An institution that holds the records of a principal's children also holds the records of where the family lives, who they are connected to, what their movements look like in any given term, and what they are likely to be photographed at. The institution is not the principal's adversary; it is, however, a node in the network of information about the family that the principal cannot directly control.

Schools vary widely in their security posture. The most prominent are increasingly conscious of the exposure their pupil lists represent and protect their systems accordingly. Many are not. The published events, the alumni magazine, the photographs of the school year, the parents' association newsletter: each is a small fragment, and the assembled set is a complete enough picture for an attentive reader.

The work here is about what the principal contributes to that picture themselves. The biographical details on the registration form. The emergency contacts. The other parents kept in the WhatsApp group. The published photographs from the family that aggregate, alongside the school's published material, into a fuller picture than either source contains alone.

The first task is to know what the present record holds. The rest depends on that.