IDPC launches children’s online data protection campaign for Data Protection Day 2026

28 January 2026

The Office of the Information and Data Protection Commissioner (IDPC) is marking Data Protection Day on 28 January 2026 with the launch of a new awareness campaign aimed at promoting children’s data protection online.

The campaign is designed for children aged 7 to 10 years and seeks to raise awareness among children, parents, guardians and educators about the importance of protecting personal data in an increasingly digital world. Children today engage with online games, apps and video-sharing platforms from an early age, often without fully understanding the risks associated with sharing personal information.

Speaking about the initiative, the Information and Data Protection Commissioner Ian Deguara noted that: “Children represent one of the most vulnerable groups online, as they may be less aware of the consequences of sharing personal data and more exposed to online manipulation, cyberbullying, location tracking, and misuse of their information. Through this campaign, we aim to equip them — and the adults guiding them — with the knowledge and tools they need to stay safe online.”

The campaign is built around two main resources: an animated educational video and a comprehensive resource booklet for educators. The video, featuring a child named Gianni, uses relatable and child-friendly scenarios to illustrate everyday online situations such as sharing photos and posts, responding to online quizzes, protecting passwords, understanding location tracking and deciding when and what information to share.

The resource booklet builds on the video by providing structured lesson plans and classroom activities, as well as a dedicated section for educators explaining key data protection concepts in simple terms. It covers what personal data is, who can see what we share online, how to keep accounts secure, how app permissions, targeted advertising and location tracking work, and what data protection rights children have under the General Data Protection Regulation.

Mr Deguara added: “Under the General Data Protection Regulation, children benefit from specific protections, recognising that they may be less aware of their rights and the impact of data processing. The campaign reinforces these protections by promoting digital literacy, encouraging responsible sharing practices and empowering children to ask questions about how their data is used.”

The Commissioner emphasised that: “Data Protection Day is an opportunity to reflect on the importance of data protection as a fundamental right. By focusing on children this year, we are investing in a safer digital future and fostering a culture in which respect for personal data begins at an early age.”

The campaign video and lesson plans will be made available to primary schools and educators across Malta and Gozo, and will also be accessible to parents and the wider public through the IDPC’s communication channels.

The personal use of electronic devices by young children should take place under the supervision of their parents or legal guardians.

Link to YouTube video
Link to lesson plans

Read more here