School mistakenly emails new starters' spreadsheet to parents

Horizon Academy Trust has reported itself to the Information Commissioner's Office (ICO) after administrators at East Park Primary School in Hull mistakenly attached a spreadsheet to an email intended to invite new starters to a welcome meeting.

A parent reported receiving the spreadsheet on 4 June, which contained the personal details of other children due to start in September. The spreadsheet included details on the relationship status of some parents, including potential special education needs and explicit reasons for admission.

Following the incident, the school sent a subsequent message instructing recipients to delete the email immediately without opening the spreadsheet, and to ensure the information was not shared. Horizon Academy Trust confirmed that a full internal investigation is underway and that the school is contacting all affected families to offer support.

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.