The Information Commissioner’s Office has issued a formal reprimand to a high school in Essex after it introduced facial-recognition technology without conducting a proper assessment of the data-protection risks to students or obtaining explicit consent.