HomeLureLabvDPO & GDPRServicesDigital ShieldContactHR
Digital Shield›Materials for parents
Digital Shield · For parents

Protecting your child in the digital world

Your child's school takes part in the Digital Shield programme. This page explains what the programme does, how it protects your child, and what you can do at home.

VoluntaryWith your consentNo data on any individual child
Introduction · Why we are talking

Three reasons why this matters

01
Your child is a user of digital services

On enrolment the child becomes a user of the school's digital services (e-Register, e-Matica, LABIS). Privately, every day, they also use social media, games and apps, where fake emails and SMS messages arrive.

02
The school processes personal data

Name, surname, ID number, address, photos, contacts, health data. The law requires the school to protect them (GDPR and the Cybersecurity Act).

03
Preparation is a shared responsibility

Raising a child digitally is not the school alone, nor the parent alone. It is a partnership we build together.

Scale · Global and Europe

What our pupils face every day

Email phishing
3.4 bn
fake emails every day globally
  • ▸ 92 million people daily click a fake link
  • ▸ Europe accounts for 27% of global volume
Source: Verizon DBIR 2025
SMS phishing (smishing)
+40%
increase in 2025
  • ▸ 35% of all phishing attacks now go via SMS
  • ▸ Click rates 19-36% (5 to 10× higher than email)
Source: Keepnet 2025, SentinelOne 2026
AI accelerates the threat
82.6%
of phishing emails generated by AI tools in 2025
  • ▸ AI cut attack build time from 16 hours to 5 minutes
  • ▸ Fake sites are practically indistinguishable from real ones
Source: KnowBe4, IBM 2025
A child with a smartphone is in the same flood of attacks as an adult. The difference: a child has less experience in spotting them.
Programme for pupils

Digital Shield: three pillars, one safe child

Continuous training through the school year, not a one-off lecture. The parent is part of the exercise.

R
Recognise

The child learns to pause calmly and check a suspicious message. Recognising is a skill, not a test, and adults fall for it too.

R
Respond

Stop, ask, tell a trusted person. Telling an adult is the right move, not a punishment or a fault.

L
Learn together

The parent takes an active part: early warnings about threats and a parent guide. The child's voice enters the programme.

Your rights · GDPR

What GDPR means for your child

What it protects for your child

Name, surname, ID number, address, photos, contacts, health data and information on special needs.

Special protection

Minors (Art. 8) and health data (Art. 9) enjoy an additional level of protection.

ℹ You decide who has your child's data, how, and for how long.
Your rights
Access
Rectification
Erasure
Objection
Right to be forgotten
A guide for use at home

What to do if...

Simple, practical steps for the most common situations children may meet online.

📩
Your child receives a suspicious message or call
  • ▸ Stay calm and praise your child for showing it to you.
  • ▸ Do not click the link or reply to the sender.
  • ▸ Check the sender together: a known company does not ask for personal data or passwords by SMS or email.
  • ▸ If it came through the school system or refers to the school, notify the class teacher.
🖱️
Your child clicked a suspicious link
  • ▸ Check whether the device asked for a password or personal data; if so, change that account's password as soon as possible.
  • ▸ Run a device scan if you have security software installed.
  • ▸ Talk to your child without blame, so next time they freely ask for help.
🔓
Your child shared too much personal data
  • ▸ Review the privacy settings together on the app or game used.
  • ▸ Remove data where possible: address, full name, school.
  • ▸ Explain why less is always safer, without scaring them.
💬
Your child is upset by peers' messages
  • ▸ Listen without interrupting and without downplaying what they feel.
  • ▸ Save the messages or screenshots as evidence, do not delete them.
  • ▸ Notify the school, the class teacher or the counselling service, who act under the school protocol.
  • ▸ If needed, also contact the competent authorities outside the school.
What you can do

Six steps that protect your child at home

💬
Conversation

Your child must be able to tell you about a suspicious message without fear of punishment.

2F
Two-factor authentication

Turn it on for all accounts: email, social media, games.

🔒
Privacy settings

On social media, limit who can message your child.

⛔
A no-click rule

Never a link from an unknown message, not even „from the school”.

📶
Home Wi-Fi

A strong 12+ character password, an updated router, a guest network for visitors, WPS turned off.

✓
Set an example

A child copies the way you use your phone and the internet.

What is WPS? Wi-Fi Protected Setup is a button on the router for quickly pairing devices. It has a known security vulnerability that can let an attacker access the network without your password. Turning it off in the router settings takes a minute and significantly strengthens security.
Your consent · Your rights

Two separate consents, two different purposes

The data controller is the school; ID Shield Protect is the processor under GDPR Art. 28. Each consent can be withdrawn at any time, without explanation and without consequences for the child.

1
Cyber resilience testing
  • › Purpose: assessing pupil resilience to adapt the education materials to the cohort.
  • › Results are stored only in aggregate, without names, ID numbers or data that would identify a child.
  • › Applies to your child's participation in an age-appropriate simulation.
GDPR Art. 6(1)(a) and Art. 8
2
Receiving Active Guard alerts
  • › Purpose: an SMS or email alert to parents when the school identifies an active threat.
  • › Your mobile number and/or email are processed solely to send these alerts.
  • › Pupils are not recipients of Active Guard alerts in any form.
GDPR Art. 5(1)(b) · purpose limitation
Request the consent forms
Have a question?

We are here for all your questions

For questions about the programme or to withdraw consent, contact your child's class teacher or us directly.

ID Shield Protect Ltd. · Zagreb
Robert Dimitrovski, Lead vCISO/vDPO
📧 robert.dimitrovski@idshield.com.hr
📞 +385 98 470-495