Is it legal for a school to produce a list of staff personal contact details, then distribute it to members of staff without the permission of those members of staff? In fact, to distribute it even though some members of staff have actually raised objections? A breach of data protection law? Opinions and advice would be welcome. Thanks.