The inquiry relates to the physical safety and security of children’s health records within the facility, one of three paediatric hospitals in Dublin operated by CHI.

“The DPC became aware that there were potential issues at this site from a number of different sources of information, including through protected disclosures that the DPC received and also a breach notification submitted to the DPC by CHI,” the watchdog said in a statement.

“Having reviewed the information, the DPC conducted an unannounced site inspection on Wednesday 16 July 2025.

“This formal inquiry will examine CHI’s compliance with their GDPR obligations, in particular relating to the security of personal data and the processes that CHI have in place for managing physical records at CHI (Tallaght).”