All information should be kept confidential and shared on a need to know basis, settings should have a confidentiality policy in place, all employees/volunteers/students should sign to say they are aware of and have read it. You should also gain parental permission before sharing their child's information with a third party etc. Confidential information should be kept in a locked filing cabinet. Information that you probably would share would be a child's birthday, or if someone different was collecting a child then it would be necessary to share this info with the key worker or other relevant person. This applies to staff info as well. Hope this helps