Unit 10 · Lesson 3

Data Policies
and Privacy

How much personal data do we share online, and who gets to use it?

Poll

What Counts as Private?

Which of the following pieces of information would you consider private or personal? As in, you would not want it shared with just anyone?

Your full name
Your social security number
A picture of your face
Your address
Your medical history
Your IP address
Activity

Your Data and Computing Innovations

Computing innovations rely on data to function, but we rarely stop to consider just how personal or private that data really is. Every app you open, every site you visit, and every service you sign up for is collecting information about you.

Today we are going to examine what data companies actually collect, how they describe their practices in their privacy policies, and what that means for your personal information.

The question is not just what data is collected. It is also who sees it, how it is used, and how long it is kept.

Privacy Policies

The Fine Print Nobody Reads

Most websites and apps publish a privacy policy: a legal document describing what data they collect, how they use it, and who they share it with. You have almost certainly clicked "I Agree" on one of these without reading a single word.

What to Look For

  • What specific data does the company collect?
  • Is the data sold or shared with third parties?
  • How long is your data stored?
  • Can you request that your data be deleted?

Why It Matters

Clicking "Agree" is a legal contract. Once you agree, the company can use your data in any way the policy allows, which could include targeted advertising, data brokering, or sharing with law enforcement.

Video

Data and Privacy Online

Watch for: how companies collect and use personal data, and what the real cost of "free" online services can be.

Activity

Read a Real Privacy Policy

Do This

Pick one website or app and find its privacy policy. Complete the front page of the activity guide. We will revisit the rest later in the unit.

Look for the privacy policy in the site footer, or search for the site name followed by "privacy policy".

Education
Code.org, Khan Academy, Codecademy
Social Media
Instagram, Snapchat, TikTok, X
Shopping
Amazon, Target, Walmart
Search
Google, Bing, DuckDuckGo
Maps
Google Maps, Apple Maps, Waze
Productivity
Google Docs, MS Office Online
Email
Gmail, Outlook, Yahoo Mail
Streaming
Netflix, Spotify, Pandora
Gaming
Steam, Xbox Live, Epic Games
FRQ

Reflection: What Did You Find?

What did you find that surprised you? What interesting points did you find in the privacy policy?

Think about the specific data collected, how it is shared, and whether you expected the policy to say what it did.

Wrap Up

Key Takeaways

Personally Identifiable Information (PII)
Any information that identifies, links, relates, or describes an individual. Your name, address, photos, fingerprint, and even your IP address can all qualify as PII depending on context.
Data Collection and Tracking
Technologies like geolocation, cookies, and browsing history create detailed knowledge about individuals. Most digital services need some PII to function, and many collect far more than they strictly need.
Profiling and Targeted Advertising
Many services use your data to build a detailed profile of who you are and what you like. Search engines store your query history. These profiles drive personalized ads and can be sold to data brokers.
Once Online, Hard to Control
Once data is digital and shared online, it is extremely difficult to reclaim. PII can be used to steal your identity or track your movements. Information shared on social media can be combined to build a detailed picture of your life.