Why childcare data is uniquely sensitive
Photos, developmental records, incident reports, family information — childcare facilities hold detailed information about children and their families. GDPR gives parents the right to access this data, and you have one month to respond.
Common DSAR scenarios in childcare
📁 "I want all my child's records"
A parent requests their child's complete file including daily reports, developmental assessments, photos, and communications.
📸 "What photos do you have?"
A parent requests all photos of their child. You need to identify them across newsletters, social media, and internal records. SAR Portal does not detect or blur faces, so you review and edit photos of other children yourself.
👨👩👧 Separated parents requesting data
Both parents may have rights to access their child's data. You need to verify custody arrangements and handle appropriately.
📝 "What do you have on me?" (from ex-staff)
Former employees can request their personnel records. You need to redact information about children and other staff.
The data childcare facilities hold
Child Records
Names, DOB, medical info, developmental notes
Family Information
Parent contact details, emergency contacts, custody info
Photos & Videos
Daily activities, events, social media posts. Faces are not redacted automatically.
Incident Reports
Accidents, incidents, behavioral observations
Staff Records
HR files, Garda vetting, training records
CCTV
Security footage including children. Video must be reviewed outside SAR Portal.
How SAR Portal helps childcare providers
Verify parental rights
OTP verification confirms the requester controls the email address they gave. You can then ask for documents that show custody or guardianship.
Protect other children
AI suggests redactions for other children's names and details in documents and scanned text, and you review them before release. Faces in photos and video are not redacted: check and edit them yourself before sharing. CCTV video must be reviewed outside SAR Portal.
Audit trail for inspections
Every action is recorded in an audit log that no user can edit or delete, giving you a record of each request and response you can show an inspector.
Secure delivery
For requests made through your portal, the parent downloads the records from the secure portal, so nothing goes out as an email attachment. For requests received another way, you send the response yourself.