faster than I could spell GDPR but I always wonder if that means I'm expecting too much for organisations that do not have that kind of pressure. But I guess data is data regardless?

OP posts:

SnowLemons · 08/03/2023 14:10

Ginandcolic · 08/03/2023 14:09

Same in DD's school. I'm far too boring to be endangered by the sharing of any personal info but there are others who are not.

Show quote history

You also don't know that for sure though. Not meaning to scare you but you don't know who has your info. They might have a crush on you and turn stalkerish or sell on your details to hackers.

Original poster

Ginandcolic · 08/03/2023 14:10

SnowLemons · 08/03/2023 14:10

You also don't know that for sure though. Not meaning to scare you but you don't know who has your info. They might have a crush on you and turn stalkerish or sell on your details to hackers.

Show quote history

Fair point re the hackers, hadn't thought of that

OP posts:

SnowLemons · 08/03/2023 14:11

Ginandcolic · 08/03/2023 14:10

Same here - I'd be out on my ear faster than I could spell GDPR but I always wonder if that means I'm expecting too much for organisations that do not have that kind of pressure. But I guess data is data regardless?

Show quote history

I know what you mean. But yes data is data and its serious. Even if they don't sack the sender immediately it needs addressing.

MrsCat1 · 08/03/2023 14:13

The cc message was probably sent out by an admin person earning just above minimum wage. I'm sure they will be mortified when it is pointed out. It's an easy mistake to make. I wouldn't get in a rage about it.

Lonelyplanet · 08/03/2023 14:14

The cc email thing is not good, but probably a mistake that needs mentioning.

Why do you have a personal WhatsApp number for a teacher who is not your friend? This seems very odd and you should stop using it. Make sure all communication goes through tye school email system, it will cover you both as there will be a record. All relevant staff should have been informed about the bullying to keep tabs on it.

SnowLemons · 08/03/2023 14:15

MrsCat1 · 08/03/2023 14:13

The cc message was probably sent out by an admin person earning just above minimum wage. I'm sure they will be mortified when it is pointed out. It's an easy mistake to make. I wouldn't get in a rage about it.

It's basic Email admin.

Original poster

Ginandcolic · 08/03/2023 14:22

Lonelyplanet · 08/03/2023 14:14

The cc email thing is not good, but probably a mistake that needs mentioning.

Why do you have a personal WhatsApp number for a teacher who is not your friend? This seems very odd and you should stop using it. Make sure all communication goes through tye school email system, it will cover you both as there will be a record. All relevant staff should have been informed about the bullying to keep tabs on it.

It's because her DC is in my DD's year so we're all on the year group WhatsApp and she reached out to me directly

OP posts:

CatOnTheChair · 08/03/2023 14:22

The teacher was unprofessional in sharing something she'd learnt in a professional capacity (and I think she should have known for work purposes) with you. I don't think school have done anything wrong here the individual is at fault.

The bcc/Cc bit is worse, and needs mentioning.

Original poster

Ginandcolic · 08/03/2023 14:24

CatOnTheChair · 08/03/2023 14:22

The teacher was unprofessional in sharing something she'd learnt in a professional capacity (and I think she should have known for work purposes) with you. I don't think school have done anything wrong here the individual is at fault.

The bcc/Cc bit is worse, and needs mentioning.

Thanks, yes that's a helpful distinction in terms of separating the teacher vs the school.

OP posts:

MoneyInTheBananaStand · 08/03/2023 14:38

Ginandcolic · 08/03/2023 14:08

No it was raised along the lines of, "I heard xyz happened" and then asked if her DC was involved so referencing it did feel very inappropriate (even if her seeing the info was not).

Yes good shout re the GDPR lead, thanks

Show quote history

Ok so the context makes it sound even worse!

She's just fishing for info isn't she? Totally inappropriate and the head should be informed.

Nowthenhere · 08/03/2023 14:45

Huge safeguarding issues here. A teacher reached out to you directly. So she's used a number that was meant for group discusion/updates with parents as an opportunity to discuss teacher-pupil knowledge. It gives the opportunity for someone with a level of power to access and share. It's less than appropriate and unless she's stating how she's going to reduce your daughters risks directly, it's not even a slight reason for this.

Did you consent to share information about your child's bullying on a different platform?
Did you consent to detailed discussions of the bullying being open to all teachers and all teaching staff?

I would report the teacher. I would report them for both reasons.

The cc part: I would just reply to all "thanks to the teaching staff x, I now have your email address and you have mine. "

Original poster

Ginandcolic · 08/03/2023 14:47

MoneyInTheBananaStand · 08/03/2023 14:38

Ok so the context makes it sound even worse!

She's just fishing for info isn't she? Totally inappropriate and the head should be informed.

Show quote history

Yes it did feel like fishing and very self-motivated like "I know this about your child and now tell my what your child said about my child." Very odd

OP posts:

Original poster

Ginandcolic · 08/03/2023 14:48

Nowthenhere · 08/03/2023 14:45

Huge safeguarding issues here. A teacher reached out to you directly. So she's used a number that was meant for group discusion/updates with parents as an opportunity to discuss teacher-pupil knowledge. It gives the opportunity for someone with a level of power to access and share. It's less than appropriate and unless she's stating how she's going to reduce your daughters risks directly, it's not even a slight reason for this.

Did you consent to share information about your child's bullying on a different platform?
Did you consent to detailed discussions of the bullying being open to all teachers and all teaching staff?

I would report the teacher. I would report them for both reasons.

The cc part: I would just reply to all "thanks to the teaching staff x, I now have your email address and you have mine. "

Really good points. No, I did not consent to any of it.

OP posts:

Allmarbleslost · 08/03/2023 14:53

The WhatsApp is unprofessional and the teacher concerned should be spoken to. I would report that to the headteacher. The cc thing will be reported to the ico by the school - it will be classed as a minor breach though and there won't be any consequences for the poor overworked admin person who made a genuine mistake.

babybythesea · 08/03/2023 15:03

Ginandcolic · 08/03/2023 14:04

Thanks @BibbleandSqwauk ! That's very helpful and interesting that the bullying would be widely known about to help watch out for DD, makes me less rageful

Just to say that this would be totally normal in my school too. Everybody is made aware of any ongoing issues between children. Especially lunch staff and TAs who are more likely to be supervising break times. It’s so if a child comes to you and says “Fred just called me an idiot/bumped into me” or whatever you can respond appropriately. If you think it’s a one off you might respond with ‘we don’t do that, do we Fred? Can you say sorry?’ or whatever the process is in your school. Which leads to “Harry’s bully pushed him again and he told the staff and they just asked Fred to say sorry, nothing else happened and I’m sick of it.” because you are unaware it’s part of a pattern.

On the other hand, knowing there is an issue puts you on alert. You watch to see where Fred is going, and whether he seems to be making his way deliberately towards Harry, and if so you can drift that way yourself and head things off before they happen. And if something does happen, you can deal with it properly in the context of an ongoing issue.