To mention this to the school?

[AngryGreasedSantaCatcus]

I received an email today regarding DD and some other pupils(nothing back). Sent an email back to clarify something and I and all the other parents received a reply /updated message also quoting my email . So now I can see the email addresses of 10 other parents and recognise 2 of them, and they can see my reply plus full name and email address. I'm not particularly bothered about it tbh, but from my basic GDPR training this seems like a breach. Should I email and let the teacher know or leave it?

On one hand she probably realised herself and is probably kicking herself. Plus DD has just started this year and I don't want to seem/sound like THAT parent.

On the other, maybe she hasn't and maybe some training/support is needed with emailing parents/data confidentiality before someone does complaint or there is a more serious breach and the school is in proper trouble.

It's not a GDPR breach if it was just the email address. GDPR is a lot more specific than anyone thinks..But it can obviously be a breach of the school's own data protection policy.

Sounds like GDPR to me. I'm a teacher & would be in trouble. Even my choir leader apologised profusely for not hiding email addresses on a mass email & made us all delete before reading!

She may not have realised. Where I work someone did the same and it caused a huge uproar due to GDPR as the email addresses were not hidden.

I’m always THAT parent. I can practically hear the people in the office groaning awaiting my moody email, but this happened to me and another parent used my mail to network for their business , I didn’t like it at all.

Even if it had my full name as she quoted my reply/email?

Just checking as I don't fully understand it all about GDPR so in my job I just err on the side of caution.

I think it is. This happened in my sons school. A parent replied to an email and the teacher replied, sending the email to the parents of the whole year with all the emails on cc not bcc so could all be seen.
headteacher emailed the next day apologising for the gdpr breach, letting us know it had been logged with the ico and school we’re putting training in place to ensure it wouldn’t happen again. I also wasn’t arsed but it looked like it was a huge deal for the school

Email address is considered a gdpr breach as it's personal data, you should have all been blind cc'd

I would check what the GDPR rules are so you know whether they are breached or not, and then take the course of action appropriately.

It is a GDPR breach, not one that's going to incur fines and big big trouble, but it is a breach as personal data that can identify a unique individual 'data subject' has been provided to people who should not have it.

Yes it's worth mentioning because the school will have a procedure they need to follow to address it.