This report is based on 11 data protection advisory visits that were carried out at nurseries across England, Scotland and Wales during 2016 and 2017.