Data Security and Online Privacy

• newEditor
• LessonUp
• PSHE
• +4
• Further Education (Key Stage 5)
• Lower Secondary (Key Stage 3)
• Upper Secondary (Key Stage 4)
• BTEC, GCSE

Introductie

Welcome! This can be a pretty dry topic but give it some energy with these interactive slides. There are videos and polls all manner of fun ways to make your learners think about online privacy and data protection. 📋 Lesson Description Overview The Hook: Students examine the core risks associated with personal data collection, account security, and public online activity. Interactive tasks highlight practical defenses against identity theft, targeted tracking, and unauthorised access. Interactive Highlights: Informative Slides: Mapping high-risk profile data hotspots, reviewing UK data protection risks, identifying regulatory responsibilities, and establishing personal security checklists. Polls: Evaluating personal habits regarding the public sharing of personal identifying details. Open Questions: Unpacking corporate data collection motives, analyzing real-world profile exposure scenarios, and evaluating two-factor authentication. Video Slides: Exploring how artificial intelligence systems process user metrics and demonstrating secondary authentication mechanics. Fill in the Blanks: Reinforcing foundational terminology related to personal data boundaries and digital risk. Word Clouds: Brainstorming persuasive design mechanics and tactics used to prolong screen engagement. Exit Ticket: Measuring student retention by prompting individuals to state a new security term or key insight. Best Suited For: Designed for KS3, GCSE, and FE students within Computer Science, Computing, or PSHE lessons. Delivered effectively as a whole-class interactive session or an independent learning activity.

Instructies

Simply save this lesson to your own 'My LessonUp' page, where you can adjust the imagery, text and content as much as you would like!

Or, press the 'teach now' button, to be able to instantly present and teach the content.

Please note, some of the text, images or videos may not be the most suitable for your class, depending on their ages and ability - so ensure you take some time to review and adapt the content to make the most of the session.

We hope you, and your students enjoy learning with LessonUp!

If you need any assistance with editing a lesson, or information on LessonUp in general - please contact: [e-mail]

Hello and welcome to this lesson about data privacy and security online.

Students examine the mechanisms of personal data collection and the primary threats to digital security. Practical tasks highlight actionable strategies for protecting sensitive information and identifying online risks.

Aims and objectives 

Would you post it was your birthday on Instagram?

1

Oh yeah! All my followers like need to know, yeah?

2

No.

Gauges class consensus on sharing personal identification details online, prompting students to reflect on their own habits regarding oversharing on public platforms.

Stretch: Challenge students to evaluate how combining a birthdate with other public profile data increases the risk of identity theft or social engineering.

Device-Free: Direct students to vote using a quick show of hands or by writing "Yes" or "No" on mini-whiteboards before explaining their reasoning to a partner.

Give examples of things you should never post online

Prompts students to evaluate personal data sensitivity by identifying specific high-risk information that compromises online security.

Stretch: Challenge students to select two items from their response and explain how bad actors could exploit them for social engineering or identity theft.

Device-Free: Direct pairs to list three types of sensitive personal information on a mini-whiteboard and rank them from highest to lowest security risk.

Why do companies want your data?

Directs students to evaluate the commercial motivations behind data collection rather than simply listing basic privacy rules.

Stretch: Challenge students to explain how targeted advertising and user profile building turn raw personal data into corporate profit.

Device-Free: Direct pairs to write down three reasons commercial organisations track online behaviour on mini-whiteboards before sharing key ideas with the class.

Video (sponsored but skip the sponsored section!)

Highlights how this video clip brings real-world context to data privacy by demonstrating how artificial intelligence systems collect and process personal user metrics.

Stretch: Challenge students to evaluate whether existing data protection legislation remains effective when applied to automated AI algorithms.

Device-Free: Direct pairs to note down two main takeaways from the clip on mini-whiteboards and compare their points with a neighbouring group.

What one thing surprised you? Alternatively, identify one new term you learned.

Evaluates student understanding by prompting individuals to articulate a newly acquired technical concept or surprising insight about data privacy and online security.

Stretch: Challenge students to explain how their chosen concept or term directly alters their everyday online browsing habits.

Device-Free: Direct students to write their key takeaway or new vocabulary word on mini-whiteboards and present them as a physical pass before leaving.

FIRST NAME

Generally safe, as long as not paired with too much other info.

NATIONAL INSURANCE NUMBER

Directly tied to personal identity and finances.

SCHOOL/COLLEGE NAME

Usually safe, but only in the right context (e.g. not alongside full address).

ADDRESS

Can be misused for identity theft or stalking.

FAVOURITE MUSIC

Safe to share, though be mindful if the platform links it to personal details.

DATE OF BIRTH

Can be used for identity theft and password guessing.

HOLIDAY PHOTOS

Conditionally safe: OK with trusted friends/family, but posting publicly can give away location data or when your home is empty.

BANK ACCOUNT DETAILS

Highly private; never to be shared.

Maps out common digital profile areas where sharing personal details exposes users to privacy risks and unauthorised tracking.

Stretch: Challenge students to evaluate which two shared data points pose the greatest threat to personal security when combined by a bad actor.

Device-Free: Direct pairs to draw a simple profile mock-up on mini-whiteboards and highlight three high-risk information hotspots.

Fill in the blanks

Some information is usually safe to share, as long as it is in the right context. For example, your first name is generally safe, but only if it is not paired with too much other information. Sharing your school or college name is usually fine too, though not alongside a full address. Talking about your favourite music is normally safe, but remember that some platforms may link it to your personal details. Even holiday photos can be safe if you share them with trusted friends and family, but posting them publicly might reveal your location or when your home is empty.

Other information is private and should always be protected. Your address is very private, as it could be misused for identity theft or stalking. Bank details are highly private and must never be shared. Your date of birth may seem harmless, but it can be used for identity theft or to guess passwords. Finally, your National Insurance number is extremely private because it is directly tied to your personal identity and finances.

Even “fun” details like your date of birth, a pet’s name, or holiday snaps can seem harmless but may still be used for phishing or password guessing. A good rule of thumb is to ask yourself: Would I be OK with a stranger knowing this? If the answer is no, then it’s private.

first name

school or college name

personal details

holiday photos

location or when your home is empty.

address

Bank details

identity theft or to guess passwords

personal identity and finances

a pet’s name

private.

Maps out common digital profile areas where sharing personal details exposes users to privacy risks and unauthorised tracking.

Stretch: Challenge students to evaluate which two shared data points pose the greatest threat to personal security

when combined by a bad actor.

Device-Free: Direct pairs to draw a simple profile mock-up on mini-whiteboards and highlight three high-risk information hotspots.

How do apps use these to keep you hooked?

Maps out common digital profile areas where sharing personal details exposes users to privacy risks and unauthorised tracking.

Stretch: Challenge students to evaluate which two shared data points pose the greatest threat to personal security when combined by a bad actor.

Device-Free: Direct pairs to draw a simple profile mock-up on mini-whiteboards and highlight three high-risk information hotspots.

You could add more information to this e.g/ expanding on passphrases. 

Maps out common digital profile areas where sharing personal details exposes users to privacy risks and unauthorised tracking.

Stretch: Challenge students to evaluate which two shared data points pose the greatest threat to personal security when combined by a bad actor.

Device-Free: Direct pairs to draw a simple profile mock-up on mini-whiteboards and highlight three high-risk information hotspots.

Why is Two-Factor Authentication Important?

Maps out common digital profile areas where sharing personal details exposes users to privacy risks and unauthorised tracking.

Stretch: Challenge students to evaluate which two shared data points pose the greatest threat to personal security when combined by a bad actor.

Device-Free: Direct pairs to draw a simple profile mock-up on mini-whiteboards and highlight three high-risk information hotspots.

DID YOU KNOW?

In 2023, TikTok was fined £12.7 million in the UK for mishandling children’s data. They allowed kids under 13 on the platform without proper checks.

Outlines current UK data security threats, establishing how regulatory frameworks and personal risk levels intersect when sensitive details are exposed.

Stretch: Challenge students to assess how UK data protection laws apply when personal information is transferred to international servers.

Device-Free: Direct pairs to write down two common data risks facing UK internet users on mini-whiteboards before comparing examples with another group.

European Union and UK

GDPR: The strictest rules in the world.Same rights as UK law (since UK used to be in the EU).Heavy fines for companies breaking the rules.

Who Protects Your Data?

United States of America

No single nationwide law.Some states (like California) have strong privacy laws. Others don’t.Companies often set their own rules.

China

Government surveillance is common (e.g. facial recognition, internet monitoring).Privacy is less about individual rights, more about state control.

Brazil

Brazil has LGPD (very similar to GDPR).

Australia

has privacy laws but not as strict as the EU.

Outlines current UK data security threats, establishing how regulatory frameworks and personal risk levels intersect when sensitive details are exposed.

Stretch: Challenge students to assess how UK data protection laws apply when personal information is transferred to international servers.

Device-Free: Direct pairs to write down two common data risks facing UK internet users on mini-whiteboards before comparing examples with another group.

A student posts a TikTok showing their exam certificate with their name and school visible. what could happen?

Outlines current UK data security threats, establishing how regulatory frameworks and personal risk levels intersect when sensitive details are exposed.

Stretch: Challenge students to assess how UK data protection laws apply when personal information is transferred to international servers.

Device-Free: Direct pairs to write down two common data risks facing UK internet users on mini-whiteboards before comparing examples with another group.

CHECKLIST

✅ Think before posting
✅ Use strong, unique passwords
✅ Enable 2FA
✅ Be cautious on public Wi-Fi
✅ Check app permissions
✅ Know your rights

Outlines current UK data security threats, establishing how regulatory frameworks and personal risk levels intersect when sensitive details are exposed.

Stretch: Challenge students to assess how UK data protection laws apply when personal information is transferred to international servers.

Device-Free: Direct pairs to write down two common data risks facing UK internet users on mini-whiteboards before comparing examples with another group.

For more topical lessons visit the 

UK Spotlight Channel

I hope you found this lesson useful! click on the hyperlink to magically transport to even more lessons!