Statement from Children’s Health Ireland 01st October 2026

Children's Health Ireland (CHI) takes the privacy and security of patient information extremely seriously and has extensive protocols and processes in place to ensure that the thousands of records that are within our care are appropriately managed.

CHI acknowledges that in August 2025, a number of patient records were stored in an unlocked room in CHI at Tallaght. This was in breach of our own protocols and, as is appropriate, were determined by the Data Protection Commissioner, to be in breach of GDPR legislation. CHI has accepted the reprimand that we were given, and we will continue to work closely with the DPC to ensure any and all actions are closed.

CHI notes the DPC did not propose an administrative fine in relation to the breach and we remain committed to ensuring that we review our processes and procedures for data management, in consultation with the DPC. At the same time we continue to prepare to move to an electronic based system once we get into the new hospital.

We apologise for any upset this issue may have caused to the children, young people and families in our care.