8.6.1 - You and your data - 8CS1

• Computing
• Lower Secondary (Key Stage 3)

8.6.1 - You and your data

8CS1 – Cyber Security

What do you think of when you hear the term 'cybersecurity'?

Lesson objectives

In this lesson, you will: 

• Explain the difference between data and information
  
• Critique online services in relation to data privacy
  
• Identify what happens to data entered online
  
• Explain the need for the Data Protection Act
  

Key Vocabulary

Data  /  information  /  cybersecurity, cybercriminals  /  profiling  /  user behaviour  /  privacy policies  /  data protection  /  data subject  /  data portability  /  malware

And this was all before lunchtime!

What do you think these attacks are trying to steal?

DATA!!!

Cybersecurity

In this unit you will gain an awareness of:

 

• The importance and value of data
  
• How human actions can make data more vulnerable to theft or exploitation
  
• Common cyberattacks
  
• Measures put in place on networks to help protect IT systems from attacks
  

What is the difference between data and information?

Data is raw facts and figures:

John: 28

Claire: 49

Jade: 40

Ahmed: 45

Chloe: 38

Information is created when that data has been processed and becomes meaningful:

These are scores from a test where the pass mark was 35.

John needs to re-sit the test.

The average score is 40.

 

Why is customer data valuable to businesses?

Why is customer data valuable to businesses?

This data is the contents of a shopping basket for an online customer.

This data can be used to help build a profile of this customer and therefore convert the data into information.

What assumptions can you reasonably make about this customer?

Task

A customer has bought these three items. 

In Teams, write down three assumptions that you made about them.

Based on these purchases, would you recommend the 5 other products listed? Justify your answer.

3 minutes

Data social media companies might collect

Name

Date of birth

Etc.

Data social media companies might collect

Personal info: Name, date of birth, connections

Content: Images, status updates, emojis created

User behaviour: What pages you visited, groups you are a member of, what you have ‘liked’

Data you have on others: Names of your friends and their numbers

How do you think social media companies make money if they are free to use?

What do they do with your data?

Privacy policies: Be informed

Work in pairs and decide which two of the companies on the right-hand side you wish to research. 

In your pairs, allocate one each.

Spend five minutes researching the question, ‘What data do these companies collect about their users?’

Add your new findings to your table in Teams

TASK

Snapchat 

ncce.io/snapchatprivacy

Instagram ncce.io/instagramprivacy

Google ncce.io/googleprivacy

Facebook ncce.io/facebookprivacy

5 minutes

If cybercriminals successfully stole data from these companies, who would suffer and in what way?

Data Protection Act 2018

All organisations and people using and storing personal data must abide by the following principles.

Data must be --->

Data Protection Act 2018: Your rights

As a data subject, you have the right to find out what information the government and other organisations store about you.

<--- Your rights

Data Protection Act 2018: Your rights

You also have rights when an organisation is using your personal data for:

Automated decision-making processes without human involvement (for example, when a computer decides if you should be approved for a loan)

Profiling, for example to predict your behaviour or interests

you n ask for this data to be deleted

END

Potential consequence to you if cybercriminals had access to that data.

Potential consequence to the company storing the data if a cybercriminal gained access to the data they were storing.

Items of data that a company might hold on you that would help form your profile.

Identity Theft

Financial Loss

Reputational Damage

Reputational Damage

Legal Consequences

Loss of Privacy

Impact on Employment

Blackmail and Extortion

Financial Loss

Operational Disruption

Loss of Intellectual Property

Insurance Costs

Personal Identifiable Information (PII)

Financial Information

Employment Information

Educational Information

Online and Social Media Activity

Health Information

Behavioral Data

Communication Records

Location Data

Device Information

Legal Information

Demographic Information