Childcare centres hold data most businesses never touch - children's medical conditions, custody and court arrangements, emergency contacts, and daily photos of kids in care - usually managed by a small admin team without dedicated IT support. Data handling in the sector has come under far more scrutiny recently, and IT that was “good enough” a few years ago often no longer is.
Family and Child Data - What's Actually at Stake
Most Perth centres run on a childcare management platform - Xplor, QikKids, Kindyhub, or similar - handling enrolments, attendance, billing, and Child Care Subsidy (CCS) claims through a direct integration with Services Australia. These platforms hold some of the most sensitive personal information a small business will ever be responsible for: allergies and medical conditions, custody or court orders governing who can collect a child, emergency contacts, and photos and videos of children shared with families.
The credentials used to access CCS integration and the childcare management platform deserve the same level of protection as a business's financial systems - MFA enabled, access limited to staff who need it, and no shared logins.
Device and App Management for Educators
Daily journals, learning observations, and photo updates to families are increasingly managed through apps like Storypark or Kinderloop, accessed from tablets used throughout the day by educators. These devices are effectively handling children's photos and personal data continuously, which makes device management non-negotiable rather than optional:
- Centre-owned, managed tablets - configured through mobile device management (MDM) so they can be remotely wiped if lost, restricted to approved apps, and secured with a passcode
- No personal devices for child photos - educators using personal phones to photograph children creates copies of sensitive data completely outside the centre's control; a clear policy against this is one of the simplest, highest-impact steps a centre can take
- App-level access reviews - departing staff should have access to the childcare management platform and any communication apps revoked the same day, not whenever someone remembers
Network Setup for a Childcare Centre
Parent and visitor WiFi, where offered, should be fully separated from the network the centre's admin systems and childcare management platform run on - the same principle covered in our guide to guest WiFi for Perth businesses. A parent picking up their child should never be on the same network segment as the system holding every family's personal data.
Compliance - the National Quality Framework and Privacy Act
The National Quality Framework requires centres to keep accurate, secure records - incident reports, medication records, attendance - accessible to regulators but properly protected from everyone else. Health and medical information about children is sensitive information under the Privacy Act, which means a data breach involving it is more likely to trigger obligations under the Notifiable Data Breaches scheme - requiring notification to affected families and the OAIC if the breach is likely to cause serious harm.
Staff Turnover and Access Control
Childcare has some of the highest staff turnover of any sector - casual educators, relief staff, and seasonal changes are constant. Every one of those staff members typically needs access to the childcare management platform to do their job, which means access provisioning and revocation has to be a routine, consistently followed process rather than an occasional afterthought. Our guide to insider risk covers why stale access left behind by departing or casual staff is one of the most common, avoidable gaps we find.
Backup and Continuity
An outage in the childcare management platform doesn't just cause inconvenience - it can stop a centre from recording attendance correctly, which directly affects CCS subsidy claims and billing accuracy. A tested backup, and a clear paper-based fallback process staff can follow during an outage, matters more here than in many other small business settings. Our guide to a disaster recovery plan for Perth businesses covers how to build one that actually works when needed.
Frequently Asked Questions
What childcare management platforms do centres in Perth typically use?
Most Perth centres run something like Xplor, QikKids, or Kindyhub for enrolments, attendance, billing, and CCS claims. These platforms link directly with Services Australia for subsidy claims, so the login credentials protecting them deserve the same care as your banking logins, MFA enabled, and access limited to staff who actually need it.
Do educators need centre-issued tablets, or can they use personal phones for daily photos?
Centre-issued, managed tablets are strongly recommended over personal devices. A managed tablet can be remotely wiped if lost and restricted to approved apps, whereas a personal phone used to photograph children creates a copy of sensitive data completely outside the centre's control, worth avoiding with a clear policy.
Does a childcare centre have to report a data breach involving children's records?
Health and medical information about children is treated as sensitive information under the Privacy Act, which generally makes a breach involving it more likely to trigger notification obligations under the Notifiable Data Breaches scheme. Exact obligations depend on the details of the breach, so it's worth confirming your centre's specific position with a compliance adviser rather than assuming.
What happens to CCS billing if the childcare management platform goes down?
An outage can stop attendance being recorded correctly, which flows through to subsidy claims and billing accuracy, not just day-to-day inconvenience. A tested backup and a simple paper-based fallback process staff know how to follow matter more here than in most small businesses.
We have a dedicated IT service page for Perth childcare centres - covering CCS platform security, educator devices, and NQF compliance.
View Childcare IT Services →IT support that understands childcare data obligations
Call 0433 087 091 - we help Perth childcare centres secure family and child data, manage educator devices properly, and stay ready for a National Quality Framework or privacy review.
Book a Free AssessmentFor related reading, see our guides to IT Support for Schools in Perth and The Notifiable Data Breaches Scheme.