An investigation has begun into claims personal material relating to a secondary school pupil was used on a training video posted online.
It is alleged the information, including the behaviour and contact information for a boy at Eirias High School, in Colwyn Bay, Conwy, was publicly available on YouTube.
The pupil's father said he was "happy" after the school apologised to him.
The Information Commissioner's Office confirmed it was investigating.
The boy's father, who does not wish to be named, said he was "shocked" when the school contacted him, but he understood it was a mistake and the school had apologised.
"Somebody has made a mistake, we all make mistakes, and pressed the wrong button," he said.
The father added he had been told he can complain to the school's board of governors.
"They have made me aware of my rights," he added.
Head teacher Phil McTague said he was looking into the background to the incident.
It is alleged the boy's details were apparently posted as part of a training video to be accessed by school staff, but the information became publicly available.
The recording, which is just over three minutes long, is apparently being used to explain how to use an internal computer system to record incidents of bad behaviour and bullying.
Part of the video is then alleged to have included the school's confidential record of the boy, including his full name, home address and comments about his behaviour.
There is also allegedly contact information held by the school on the boy and his parents.
The school's head teacher Mr McTague told BBC Wales that concern has been raised and the school will investigate.
The Information Commissioner - the UK's independent authority set up to uphold information rights in the public interest - also confirmed it is investigating the allegation.