Protecting Your Privacy

Overview

Key Stage: 4
Year Group: 10
Subject: GCSE Computing
Lesson Duration: 60 minutes
Class Size: 20 students
GCSE Specification Ref: OCR J277 / AQA 8525 – Section 1.6 "Impacts of Digital Technology on Society, including Privacy and Data Protection"

---

Curriculum Links

This lesson meets the following components of the GCSE Computer Science curriculum in the UK:

• Understand the importance of privacy in a digital world.
• Understand the Data Protection Act 2018 and GDPR.
• Identify strategies individuals and organisations use to keep data safe.
• Evaluate the ethical and legal implications of collecting, storing and sharing personal data.

---

Learning Objectives

By the end of this lesson, students will be able to:

1. Describe what is meant by personal data.
2. Explain key principles of the Data Protection Act and GDPR.
3. Evaluate risks to privacy from misuse of data.
4. Analyse real-world scenarios and justify suitable privacy protections.
5. Create a data-conscious app concept with embedded privacy features.

---

Required Resources

• Projector and computer
• Individual devices or printed handouts (for paired activity)
• Sticky notes, whiteboard, markers
• Printed scenario cards (included below)
• Printed “App Privacy” challenge brief

---

Lesson Structure

🕘 0–10 mins: Warm-Up Discussion – “Privacy: Who Cares?”

Starter Discussion Prompt (whiteboard):
“You’ve just downloaded a new app. It asks for your contacts, location, and camera. What do you do?”

• Quick-fire around the room: “Would you allow it? Why or why not?”
• Teacher mind-maps key student thoughts onto whiteboard, introducing terms like “consent”, “default settings”, “data collection”, and “third-party sharing”.

✅ Outcome: Students begin to connect everyday tech use with broader privacy concepts.

---

🕙 10–25 mins: Mini-Lecture – Law & Ethics of Data

Key points covered on slides:

• What counts as personal data: name, address, IP, biometrics, etc.
• Overview of GDPR (e.g. right to access, be forgotten, consent)
• Overview of Data Protection Act 2018 (UK implementation of GDPR)
• The principle of data minimisation
• Roles of the ICO (Information Commissioner’s Office)

Interactive Quizzing (in-class or paper-based options):
Each point has a mini-scenario question for students to answer right after it's taught (example: “If a school wants to use your photo on social media, do they need your permission?”).

✅ Outcome: Students can distinguish between ethical and legal data practices.

---

🕦 25–40 mins: Paired Activity – Real World Scenario Cards

Activity Title: “Data Decisions”

Pairs are given a scenario card (see samples below) and must:

1. Identify what kinds of personal data are involved.
2. Discuss how the GDPR/DPA would apply.
3. Decide what the company/individual should do to ethically protect the data.
4. Write responses on sticky notes and place them on the “Risk Meter” board (levels: Low Risk, Medium Risk, High Risk)

Sample Scenario Cards:

• A social media platform stores data on users’ browsing habits and sells it to advertisers.
• A school uses fingerprint scanners in the canteen.
• A shopping app collects voice data via your phone’s microphone.

✅ Outcome: Students practise applying privacy principles in realistic and age-appropriate settings.

---

🕒 40–55 mins: Creative Challenge – Design a Privacy-First App

Big Task: Students form groups of 4. Each creates a concept outline for a new app aimed at teens, focusing heavily on its privacy features.

Each group must:

• Define the target audience and app purpose.
• Identify the personal data they might need to collect.
• Decide how to give the user choice and transparency.
• Present one core privacy feature that sets their app apart.

Examples: Limited data retention, anonymised accounts, built-in tutorial on user rights.

Teacher circulates and supports with probing questions:

“How would your login system respect the ‘data minimisation’ principle?”

✅ Outcome: Students blend creativity, ethics, and computing knowledge to innovate responsibly.

---

🕓 55–60 mins: Reflection & Exit Tickets

Question on the board:
“What will you now do differently next time you install an app?”

Students write their answer on a physical “exit ticket” and hand it in. Teacher uses answers to inform future lessons and identify misconceptions.

Quick recap of main terms on screen while they write:

• Personal data
• Consent
• ICO
• Minimisation
• Right to access

✅ Outcome: Learners consolidate understanding and self-assess changes in attitude.

---

Assessment Opportunities

• Observation of class discussion and group work.
• Sticky note placements on the "Risk Meter".
• Creativity and thoughtfulness in app design task.
• Exit ticket responses to measure reflection and application.

---

Differentiation

• Support: Scenario cards have differentiated versions with additional guiding questions.
• Challenge: High-achieving students can be prompted to link issues to broader tech trends (e.g. AI, biometrics).
• Peer-mediated learning encouraged during group work.

---

Homework (Optional Extension)

Task: Research a real-world data scandal (e.g. Cambridge Analytica, NHS Data Sharing) and write a one-page summary detailing:

• What happened?
• What laws were broken or questioned?
• What lessons can we learn as individuals and developers?

---

Teacher Notes

• Encourage personal reflection — teenage engagement spikes when students connect content to their daily tech habits.
• Leave time for peer presentations if students produce standout work in their app privacy pitches.
• Consider displaying the best "Privacy First App" ideas on the classroom wall or tech noticeboard.

---

Keywords for Revision

• Personal Data
• Data Protection Act 2018
• GDPR
• Consent
• Data Minimisation
• Right to Access
• ICO (Information Commissioner’s Office)

---

Extension Ideas

• Invite a guest speaker from a local business or council data protection team.
• Roleplay mock ICO investigation case studies.
• Link to PSHE Curriculum by examining the overlap with online safety, digital footprint and mental health.

---

Wow Factor Highlight

This isn't just a computing lesson – it's a look into the ethical world of tech today. By designing their own privacy-embedded apps, students not only embed legal theory but develop critical life skills. The lesson leverages creativity, collaborative analysis, and real-world application – all within the framework of UK GCSE standards.

---

Lesson crafted to reflect the real impact of computer science on society, empowering students not just to code — but to care.