The class WhatsApp group and the photograph that travelled
A Grade 4 class in Dubai. The teacher administers a class WhatsApp group of 22 parents, used daily for homework and reminders. Last Tuesday she posted two photographs: the 'star of the week' display, which shows the full names of three children; and the classroom behaviour board, showing which children had moved to red that day. Two parents forwarded the images to a wider community group. One child on the red board is the subject of an open child-protection referral that the teacher is not aware of. A parent then messages the teacher privately: 'Was my son on red? And is the boy who hit him last week being dealt with?' Separately, you learn that a colleague has been sending screenshots of students' reading-age scores from the school system to a personal phone and into a teachers' chat. The school has a data policy but no guidance on class messaging groups. A parent asks to be added to the group.
1. Identify and prioritise the issues. What comes first, and why?
Read the worked answer
Priority one: the child with the open child-protection referral. They have now been publicly identified as a child in a behaviour incident, in a message that has left the school's control. Nothing else you do this week matters more. Do not confirm, deny or discuss the referral with any parent, and do not tell the teacher which child it is beyond what the designated safeguarding lead authorises.
Priority two: stop the spread. Two forwardings have occurred; assume it is wider and behave accordingly.
Priority three: the other identifiable children. Publishing names against a behaviour chart is public shaming of minors and is personal data processed without a lawful basis or consent. Photographs of named children add image consent to the problem.
Priority four: the colleague's screenshots. Sending reading-age scores to a personal device and a private chat is a data transfer outside the school's control, a professional-boundaries breach, and - under the UAE Personal Data Protection Law framework the school is subject to - a likely reportable incident. It must go up the line, not be handled between colleagues.
Priority five: the missing policy. Real, but it is the cause, not the emergency. Handle it after the incident, in writing.
2. What do you do in the next 24 hours? Give the actions in order.
Read the worked answer
- Preserve evidence - screenshot the two posts, the forwardings and the timestamps before anything is deleted.
- Notify the designated safeguarding lead and the principal in the same hour. Written, factual, no speculation. Ask the DSL whether the referral child's family needs to be informed and by whom - that is the DSL's call, not yours.
- Delete the two posts and post one short factual message to the group: the images were shared in error, they contain personal information about children, recipients are asked to delete them and not forward them further, and the school will communicate in writing. Do not apologise in a way that speculates about consequences, and do not name anyone.
- Contact the three families on the display and the affected families on the behaviour board individually, before they see it in the community group. Factual, brief, and an offer to meet.
- Refer the colleague's screenshots to the principal in writing the same day; do not confront the colleague yourself and do not discuss it in the staffroom.
- Answer no parent about another child. Then begin the policy conversation - this week's events are the evidence for it.
3. How do you answer the parent who asked whether her son was on red and whether the other boy is 'being dealt with'? And what does this incident require you to change about your own practice?
Read the worked answer
Answering the parent. Two questions, two different answers.
On her son: answer factually and privately. 'Yes, he was on red on Tuesday after the afternoon lesson. Here is what happened and what we did.' She is entitled to information about her own child and to hear it from you rather than from a community group.
On the other boy: do not confirm, deny, describe or characterise. 'I understand why you are asking. I am not able to discuss another child with you - the same way I would not discuss your son with his parents. What I can tell you is what has been done to keep your son safe and what will happen next.' Then say what that actually is. A refusal without a substitute is heard as concealment. Record the conversation.
What this requires you to change. Three things. The group should be a one-way broadcast channel owned by the school, not a teacher's personal WhatsApp - the parent asking to be added is the moment to move it. No image of a child or a name goes into a group without checked consent and a data-minimisation question: does this post need to exist at all? And behaviour charts belong on the child's desk or in a private record, never on a wall and never in a photograph. The reflective question is uncomfortable but necessary: you posted this because it seemed efficient and warm, not because you had thought about who could see it.