Overview

• The Data Protection Commission opened a formal inquiry on August 14 into physical security and record-management at the CHI facility on the Tallaght University Hospital campus.
• The probe was prompted by multiple protected disclosures from CHI employees and a breach notification submitted by the hospital group.
• An unannounced site inspection on July 16 confirmed that hundreds of children’s patient files were stored in an unlocked room with insufficient access controls.
• The inquiry will assess CHI’s compliance with GDPR obligations for personal data security and may result in corrective orders or enforcement actions.
• Children’s Health Ireland says it is fully cooperating with the investigation and the DPC expects to conclude the inquiry faster than typical data-protection probes.