Back to homeTechnology and Digitalisation · 3rd ESO · Change subject
Start for free
ESO Y3 · Technology and Digitalisation
Digital security · Data protection

Privacy

Setting up your privacy means deciding who can see what about you. Social networks and apps offer settings that are worth reviewing carefully, and the law gives you rights over your data that you can exercise.

Before you start, make sure you know: Publishing and sharing responsibly (2nd ESO)

Public and private profiles

Comparison of a public profile, which everyone can access, and a private profile, protected by a padlock that only approved people can get past. Public profile Anyone can see it Private profile Only whoever you approve
Practice★☆☆Not started
Explain the difference between a public profile and a private profile on a social network and name two advantages of keeping personal accounts private.

Explain the difference between a public profile and a private profile on a social network and name two advantages of keeping personal accounts private.

Solve
Practice★☆☆Not started
The figure shows the privacy settings panel of a social network. Three settings are already configured and one appears undecided. Explain whether you consider the chosen…

The figure shows the privacy settings panel of a social network.

Account privacy Private profile Location sharing Tag approval required Messages from strangers ?

Three settings are already configured and one appears undecided. Explain whether you consider the chosen options suitable for a minor and what option you would recommend for the setting marked with ?, justifying your answer.

Solve
Practice★★☆Not started
List three specific privacy settings you would review on your main social network — for example, who sees your posts, who can tag you or who can find you by your phone…

List three specific privacy settings you would review on your main social network — for example, who sees your posts, who can tag you or who can find you by your phone number — and explain what each of them improves.

Solve

App permissions and data minimisation

A phone with a torch app that only needs to switch on the light, but also asks for access to contacts and location, unnecessary permissions. torch app also asks for: switch on light contacts location
Practice★☆☆Not started
When installing a torch app, it requests access to your contacts and location. Explain why this request is suspicious, what privacy principle it violates by asking for…

When installing a torch app, it requests access to your contacts and location. Explain why this request is suspicious, what privacy principle it violates by asking for more data than it needs, and what you would do.

Solve
Practice★★☆Not started
A social network asks for a photo of your ID card "to verify your account and protect you". Analyse when this might be a legitimate request, what risks handing over an…

A social network asks for a photo of your ID card "to verify your account and protect you". Analyse when this might be a legitimate request, what risks handing over an identity document entails and what you would check before sending it.

Solve
Practice★★★Not started
A shop offers a $10\ \%$ discount if you provide your email address and date of birth, and agree to receive "marketing communications". Evaluate that exchange using the…

A shop offers a $10\ \%$ discount if you provide your email address and date of birth, and agree to receive "marketing communications". Evaluate that exchange using the data minimisation principle and write a reasoned decision: accept as is, negotiate the data you provide, or reject the offer.

Solve

Cookies, location and advertising tracking

Map of a phone's locations throughout the day: all night in one place, then school and then a friend's house; tracking reveals a person's routines. Locations recorded by the phone ? all night school friend's house Where do they sleep? The patterns give it away
Practice★☆☆Not started
The figure shows the locations that a person's mobile GPS recorded over a week. Deduce what place the point marked with ? is and explain what other details that map…

The figure shows the locations that a person's mobile GPS recorded over a week.

? every night: 22:00 – 07:00 School · 08:00 – 15:00 Friend's house · Saturdays

Deduce what place the point marked with ? is and explain what other details that map reveals about the person's life (schedules, relationships, habits). Finish by explaining why location is one of the most sensitive pieces of data handled by your phone.

Solve
Practice★☆☆Not started
When entering a website, a cookie banner appears with the buttons "Accept all" and "Settings". Explain what types of cookies exist (necessary, preference, ad tracking)…

When entering a website, a cookie banner appears with the buttons "Accept all" and "Settings". Explain what types of cookies exist (necessary, preference, ad tracking) and what you are accepting with each button.

Solve
Practice★★★Not started
Having just turned 14, you request an online gaming platform to permanently delete your account and all your associated personal data. The company responds with this…

Having just turned 14, you request an online gaming platform to permanently delete your account and all your associated personal data. The company responds with this message:

"We have processed your request: your profile is no longer visible to other users. However, for permanent deletion from our servers, you must pay €5,00 in processing fees and attach an authorization signed by your legal guardians sent by post. In addition, we will retain your forum messages and your purchase history indefinitely for security purposes."

Analyze the situation by applying data protection regulations (GDPR and Spanish law):

  1. Identify and justify at least two legal irregularities present in the platform's response.

  2. Draft the formal reply you would send to the company to demand the effective exercise of your right to erasure without undue hindrance, indicating the legal deadline they have to comply with it and which official body you will file a complaint with if they do not.

Solve

Encryption, shared devices and connected apps

End-to-end encryption: the message leaves the sender's phone already encrypted, passes through the company's server without the company being able to read it, and only the receiver decrypts it. sender receiver company's server not even the company can read it x9#k x9#k encrypted message
Practice★☆☆Not started
Your younger brother uses your tablet while you are logged in and ends up buying a skin and talking to your friends. Explain what data and accounts of yours are exposed…

Your younger brother uses your tablet while you are logged in and ends up buying a skin and talking to your friends. Explain what data and accounts of yours are exposed when sharing a device and what configuration (user profiles, lock screen, password-protected store) prevents this.

Solve
Practice★☆☆Not started
Explain in your own words what end-to-end encryption is in a messaging app and what it means that "not even the company itself can read your messages". What is the…

Explain in your own words what end-to-end encryption is in a messaging app and what it means that "not even the company itself can read your messages". What is the difference with a service that does store and can read conversations?

Solve
Practice★☆☆Not started
In your account settings, a list of "apps with access" appears. Explain what an app connected to your account can do, why it is advisable to revoke those you no longer…

In your account settings, a list of "apps with access" appears. Explain what an app connected to your account can do, why it is advisable to revoke those you no longer use, and how often you would review that list.

Solve

Rights over your data and the balance with security

A person exercises three rights over their data record at a company: access (an eye looking at the record), rectify (a pencil crossing out a wrong item and correcting it) and erase (a bin for deleting the record). you data at the company access rectify erase
Practice★★☆Not started
In Spain, for certain online services, the law requires parental consent before fourteen years of age. Explain why this age limit exists, what happens to the data of a…

In Spain, for certain online services, the law requires parental consent before fourteen years of age. Explain why this age limit exists, what happens to the data of a minor who lies about their date of birth when signing up, and why platforms ask for your age.

Solve
Practice★★★Not started
Analyse the phrase "if it's free, you're the product". Is it always true? Compare the business models of advertising, subscriptions and open-source software with…

Analyse the phrase "if it's free, you're the product". Is it always true? Compare the business models of advertising, subscriptions and open-source software with donations, and explain how the chosen model affects how your data is treated.

Solve
Practice★★★Not started
Parental control apps allow parents to see their children's location, screen time and messages. Analyse where the balance lies between protection and trust depending on…

Parental control apps allow parents to see their children's location, screen time and messages. Analyse where the balance lies between protection and trust depending on age, and propose a reasonable family agreement for a fourteen-year-old.

Solve

Summary

See all the exercises in this section