I guess my point here is that if the reason is due to not giving teachers an incomplete list, the logic doesn't add up. It creates one of these scenarios:
- Teacher has no list in Member Tools, receives attendance list from Organization Secretary including those marked as Private
- Teacher has no list in Member Tools, receives attendance list from Organization Secretary which does not include those marked as Private
- Teacher has list in Member Tools but doesn't show those listed as Private
- Teacher has list in Member Tools which shows all members including those marked as Private
All of these scenarios create the same issue. If the attendance list from the secretary doesn't include everyone and respects the members privacy setting, then what is the point in blocking teachers access to it in Member Tools? If the attendance list from the secretary does include those marked as private, there is no point in blocking the class list in Member Tools at all. In the end it just makes it harder on teachers and doesn't actually prevent what they might be attempting to prevent.
If there is a difference between how electronic access and paper are treated by privacy laws, just give the teachers an incomplete list in Member Tools with the understanding that it may be incomplete and they should refer to their attendance list for more details.
The one caveat to all of this is I don't think Member Tools currently has the ability to differentiate between who that classes teacher is vs anyone else in the ward. It only knows to treat leadership callings differently when pulling down the data. So if they were to show the full class list in Member Tools, including Private records, they would need to add another layer of permissions.