GDPR and Confidentiality

Learning purpose: Staff should understand that child and family information must be handled carefully and only shared when appropriate.

JLK practice standard: At JLK, confidentiality is part of safeguarding. Families trust us with personal information and we must protect it.

Key staff expectations:

• Do not discuss children or families casually.
• Share information only with those who need to know.
• Keep records secure.
• Do not leave documents visible.
• Speak to managers if unsure.

Practical scenario: A practitioner talks about a child's family situation in the staff room while visitors are nearby. This is not acceptable. Sensitive information must only be discussed privately and professionally.

• I do not discuss children or families casually — including in the staff room
• I share information only with those who need to know
• I keep records secure and never leave documents visible

Learning purpose: Staff should understand safe handling of photos, videos and digital child records.

JLK practice standard: Photos and videos must only be taken, stored and shared through approved JLK systems and with appropriate consent.

Key staff expectations:

• Use approved nursery devices only.
• Check photo permissions.
• Do not store images on personal phones.
• Do not post child images on personal social media.
• Avoid including children in the background without permission.
• Report any data mistake immediately.

Practical scenario: A practitioner takes a photo on their personal phone because the nursery device is unavailable. This breaches JLK expectations. Personal devices must not be used for child images.

• I only take child photos on approved JLK devices — never my personal phone
• I check photo permissions before taking or uploading any image of a child
• I will report any data mistake immediately, even if I'm worried about getting it wrong

Learning purpose: Staff should know how to protect written, digital and verbal information in daily practice.

JLK practice standard: Professional communication must protect children and families. Email, messaging and documents must be handled carefully.

Key staff expectations:

• Use approved communication channels.
• Avoid child-identifiable details in insecure messages.
• Store documents in the correct folder.
• Lock screens and keep passwords private.
• Report lost paperwork or wrong recipients immediately.

Practical scenario: An email containing child information is sent to the wrong parent. Staff must inform the manager immediately so the breach can be managed properly.

• I use approved JLK communication channels for anything involving child or family information
• I lock screens, keep passwords private and store documents in the correct folder
• I will report lost paperwork or a wrong recipient immediately so the breach can be managed