Back to homeDigital Culture · High School Year 1 · Change subject
Start for free
Prep 1 · Digital Culture
Digital security · Data protection

Privacy

Ximena posts a photo from her cousin's quinceañera to her account. Two days later, someone she doesn't know comments on the photo, and another person asks her to "verify her account" by sending a picture of her INE (national voter ID). What could she have done differently? Setting up your privacy means deciding who sees what about you, and Mexican law gives you rights over your data. At the end of the page you'll come back to this case.

Public and private profiles

Comparison of a public profile, which everyone can access, and a private profile, protected by a padlock that only approved people can get past. Public profile Anyone can see it Private profile Only people you approve

Besides the type of profile, every social network has settings worth reviewing carefully. The most important ones:

  • Who sees your posts: "public," "friends," or "only me."

  • Who can tag you and whether you approve tags before they appear on your profile.

  • Who can find you by your cell phone number or email: if you leave it open, a stranger who has your number can find you.

  • Location on posts: it's best to leave it off or decide case by case.

Why? Every open setting is one more door. For a minor, the wise thing is to keep closed the doors you don't need.

Practice★☆☆Not started
Explain the difference between a public profile and a private profile on a social network and name two advantages of keeping personal accounts private.

Explain the difference between a public profile and a private profile on a social network and name two advantages of keeping personal accounts private.

Solve
Practice★☆☆Not started
The figure shows the privacy settings panel of a social network. Three settings are already configured and one appears undecided. Explain whether you consider the chosen…

The figure shows the privacy settings panel of a social network.

Account privacy Private profile Location sharing Tag approval required Messages from strangers ?

Three settings are already configured and one appears undecided. Explain whether you consider the chosen options suitable for a minor and what option you would recommend for the setting marked with ?, justifying your answer.

Solve
Practice★★☆Not started
List three specific privacy settings you would review on your main social network — for example, who sees your posts, who can tag you or who can find you by your phone…

List three specific privacy settings you would review on your main social network — for example, who sees your posts, who can tag you or who can find you by your phone number — and explain what each of them improves.

Solve

App permissions and data minimization

A cell phone with a flashlight app that only needs to turn on the light, but also asks for access to contacts and location, unnecessary permissions. flashlight app Permission it asks for: turn on the light contacts location
Practice★☆☆Not started
When installing a torch app, it requests access to your contacts and location. Explain why this request is suspicious, what privacy principle it violates by asking for…

When installing a torch app, it requests access to your contacts and location. Explain why this request is suspicious, what privacy principle it violates by asking for more data than it needs, and what you would do.

Solve
Practice★★☆Not started
A social network asks for a photo of your ID card "to verify your account and protect you". Analyse when this might be a legitimate request, what risks handing over an…

A social network asks for a photo of your ID card "to verify your account and protect you". Analyse when this might be a legitimate request, what risks handing over an identity document entails and what you would check before sending it.

Solve
Practice★★★Not started
A shop offers a $10\ \%$ discount if you provide your email address and date of birth, and agree to receive "marketing communications". Evaluate that exchange using the…

A shop offers a $10\ \%$ discount if you provide your email address and date of birth, and agree to receive "marketing communications". Evaluate that exchange using the data minimisation principle and write a reasoned decision: accept as is, negotiate the data you provide, or reject the offer.

Solve

Cookies, location, and incognito mode

When the cookie notice appears, the buttons mean this:

  • "Accept all": you accept the necessary cookies, the preference cookies, and also the advertising tracking cookies.

  • "Configure": you can leave only the necessary ones turned on and reject the rest.

If you just want to read a page, the necessary ones are enough.

Tracking cookies, location permissions, and tracking across apps feed an enormous business: data colonialism, that is, the appropriation and extraction of data from people and communities (often in the Global South) by corporations, which treat it as raw material. Just as in mining a mineral is extracted from a territory, here your habits, your places, and your tastes are extracted to sell them or use them in advertising. That's why it's wise to reject tracking you don't need.

Location also leaves traces. Look at what can be deduced from the places a cell phone records:

Map of a cell phone's locations throughout the day: all night in one place, then school, and then a friend's house; tracking reveals a person's routines. Locations recorded by the cell phone ? all night school friend's house Where do they sleep? The patterns give it away
Practice★☆☆Not started
The figure shows the locations that a person's cell phone GPS recorded over a week. Deduce what place the point marked with ? is and explain what other details that map…

The figure shows the locations that a person's cell phone GPS recorded over a week.

? every night: 22:00 – 07:00 School · 08:00 – 15:00 Friend's house · Saturdays

Deduce what place the point marked with ? is and explain what other details that map reveals about the person's life (schedules, relationships, habits). Finish by explaining why location is one of the most sensitive pieces of data handled by your phone.

Solve
Practice★☆☆Not started
When entering a website, a cookie banner appears with the buttons "Accept all" and "Settings". Explain what types of cookies exist (necessary, preference, ad tracking)…

When entering a website, a cookie banner appears with the buttons "Accept all" and "Settings". Explain what types of cookies exist (necessary, preference, ad tracking) and what you are accepting with each button.

Solve
Practice★★☆Not started
Explain what "incognito mode" in a browser hides and does not hide (your internet service provider, the websites you visit, your school, local history) and reason why…

Explain what "incognito mode" in a browser hides and does not hide (your internet service provider, the websites you visit, your school, local history) and reason why its name misleads many users.

Solve

Encryption, shared devices, and listening gadgets

End-to-end encryption: the message leaves the sender's cell phone already encrypted, passes through the company's server without it being able to read it, and only the receiver decrypts it. sender receiver company server not even the company can read it x9#k x9#k encrypted message

Many popular messaging apps, like WhatsApp or Signal, use this encryption in chats. Conversations on other services, by contrast, are stored on servers where the company can read them.

There are other places where data leaks out:

  • Shared devices. If your brother uses your tablet with your session open, he can buy a skin, write to your friends, or see your accounts. You prevent this with separate user profiles, a screen lock, and a password on the app store.

  • Apps connected to your account. In the settings there's a list of "apps with access." Each one can read or post using the permissions you gave it. Revoke the ones you no longer use and review the list every few months.

  • Smart speakers. They say they "only listen when activated," but they're listening for the wake word. What you say afterward is recorded and is usually stored in the company's cloud. Review and delete the recording history, use the button that turns off the microphone, and don't put them in the bedroom or the bathroom, where there are intimate conversations.

Practice★☆☆Not started
Explain in your own words what end-to-end encryption is in a messaging app and what it means that "not even the company itself can read your messages". What is the…

Explain in your own words what end-to-end encryption is in a messaging app and what it means that "not even the company itself can read your messages". What is the difference with a service that does store and can read conversations?

Solve
Practice★☆☆Not started
Your younger brother uses your tablet while you are logged in and ends up buying a skin and talking to your friends. Explain what data and accounts of yours are exposed…

Your younger brother uses your tablet while you are logged in and ends up buying a skin and talking to your friends. Explain what data and accounts of yours are exposed when sharing a device and what configuration (user profiles, lock screen, password-protected store) prevents this.

Solve
Practice★☆☆Not started
In your account settings, a list of "apps with access" appears. Explain what an app connected to your account can do, why it is advisable to revoke those you no longer…

In your account settings, a list of "apps with access" appears. Explain what an app connected to your account can do, why it is advisable to revoke those you no longer use, and how often you would review that list.

Solve
Practice★★☆Not started
A smart speaker "only listens when activated". Explain what is actually recorded on these devices, where the recordings are stored, what privacy settings review you…

A smart speaker "only listens when activated". Explain what is actually recorded on these devices, where the recordings are stored, what privacy settings review you would perform at home and in which rooms you would never place one.

Solve

Sharing with other people: photos, chats, and channels

Your privacy also depends on what others post about you, and on what you post about them. Before uploading a photo where someone else appears, ask yourself:

  • Does that person know I'm posting it and agree to it?

  • Could it affect them (embarrassment, teasing, someone finding out where they are)?

  • Are they a minor, or in an intimate moment?

This is related to the right to one's own image: nobody should spread your image without your consent, even if a friend took the photo.

Three communication channels: a private message seen by one person, a group of forty people, and a public channel anyone can see; reach grows and control shrinks. Private message 1 person sees it can forward it Group of 40 40 people see it anyone can forward it Public channel anyone can see it no one controls it More people = less control over what you share

No channel is a safe place for highly sensitive data: passwords, photos of your INE or your CURP (national ID number), bank details, intimate photos. A single screenshot takes them out of the channel.

A related idea: some people separate their digital identities (a personal account, another for video games, another for their future career). That way they reduce the damage if one account is leaked and they don't mix audiences. But it takes organization, and if you share the same data on all of them, someone can link them together. A good rule of thumb: on each account, put only what serves that audience.

Practice★★☆Not started
Your class group has a chat where photos of everyone are shared. Explain what you should keep in mind before uploading a photo featuring someone else and how this…

Your class group has a chat where photos of everyone are shared. Explain what you should keep in mind before uploading a photo featuring someone else and how this relates to the right to one's own image.

Solve
Practice★★☆Not started
Compare the actual privacy of three channels: a private message on a social network, a class group of forty people and a public channel. Explain who can see each one,…

Compare the actual privacy of three channels: a private message on a social network, a class group of forty people and a public channel. Explain who can see each one, who can forward it and what type of content should not travel through any of the three.

Solve
Practice★★★Not started
Some people maintain separate online identities depending on the context: a personal account, another for gaming, another intended for their professional future. Analyse…

Some people maintain separate online identities depending on the context: a personal account, another for gaming, another intended for their professional future. Analyse the advantages and risks of separating identities and propose criteria to decide what information goes into each one.

Solve

Your rights over your data

The four ARCO rights: Access, Rectification, Cancellation, and Opposition, each in its own box. A Access what data do you have? R Rectification fix an error C Cancellation delete my data O Opposition don't use it this way They are exercised with whoever holds your data (the company)

Companies must have a privacy notice that says what data they collect, what for, who they share it with, and how to exercise these rights. Minors have reinforced protection: the processing of their data must have the consent of a mother, father, or guardian. That's why many services set a minimum age (for example 13 or 14, depending on the platform) and ask for your date of birth.

A privacy notice in plain language (one that a 14-year-old can understand) answers six questions: what data it asks for, exactly what for, how long it keeps it, who it shares it with, how to exercise ARCO, and whom to notify if something goes wrong.

Practice★★☆Not started
In Mexico, for certain online services, the law requires parental consent before fourteen years of age. Explain why this age limit exists, what happens to the data of a…

In Mexico, for certain online services, the law requires parental consent before fourteen years of age. Explain why this age limit exists, what happens to the data of a minor who lies about their date of birth when signing up, and why platforms ask for your age.

Solve
Practice★★★Not started
Having just turned 14, you request an online gaming platform to permanently delete your account and all your associated personal data. The company responds with this…

Having just turned 14, you request an online gaming platform to permanently delete your account and all your associated personal data. The company responds with this message:

"We have processed your request: your profile is no longer visible to other users. However, for permanent deletion from our servers, you must pay 5.00 pesos in processing fees and attach an authorization signed by your legal guardians sent by post. In addition, we will retain your forum messages and your purchase history indefinitely for security purposes."

Analyze the situation by applying data protection regulations (GDPR and Spanish law):

  1. Identify and justify at least two legal irregularities present in the platform's response.

  2. Draft the formal reply you would send to the company to demand the effective exercise of your right to erasure without undue hindrance, indicating the legal deadline they have to comply with it and which official body you will file a complaint with if they do not.

Solve
Practice★★★Not started
Write a clear-English privacy policy for your school app, written so that a fourteen-year-old can understand it: what data it requests, for what exact purpose, how long…

Write a clear-English privacy policy for your school app, written so that a fourteen-year-old can understand it: what data it requests, for what exact purpose, how long it stores it, with whom it shares it, and how to exercise the rights of access and erasure.

Solve

Free services, security, and trust

Many apps are free: a photo editor, a social network, a search engine. So, who pays? The terms of use say so, even though almost nobody reads them. If a photo-retouching app reserves the right to use your images "for commercial purposes," the deal is: you give your photos, it gives you the service. Before accepting, ask yourself:

  • What data am I handing over and what will they use it for?

  • Can I delete it or withdraw my permission later?

You also have to balance security and privacy. A school that installs cameras in the hallways or tracks the school bus gains security, but monitors the students. Three reasonable conditions: inform families, make it proportional (cameras in hallways and entrances, not in bathrooms), and make the data expire (deleted after a short period).

The same goes for parental control apps: seeing location, screen time, and messages protects an 8-year-old, but at 14 total surveillance can damage trust. A good family agreement sets what is shared (for example, location on long trips), what is respected (private messages), and when it's reviewed.

Practice★★☆Not started
A free photo editing app states in its terms and conditions that it may use the images you upload "for commercial purposes". Analyse the deal you are accepting (what you…

A free photo editing app states in its terms and conditions that it may use the images you upload "for commercial purposes". Analyse the deal you are accepting (what you give and what you receive) and formulate two questions worth asking yourself before accepting the terms of any free service.

Solve
Practice★★★Not started
Analyse the phrase "if it's free, you're the product". Is it always true? Compare the business models of advertising, subscriptions and open-source software with…

Analyse the phrase "if it's free, you're the product". Is it always true? Compare the business models of advertising, subscriptions and open-source software with donations, and explain how the chosen model affects how your data is treated.

Solve
Practice★★★Not started
A school installs cameras in the corridors and an app that tracks the school bus in real time. Weigh up the security they provide against student privacy and formulate…

A school installs cameras in the corridors and an app that tracks the school bus in real time. Weigh up the security they provide against student privacy and formulate three conditions (information for families, proportionality, data retention limits) that should be met.

Solve
Practice★★★Not started
Parental control apps allow parents to see their children's location, screen time and messages. Analyse where the balance lies between protection and trust depending on…

Parental control apps allow parents to see their children's location, screen time and messages. Analyse where the balance lies between protection and trust depending on age, and propose a reasonable family agreement for a fourteen-year-old.

Solve

Healthy use and serious risks online

Young people ages 12 to 17 spend about 5.6 hours a day online (ENDUTIH 2023). That much time affects the body, sleep, and mood. "Free" platforms earn from your attention, so they're designed to make it hard to put your phone down: notifications, videos that keep playing on their own, "like" counters.

Habits that help:

  • Sleep: keep your phone out of your bedroom or on "do not disturb" at night; the screen light and notifications take away rest.

  • Body: take breaks to stretch and look into the distance; avoid spending hours in a row without moving.

  • Mood: if after using a network you feel worse (comparing yourself, anxious, or sad), reduce your time and adjust whom you follow.

  • Notifications: turn off the ones you don't need, so you decide when you log in.

There are also serious risks, and they're handled with a cool head:

  • Contact with strangers who ask for photos, secrets, or meetups, or who pretend to be someone your age.

  • Harassment and online violence: insults, threats, spreading intimate photos without permission. They affect young women more often, and the blame is never on the person who receives the aggression.

What to do: don't respond to or negotiate with whoever is pressuring you; save screenshots as evidence; block and report the account on the platform; and talk about it as soon as possible with a trusted adult (family, teacher, or school counselor). If there are threats or real danger, your family or the school can go to the authorities. Asking for help is not a failure.

Practice★★★Not started
In mental health or anti-bullying support forums, many people participate under a pseudonym. Analyse what anonymity protects in these spaces, what abuses it allows, and…

In mental health or anti-bullying support forums, many people participate under a pseudonym. Analyse what anonymity protects in these spaces, what abuses it allows, and which model you would defend — total anonymity, persistent pseudonym or real name — giving nuances.

Solve

Go back to the beginning: Ximena could have had her account private, asked her cousin's permission before posting the photo, and refused to send her INE to whoever asked for it by message.

Summary

See all the exercises in this section