@joeligj12 @thumb if the school is in the EU, it would probably be easy to find #GDPR breaches, in which case you could involve the data protection office.