Computer Science: Data Privacy and Consent in Apps
Understanding how apps collect, use, and protect personal data
Computer Science: Data Privacy and Consent in Apps
Understanding how apps collect, use, and protect personal data
Computer Science - Grade 6-8
- 1
An app asks for your name, age, email address, location, and contacts list. List which of these are examples of personal data and explain why they matter.
Personal data is information that can identify you or is connected to you.
All five items are examples of personal data because they can describe, identify, or help contact a person. They matter because sharing them can affect privacy, safety, and how companies track or communicate with users. - 2
A flashlight app asks for permission to use the camera flash, your microphone, your location, and your contacts. Which permission seems necessary for the app to work, and which permissions seem unnecessary?
Think about the main job the app is supposed to do.
The camera flash permission seems necessary because a flashlight app needs to turn on the phone's light. The microphone, location, and contacts permissions seem unnecessary because they are not needed to shine a light. - 3
Define consent in the context of using an app. Include one example of giving consent and one example of not giving consent.
Consent means freely agreeing to allow an app to collect or use certain information after understanding what is being requested. An example of giving consent is tapping Allow after reading why a map app needs location. An example of not giving consent is tapping Deny when a game asks to access contacts for no clear reason. - 4
A weather app says, 'We use your location to show local forecasts.' Is this a clear reason for collecting location data? Explain your answer.
A clear reason connects the data request to the app's main function.
Yes, this is a clear reason because location data helps the app show weather for the user's area. The app should still let the user choose whether to share exact location or enter a city manually. - 5
Read this privacy notice: 'We may collect information to improve services.' What is unclear about this statement, and how could it be improved?
The statement is unclear because it does not say what information is collected, how it is used, or who can access it. It could be improved by naming the specific data collected and explaining the exact purpose, such as using crash reports to fix bugs. - 6
A game app offers a free reward if users agree to share their contacts. Explain why this could be a privacy concern.
Consent matters for your data and for other people's data stored on your device.
This could be a privacy concern because the contacts belong to other people who may not have agreed to share their information. The app may use those names, phone numbers, or emails for advertising or tracking. - 7
Match each type of data to the most likely app use: A. Location, B. Email address, C. Step count, D. Search history. Uses: 1. Send account recovery messages, 2. Track fitness progress, 3. Recommend content or ads, 4. Show nearby restaurants.
A matches 4 because location can show nearby restaurants. B matches 1 because an email address can be used for account recovery. C matches 2 because step count is used to track fitness progress. D matches 3 because search history can be used to recommend content or ads. - 8
An app permission screen has two buttons: 'Accept All' and 'Manage Settings.' Why is 'Manage Settings' important for meaningful consent?
Meaningful consent is more than just clicking one button quickly.
Manage Settings is important because it can let users choose which data uses they agree to instead of accepting everything at once. Meaningful consent works best when users have real choices and understand them. - 9
Write two questions you should ask before installing a new app that collects personal data.
One question is, 'What data does this app collect and why does it need it?' Another question is, 'Can I use the app without sharing unnecessary information?' Other good questions include asking who the data is shared with and how long it is kept. - 10
A social media app collects birthday information. Give one helpful use and one risky use of collecting birthdays.
The same data can sometimes be used in helpful and harmful ways.
A helpful use is making sure users meet the minimum age requirement or showing birthday reminders. A risky use is using birthdays for targeted advertising or making it easier for someone to guess account security information. - 11
Look at this data flow: User enters email in app, app stores email on company server, company sends promotional messages. Identify where the user should be asked for consent.
The user should be asked for consent before the app stores the email if storage is not required for the main service, and before the company sends promotional messages. The app should clearly explain both uses before the user agrees. - 12
Explain the difference between required data and optional data in an app.
Required data is information an app truly needs to provide its main service, such as a username for logging in. Optional data is information that may improve the experience but is not necessary, such as a profile picture or interest list. - 13
A music app asks to access your microphone so it can identify songs playing nearby. What should the app explain before you decide whether to allow access?
Focus on what data is collected, when collection happens, and what happens after collection.
The app should explain when the microphone is used, whether audio is recorded or only analyzed briefly, where the data is sent, how long it is kept, and whether it is shared with others. This helps the user make an informed choice. - 14
Create a short privacy-friendly permission message for a photo editing app that needs access to photos. The message should be clear and specific.
A good message could say, 'Allow PhotoFix to access the photos you choose so you can edit and save them. We will not access your full photo library unless you give permission.' This is clear because it explains the purpose and limits of access. - 15
Study this app dashboard: Location is on, Contacts is on, Camera is off, Notifications is on. Choose one setting you might turn off to improve privacy and explain why.
Choose a setting that is not needed for the app's main purpose.
One setting to turn off might be Contacts because many apps do not need a full contact list to work. Turning it off can protect both the user's privacy and the privacy of people in the contact list.