Children's data has the highest protection level under GDPR. Handle it wrong and you risk Tusla concerns, parent complaints, and DPC investigations. SAR Portal gives you a system that works.
The GDPR explicitly recognises that children "merit specific protection" regarding their personal data. Regulators take complaints about children's data extremely seriously.
A data breach or mishandled request doesn't just mean fines — it can damage the reputation you've built over years.
"After a custody dispute, we got DSAR requests from both parents wanting their child's records. We had no process for handling it and ended up involving solicitors. It cost us thousands and damaged relationships with other families who heard about it."
— Creche Owner, Cork
These situations are more common than you'd think
A parent moving their child to another creche wants all developmental reports, incident records, photos, and daily notes. You need to compile data from your childcare app, emails, and paper files — while removing information about other children.
Separated parents both request records. You need to verify who has legal authority to make requests on behalf of the child, document your decision, and potentially provide records to both — or explain why not.
A parent withdraws photo consent and wants all images deleted from your systems, newsletters, website, and social media. You need to find and remove every instance — and prove you did it.
A parent wants to see all health-related information: allergy records, medication logs, incident reports, special needs assessments. This is sensitive data requiring extra care in handling.
More than most childcare providers realise
Names, DOB, developmental notes, learning records
Allergies, medications, medical conditions, GP details
Daily activities, events, social media, newsletters
Parent contacts, emergency contacts, custody arrangements
Accidents, behavioural notes, observations
Invoices, ECCE details, subsidies, payment history
A simple system that gives parents confidence and keeps you compliant
OTP verification confirms the requester is who they claim to be. Critical for custody situations where you need to be certain about parental authority.
When compiling records, AI automatically flags and redacts other children's names, photos and information — so you never accidentally disclose the wrong data.
Every action is logged. During inspections, you can demonstrate exactly how you handle data requests — a key compliance requirement.
Automatic reminders ensure you respond within the 30-day legal requirement. Track extensions if you need more time to compile complex records.
Export complete, organised response bundles that show parents you take data protection seriously. Professional handling builds trust.
Handle data requests professionally with a system designed for childcare providers. SAR Portal helps you respond correctly, on time, every time — giving you confidence and peace of mind.
14-day free trial. No credit card required.