data protection

[decidedlydizzy]

My DDs primary has issued a data collection form to parents, via child's school bag, to be amended if applicable, signed and returned. Problem is that forms have been given to the wrong children. I have another child's form which contains name, DOB, medical conditions, ethnicity, religion, parental responsibility etc..Does this breach data protection and if so what is recommended course of action? I do know the child's mum and have informed her and in this instance there isn't anything that I don't already know. But supposing there had been something sensitive there on the form? Also, other children had been given the wrong forms and all sorts of information could now be "out there" which is concerning. TIA

Yes, that's very very much a breach of data!!

No idea who you'd need to complain to though....I'm sure someone who knows will comment soon.

Whilst your may be right what happened to compassion were human and errors are made x

It will be an ombudsmen I'd imagine. Anywhere below that level will try and brush it under the carpet.

Www.ico.org.uk

Or the head teacher in the first instance.

Definitely a breach of data protection. In the first instance you should contact the school. If you are unhappy with their response you should take it to the Information Commissioner (www.ico.org.uk/complaints).

thanks for the advice. I'll put something in writing to the Head and see what happens.

update- I emailed the Head and the response was an apology and an assurance that in future forms would be issued in named envelopes, which I was happy with. Later the same day my other DD (different class) brings her form home....but not in a named envelope! Am I right in thinking that my concerns have not been adequately addressed and if so what's next? Thanks for any advice.

Maybe your daughters letter was handed out before their change in policy? Might be worth just keeping an eye out and see what happens next time. There's no excuse for it to happen again.

As it was the same day I would ignore this one. If your daughter was given the correct form there was no data breach and it often takes time for a change in policy to filter through so that everyone is implementing it properly. If the problem continues you can either raise it with the head again or refer to the ICO.

thank you- this has helped me to decide the best course of action. I will email to thank for the apology and leave it at that. Thanks again.