Relief Applications

TDH - Data Protection Directive for Child Protection Case Management

To develop a concise, actionable, and globally adaptable Directive for Terre des hommes (Tdh) that operationalizes their existing Data Protection and Information Security policies specifically for Child Protection Case Management. The Directive provides clear procedures for Tdh staff, ensuring consistency, compliance, and the safeguarding of children’s sensitive personal data across diverse national and legal contexts.

Client
Terre des hommes
When
Oct–Nov 2025
Team
2 people
Services
Privacy
Technologies
Governance/Documentation, Policy Framework, Inter-agency Child Protection Case Management Data Protection and Information Sharing Protocol (DPISP), GDPR/FADP alignment
Industry
Business Analysis
Solutions
DP4G
SDGs
16. Peace, justice and strong institutions
Client website
tdh.org

Terre des hommes is committed to ensuring the highest standards of data protection, especially given the sensitive nature of Child Protection Case Management. While Tdh had foundational policies and was aligned with inter-agency standards like the DPISP, there was a critical need to bridge the gap between high-level policy and on-the-ground operational practice. The challenge was to transform the global policy framework into a practical, actionable Directive, a document providing specific, user-friendly procedures that staff could implement daily, ensuring consistency and compliance while remaining adaptable to over 30 countries’ local laws and regulatory contexts (including GDPR and FADP).

Our approach was consultative and structured around achieving maximum clarity and compliance within a strict page limit. We began with a detailed review of all existing Tdh policies (including the Framework Policy and Personal Data Protection Policy) and relevant inter-agency protocols. Following an inception note that defined the structure and scope, the drafting process focused on operationalizing complex principles into simple, practical procedures. Key areas addressed included: clear protocols for securing consent, maintaining confidentiality, secure information sharing, and secure data storage. The final Directive design prioritized accessibility and user-friendliness, ensuring it was a working tool for protection teams, not just a static governance document.

We delivered the Final Directive on Data Protection and Information Security in Child Protection Case Management (maximum 10 pages, plus annexes). Key components included:

Actionable Procedures: Clear, step-by-step guidance on data handling (collection, processing, storage, disposal) tailored specifically to the case management lifecycle. Roles & Accountability: Defined roles and responsibilities for all staff and external partners involved in data handling, alongside mechanisms for monitoring and accountability. Global Adaptability: Specific guidance on applying international standards and aligning with key regulations (GDPR/FADP) while providing scope for local tailoring based on national legal requirements. User-Friendly Annexes: Tools and references (links to the General Framework) to ensure practical implementation.

The final deliverable included an Executive Summary in both English and French, successfully integrating feedback from the Child Protection expertise and the Global Data Protection Officer.

The challenge

  • Policy-to-Practice gap
  • Child-safe privacy Global regulatory compliance
  • Inter-agency alignment
  • Concise document length

What we did

  • Structured inception note
  • Detailed document review
  • Operational procedure design
  • DPISP integration
  • Consultative feedback loop

Working with Relief Applications on our internal Directive for Data Protection and Information Security in Child Protection Case Management has been a genuinely great experience for me as DPO. Their team not only brought strong technical expertise, but also a real understanding of the day‑to‑day realities of child protection work across humanitarian, development, and emergency contexts.

Nicolas Lachance-Bernard, Global Data Manager & Data Protection Officer
Data Protection Directive for Child Protection Case Management, Terre des hommes: screen 1 Data Protection Directive for Child Protection Case Management, Terre des hommes: screen 2

More projects