To think this isa terrible breach of confidentiality??

[Gcn]

Just had 2 emails from my child's school - think sent to a group distribution list. Saying that DD did not respect others, then giving details of poor behaviour of another pupil with a distinctive name. Further email then sent saying to ignore the previous emails nothing to do with DD.

Aibu to think this is appalling and that the school needs to seriously consider it's emailing processes. If I was parent of either of the other children I'd be fuming!

It was clearly a mistake. It's happens
Yes, a breach of GDPR but the procedure for it would be:

• Self report the breach
• Contact those who recieved the email incorrectly telling them to disregard and delete (especially if contained open emails)

They've done the right thing by immediently chasing it up

It's a data breach and a process will need to followed. There is probably a mortified member of staff now.m

My son is disabled and the amount of times I’ve had EHCP review drafts for other children is unreal. I get it happens but it shouldn’t.

Our new school secretary sent an email to everyone with full list of parents addresses /phone numbers and emails... Then an oops delete that email email... She was new.. Nobody cared I don't think...

It's not a reportable breach it's an oversight by the sender which was identified and an attempt to rectify it was made.

Are you going to publish this email anywhere? No, presumably. So it's a neat miss.

If you had forwarded it onto a whole host of other people, then a reportable breach that the school we're responsible for would have occurred

Yes, looks like school are following the right procedures.

But school wouldn't know if OP had forwarded the email to third parties. Surely it's either reportable to ICO or it isn't?

The messages have gone out to all parents, not just to the wrong parents.

It's only reportable if there is an impact on rights and freedoms of the data subject.

In this case, it's an oversight. If the girl goes viral as a result, it becomes reportable.

Example of a reportable breach- unencrypted laptop containing passport numbers and names and addresses dates of birth of 10,000 people left on a bus.

Email addresses not bcc'd on a communication about treatment for STIs.

Email about one girl sent in error is not reportable unless impact can be quantified

It is reportable as data was shared incorrectly

It's most likely to be dismissed, no fine, as an obvious mistake but better to report before someone else reports the other way and they are in trouble for not reporting

Me too - Starts with my DS name, then suddenly becomes another child, with very different activities and needs, including that they like to spend time with their dog etc