I believe that if the photo or video is taken by Gran or Dad for personal use then it's not against the data protection act.
If it is taken by school for the walls, system etc then it's not against the data protection act.
As soon as it involves a third party or publication in the media, for profit, school prospectus etc then it can become a data protection issue.
I. E dc school has photos without my permission on the system and wall.
But
When they wanted to use them in the prospectus I was asked for permission, as was I for social media and such as it is promoting the school.
When dc1 was filmed at a free Disney event happening which was in a public area (where technically anyone can take photos of anyone) I was asked for permission for her to feature in the promo.
Regardless of that any school or pta that goes ahead with including a child in a video for the sake of money no matter the risk is bonkers and incredibly selfish.
On the other thread there was a lady with an adopted child who had to move not only schools but areas due to a similar incident.