Risks of collecting and keeping too much data

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A school app collects students' home addresses it does not need. Which statement is true?

A If the data is never collected, it can never be breached

B Extra data is harmless because only the school can see it

2. What is a data breach?

A When data a system holds is stolen or leaked

B When a user chooses to delete their own account

3. Which footprint carries the bigger risk if a website is hacked?

A A smaller footprint, with only an email address stored

B A bigger footprint, with lots of stored data about you

4. A shop collected your email to send a receipt, then used it to send ads you never agreed to. This is:

A Misuse of data for another purpose

B Good data minimisation

5. A criminal gets a person's full name, date of birth and address from a breach. What could happen?

A The data automatically becomes anonymous

B Identity theft, where they pretend to be that person

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1data breach		Acollect: name, email skip: birthdate, home address
2identity theft		BWhen data a system holds is stolen or leaked to people who should not have it
3Data you never collect cannot be breached, so a form that does not ask for it is safer		CMore data is not harmless. Each extra item can be stolen in a breach or used for identity theft. The app should only ask for what it needs.
4Data collected for one purpose gets misused if it is used for another purpose		DWhen a criminal uses stolen personal details, like a name and birthdate, to pretend to be someone else
5Keep every answer forever, just in case we need it later.		EKeeping all data for ever makes the footprint bigger, and a bigger footprint means a bigger risk if there is a breach. Delete data once it is not needed.
6Our quiz app asks for phone number, home address and birthdate, because more data is harmless.		Fcollected for: quiz login used for: selling to advertisers

Definitions

data breach

Fill in the Blanks

Complete each line of code by filling in the missing parts.

SELECT _________, house FROM students;

DELETE FROM students WHERE _________ = 4;

______ students SET house = 'None';

=LEFT(A2,_)

SELECT firstName FROM students _____ yearLevel = 7;

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A fields = ['name', 'email']

B risk = len(field)

C print('Risk score:', risk)

Question 2

A data = ['name', 'dob']

B breached = True

C if breached

D print('Data leaked')

Question 3

A collected = 5

B needed = 2

C extra = collected - needed

D if extra = 0:

E print('Remove extra data')

Question 4

A function risk(num_fields):

B return num_fields * 2

C print(risk(8))

Question 5

A SELECT firstName, house

B FROM students

C WHERE points => 100;

Answer Key

Risks of collecting and keeping too much data

Section A: Quick Questions

A — If the data is never collected, it can never be breached

A — When data a system holds is stolen or leaked

B — A bigger footprint, with lots of stored data about you

A — Misuse of data for another purpose

B — Identity theft, where they pretend to be that person

Section B: Match the Pairs

data breach → When data a system holds is stolen or leaked to people who should not have it

identity theft → When a criminal uses stolen personal details, like a name and birthdate, to pretend to be someone else

Data you never collect cannot be breached, so a form that does not ask for it is safer → collect: name, email skip: birthdate, home address

Data collected for one purpose gets misused if it is used for another purpose → collected for: quiz login used for: selling to advertisers

Keep every answer forever, just in case we need it later. → Keeping all data for ever makes the footprint bigger, and a bigger footprint means a bigger risk if there is a breach. Delete data once it is not needed.

Our quiz app asks for phone number, home address and birthdate, because more data is harmless. → More data is not harmless. Each extra item can be stolen in a breach or used for identity theft. The app should only ask for what it needs.

Section C: Definitions

data breach — When data a system holds is stolen or leaked. Data you never collect cannot be breached, so the more you keep, the bigger the risk, including identity theft and misuse.

Section D: Fill in the Blanks

SELECT firstName, house FROM students;

DELETE FROM students WHERE studentId = 4;

UPDATE students SET house = 'None';

=LEFT(A2,1)

SELECT firstName FROM students WHERE
 yearLevel = 7;

Section E: Spot the Error

B — The list is called fields, not field, so Python cannot find a variable called field. It should be risk = len(fields). The risk score counts how much data is kept.

C — An if statement must end with a colon. It should be if breached: so the leak message prints when a data breach happens.

D — A single = assigns a value and cannot be used as a test. To check whether extra data was collected, use a comparison: if extra > 0:. Extra data means extra breach risk.

A — Python defines a function with the keyword def, not function. It should be def risk(num_fields): so the risk score can be worked out from the number of fields.

C — SQL has no => operator. 'Greater than or equal to' is >=, and 'greater than' is >. The fixed line is WHERE points > 100; so the query shows only the rows and fields needed.