A former client teacher told me by email that they were leaving school at the end of the year and wouldn't be in a position to run the next school ski trip with our company. Please note that she did not indicate that this information was not common knowledge or to be kept secret however, since then, I have noticed that the school email address she sent it from does have an automatically generated and standard confidentiality statement, which appears at the bottom of the email chain - something I did not register at the time. By pure coincidence, a parent whose children were on the previous trip with said teacher, has been assigned to audit our safety management as a company/tour operator and, during a preliminary meeting, we inevitably got to discussing the school ski trip in question and whether it was going ahead. I explained that I had heard from the teacher that she was leaving, so didn't know what was going to happen. It occurred to me at the time that the teacher may not have made it public knowledge, so asked the parent (who now has a business relationship with us) to be discreet with the information, until the teacher/school notified parents in general. Yesterday, I took a call from the school, asking who was in charge of data protection. This is an unusual request and, as the school isn't currently even a client, I can only assume that the parent has passed on the information about the teacher leaving, and disclosed the source (me). I am now expecting a call from the Deputy Head at any moment, to make a complaint about this but am not sure how far she will take it. Have I broken data protection and does the school have grounds for legal action? If I have caused the school or teacher and inconvenience by talking about her leaving, then y first instinct will be to hold my hands up and apologise - though I realise this may not be the best thing to do, if legal action is looming. Thank you.
Not in her communication with me, no. However, as I say, there is a standard confidentiality message at the bottom of the email chain, which I only noticed after checking following the call yesterday from the school. We do have a data protection policy in place but this normally relates to information we hold on a booking.
Or at least that's what i thought. It looks as though email messages can also fall foul of DP though, from what I can find online.
Thank you, XXXXX XXXXX your view on it. For clarification - only that I can express regret and apologise when I (inevitably) receive the call?
Alex, I would leave feedback but don't appear to be able to. Do you have to finish anything at your end?