School published photos of my child after signed no to the form.

[Jaynee29]

I signed a form with my daughter’s school not to have her photos on their school website and school page on Facebook. The account is a private one which needs to be approved by the staff in order to join with over 200+ of parents who I do not know.

After singing the form, few photos of her were placed onto their Facebook page. I contacted them about this and received an apology regarding this. Fast forward three days later and they have posted two posts both on separate occasions with multiple photos of my daughter on their Facebook page again. I have now sent another email regarding this matter stating I was offered reassurance this would not happen again, however it has. What should I do should this happen again?

You can report it to Facebook. Give the school one chance to remove or you'll report their page to fb

Complain to the safeguarding lead, ask to see their safeguarding policy and complain to the school governors.

If you don’t get a satisfactory response you could escalate to your local authority.

Ask what steps they have taken to ensure there is no repeat.

What they did before is not working, and any gaps should have been closed. This would have been addressed with changes in their policy and procedures.
It would have been remiss not to have acted. The error should have been reported to the board, questioned to ensure that there would be no repetition.

Errors happen but it is what you do to mitigate the problem that is important.

You could request all images are deleted if they are unable to keep them safe.
The school may decide to block out everyone's face in that cohort or ensure your child is removed from all photographs that is intended for the website.
Ultimately you can report to the ICO.

thank you!! it was okay for a few months, blocking out her photos but now they’ve done it again two photos with her as the main person in them. I’ve sent an email further expressing my concerns and addressing that it’s disheartening to be ignored

I would be going in with a formal complaint using the layout of the second letter

https://ico.org.uk/for-the-public/how-to-make-a-data-protection-complaint

And asking for them to explain how the school is processing the data (image) by asking as many "small" questions as possible so that they need to "walk" your childs data through their DP policy as a test case.

Once received by the school who is ultimatly responsible for processing and actioning the permission slip data?
How is that data processed and how is it attached to images collected and stored by the school?
Is your childs teacher informed of the restriction?
Is the teacher trained in DP by the school?
How often did this happen since your child joined the class?
From who is issued with permission to take pictures of the children?
If this is not your childs teacher what role does s/he play in the process?
What DP training is given to these individuals?
What equipment is used?
Where and how the data is stored?
(Eg if camera and uploaded on to school network the uploader should be splitting/tagging the images into ok for FB or not)
Who has permission to access the stored data?
How are they recording who accesses the data?
If it is possible to make unaithorised copies of the data?
Who is responsible for the FB page
What training DP do these people get?
Why is the individual given access to your childs stored data?
Do they have an obligation to check that they have specific permission to publish the data they access to avoid error?

Then go over what happened the last time
And ask how the school ended up publishing her data
If and what changes were made to prevent a data breach
Eg the teacher should have been trained that your child is not to be included in pictures which end up on FB

Then do the same for what happened this time and do they class this a a data breach which needed to be reported to the ICO

https://www.gov.uk/data-protection/make-a-complaint

Definitely complain to the ICO, this is really poor after you have already drawn their attention to it

The ICO will do nothing.

The ICO dont need to do much once the school attempt to embed the DP policy into the daily activity of the school