Computing · JC 2 · Database Systems and Data Modeling · Semester 1

Data Privacy: Protecting Your Information

Students will learn about the importance of personal data privacy and simple strategies to protect their own information online.

• MOE Syllabus Outcomes
• MOE: Social Computing - Middle School

About This Topic

In JC 2 Computing, Data Privacy: Protecting Your Information teaches students the value of personal data and risks in online environments. They identify why data matters, from targeted advertising to identity theft via phishing and breaches. Simple strategies cover strong passwords, two-factor authentication, privacy settings, and recognizing suspicious requests. This fits MOE Social Computing standards in the Database Systems unit, linking ethical data use to modeling secure databases.

Students apply concepts to Singapore contexts, like PDPA compliance and youth-heavy platforms such as TikTok or Discord. They analyze common misuses, building skills in risk assessment and digital citizenship for university and careers in tech-driven fields.

Active learning suits this topic well. Role-plays of phishing scenarios and personal audits make threats immediate and relevant. Collaborative checklist creation encourages peer accountability, turning knowledge into habits through reflection and shared problem-solving.

Key Questions

1. Why is it important to protect our personal data online?
2. What are some common ways our data can be misused?
3. What steps can you take to keep your personal information safe?

Learning Objectives

• Analyze common methods of personal data misuse, such as phishing and data breaches.
• Evaluate the effectiveness of various security measures for protecting personal information online.
• Design a personal data protection checklist incorporating at least three distinct security strategies.
• Explain the potential consequences of compromised personal data for individuals in Singapore.
• Compare the privacy policies of two popular social media platforms relevant to Singaporean users.

Before You Start

Introduction to Cybersecurity Threats

Why: Students need a basic understanding of common online threats like malware and viruses to grasp the nuances of data privacy risks.

Basic Internet Safety Practices

Why: Familiarity with safe browsing habits and recognizing suspicious links is foundational for understanding more complex data protection strategies.

Key Vocabulary

Personal Data Protection Act (PDPA)	Singapore's law that governs the collection, use, and disclosure of individuals' personal data. It sets out standards for organizations to follow.
Phishing	A fraudulent attempt to obtain sensitive information, such as usernames, passwords, and credit card details, by disguising oneself as a trustworthy entity in electronic communication.
Two-Factor Authentication (2FA)	A security process that requires users to provide two different authentication factors to verify their identity. This often involves something they know (password) and something they have (phone).
Data Breach	An incident where sensitive, protected, or confidential data is copied, transmitted, viewed, stolen, or used by an unauthorized individual.
Privacy Settings	Configurable options within online services or applications that allow users to control who can see their information and how their data is used.

Watch Out for These Misconceptions

Common Misconception

Incognito mode fully protects my online activity.

What to Teach Instead

Incognito hides local history but not tracking by sites, apps, or networks. Hands-on browser demos let students visit sites in incognito and check trackers via tools, while group analysis corrects models and boosts awareness.

Common Misconception

Sharing details with close friends online carries no risk.

What to Teach Instead

Friends' accounts get hacked, spreading data widely. Role-play chains of sharing reveal consequences; peer discussions help students internalize boundaries through real-time empathy building.

Common Misconception

A single strong password suffices across all sites.

What to Teach Instead

Hackers reuse credentials in stuffing attacks. Password manager trials and unique password creation activities demonstrate necessity, with pair practice reinforcing secure habits via immediate feedback.

Active Learning Ideas

Role-Play: Phishing Scenarios

Pairs receive printed phishing emails or texts; one acts as sender, the other evaluates risks and responds safely. Switch roles after 10 minutes, then debrief class-wide on indicators like urgent language or odd links. Provide PDPA reporting templates.

35 min·Pairs

Privacy Audit: Device Check

Individually, students examine app permissions and social media settings on school devices or demos, listing vulnerabilities. In small groups, compile a class privacy scorecard and vote on priority fixes. Share anonymized results.

40 min·Small Groups

Checklist Workshop: Safe Practices

Small groups brainstorm and design visual checklists for passwords, sharing, and verification. Test checklists on sample profiles, refine based on feedback, then present to class for a shared digital resource.

45 min·Small Groups

Breach Response Simulation

Whole class draws 'data breach' cards with leaked info types; groups prioritize recovery steps like account locks and monitoring. Simulate with timers, discuss prevention in plenary.

30 min·Whole Class

Real-World Connections

• Cybersecurity analysts at DBS Bank in Singapore constantly monitor for phishing attempts and data breaches to protect customer financial information, adhering to PDPA regulations.
• Social media managers for brands like Grab or Shopee must understand user privacy settings and data handling practices to ensure compliance and maintain customer trust on their platforms.
• Individuals applying for university in Singapore or overseas will encounter online application portals that require careful management of personal details, highlighting the need for secure practices.

Assessment Ideas

Exit Ticket

Provide students with a scenario: 'You receive an email asking you to click a link to verify your Singpass account due to unusual activity.' Ask them to write: 1) What is the most likely threat here? 2) What is one specific action you would take before clicking any link? 3) What is one privacy setting you would check on your email account?

Discussion Prompt

Pose the question: 'Imagine a friend shares a password with you for a game. Is this a good idea? Why or why not?' Facilitate a class discussion, guiding students to articulate risks related to password sharing and the importance of unique, strong passwords.

Quick Check

Present students with a list of common online activities (e.g., posting photos, signing up for a newsletter, using public Wi-Fi, sharing location). Ask them to quickly rank these activities from 'lowest risk' to 'highest risk' for personal data exposure and briefly justify their top two choices.

Frequently Asked Questions

Why protect personal data online as a JC student?

JC students post study notes, profiles, and contacts, exposing them to scams or doxxing that harm grades or reputations. In Singapore's digital hub, PDPA stresses consent; protection safeguards future job apps and builds ethical tech use amid rising cyber threats like those from 2023 breaches.

What are common ways personal data gets misused?

Misuse includes phishing for logins, data sales for ads, identity theft via stolen IDs, and breaches leaking health or financial info. Students see examples from SingHealth hacks; awareness prevents falls for fake scholarships or job offers targeting youth.

How can active learning help teach data privacy?

Active methods like phishing role-plays and app audits engage students directly with their devices, revealing personal risks over lectures. Group debriefs foster discussions that challenge myths, while creating checklists promotes ownership. This leads to 70% better retention per studies, translating to safer online behaviors.

What simple steps keep my information safe online?

Use unique passwords with managers, enable 2FA everywhere, limit app data access, avoid public Wi-Fi for sensitive tasks, and verify links before clicking. Regular audits and PDPA-guided sharing rules minimize exposure; tools like antivirus add layers for JC routines.