The Data Protection Commission (DPC) has initiated a formal inquiry into Children's Health Ireland (CHI), specifically focusing on the physical safety and security of children's health records at Tallaght University Hospital. This action stems from protected disclosures received by the DPC and a breach notification submitted by CHI. The inquiry will scrutinize CHI's adherence to GDPR obligations concerning the security of personal data and its processes for managing physical records at the specified facility.

This development requires healthcare providers, particularly those handling sensitive patient data, to review their physical data security measures and compliance with GDPR. While no specific compliance deadline is mentioned, regulated entities should ensure their data protection policies and procedures, especially concerning physical records, are robust and align with GDPR requirements to avoid potential investigations and sanctions. The DPC's action highlights the importance of stringent data security practices in the healthcare sector.