Why children's data is the most sensitive category

What does an early childhood institution hold? A child's name, date of birth, photographs, health notes, sleep and eating patterns, behavioural observations, family contact details and, often, private circumstances the family shared themselves. That combination is more sensitive than many commercial databases — and the data subject is a person too young to defend themselves.

Five principles

First, purpose limitation. Data is used only for the purpose it was collected for. Information gathered for attendance is not used for marketing; observations kept for development do not appear in promotional copy.

Second, separate consent. A single box labelled “general parental approval” is not real consent. Sharing a photograph inside the class, sending it to a parent, using it on the institution's social media and processing data with AI must each be asked separately — and each must be individually revocable.

Third, access boundaries. It is natural for a teacher to see records for their own class; it is not natural for them to see the whole institution's. Hiding things in the frontend is not a security measure — authorisation must be enforced on the server.

Fourth, traceability. Who looked at a child's data, when, and for what purpose should be logged. That log is not a sign of distrust but the document that protects the institution: when a question comes, there is an answer.

Fifth, retention. Data is not kept forever. What is kept, for how long, and what is deleted when a child leaves must be decided in advance.

• Departing staff should lose access the same day — without breaking historical records.
• Class photographs on personal phones are the most common and most invisible risk.
• Use an institutional channel for family communication, not personal numbers.
• After a breach the first question is “who accessed this”; without a log there is no answer.

These principles can look like a compliance burden. In practice they are an institution's strongest position: parents trust a school that can explain concretely how their child's data is protected. Trust comes before any feature list.