Digital Shield is a cyber literacy programme for pupils in grades 4 to 8. In a safe, controlled simulation the pupil faces a situation resembling a real scam, makes a decision and gets immediate feedback. The cycle repeats throughout the school year.
In late June 2026 a database of over 560,000 records leaked: names and email addresses of pupils and teachers from 1,452 Croatian schools. AZOP warned of an increased risk of phishing attacks aimed precisely at pupils.
GDPR Art. 8 recognises children as a specially protected category of data subjects. Their data has value on the black market, yet they lack experience in spotting fraud.
Smishing, fake profiles, AI-generated content. The programme provides continuous monitoring of new cyber threats and quarterly updates to the materials.
The teacher introduces the topic in class and explains the rules for spotting fraud. LureLab then lets the pupil practise that knowledge through a real but safe, age-appropriate simulation. Each cohort's results steer the next training cycle: continuously, throughout the school year.
The programme is designed around protecting the child, not around technology. The boundaries are defined before the first step.
All work with pupils is done solely by their teachers, in their regular pedagogical role. ID Shield Protect prepares materials, never teaches children.
The programme does not grade, rank or classify children. The smallest unit of analysis is a cohort in a school, with no names or emails.
Participation rests on informed parental consent (GDPR Art. 6 and Art. 8), which can be withdrawn without any consequences for the child.
Active Guard alerts go only to staff and to parents who gave a separate consent. Children are informed by parents and teachers.
If a situation requiring professional help is discovered, the school's expert service acts under a predefined protocol.
The programme is not mandatory and is not part of the regular curriculum. The teacher decides how and when to use the materials.
Schools are themselves subject to the Croatian Cybersecurity Act (OG 14/2024) and process sensitive data of pupils, staff and parents. The programme therefore also covers the school's compliance as an institution.
Continuous training, testing and monitoring of new threats start together, with the new cycle. Quotes are issued on request.
Request a quote for your school