Critiquing a student solution's digital footprint against the APPs

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A student is critiquing a homework-tracker app. What should they do FIRST?

A Write the recommendation to fix the app

B List every piece of data the app collects

2. A quiz app asks for each player's home address. Which APP should you test this against?

A APP 3: collect only what is reasonably necessary

B APP 12: access to personal information

3. Which rating fits best? A sign-up form collects a birth date, but the app only needs to know the user is over 13, and the form says nothing about why it is collected.

A Partly met or not met, with the evidence recorded

B Met, because the user typed it in themselves

4. Which is a specific recommendation for a student's fitness app?

A Make the app more private

B Remove the GPS tracking and ask only for a nickname

5. Which is the best evidence for rating APP 5 (notifying people when collecting data) as 'not met'?

A The app collects emails but shows no collection notice

B I just don't like how the app looks

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Data collected: name, email, birthdate, GPS location		AThe recommendation is vague. It should name the data item and the change, such as 'Remove the phone number field from sign-up'.
2APP 3 \| Birthdate \| Not met \| Not needed for a quiz		BRemove the birthdate field and ask for year level only
3A recommendation must be specific and shrink the footprint, not just say 'be more private'		CStep 2: test one data item against a relevant APP and record met, partly met or not met with evidence
4After making a change, re-check the same data items against the APPs to confirm the rating improved		DA rating is given with no evidence. Add why, for example: 'GPS is collected but the app works without it', so the rating is Not met.
5APP 3 \| Location \| Met		EStep 1: list every item of data the prototype or app collects, so nothing is missed
6Recommendation: Collect less data		FAPP 3 \| Birthdate removed \| Met

Definitions

privacy critique

Fill in the Blanks

Complete each line of code by filling in the missing parts.

FOR EACH item __ data_list CHECK item AGAINST relevant_apps

IF needed = false THEN rating ← "_______"

IF rating _ "met" THEN ADD recommendation TO report

APPLY recommendation TO form ________ form AGAINST relevant_apps

_____________ ← ["APP 3", "APP 11"]

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A data = ["name", "GPS", "DOB"]

B for item of data:

C print(item, "APP 3")

Question 2

A status = "partly met

B evidence = "Asks for DOB"

C print(status, "-", evidence)

Question 3

A app = "QuizApp"

B collected = ["name", "email"]

C print(app, length(collected))

Question 4

A collected = {"email", "DOB"}

B needed = ["email"]

C print(collected - needed)

Question 5

A collected = ["name", "GPS"]

B score = 0

C if "GPS" == collected:

D score += 1

Answer Key

Critiquing a student solution's digital footprint against the APPs

Section A: Quick Questions

B — List every piece of data the app collects

A — APP 3: collect only what is reasonably necessary

A — Partly met or not met, with the evidence recorded

B — Remove the GPS tracking and ask only for a nickname

A — The app collects emails but shows no collection notice

Section B: Match the Pairs

Data collected: name, email, birthdate, GPS location → Step 1: list every item of data the prototype or app collects, so nothing is missed

APP 3 | Birthdate | Not met | Not needed for a quiz → Step 2: test one data item against a relevant APP and record met, partly met or not met with evidence

A recommendation must be specific and shrink the footprint, not just say 'be more private' → Remove the birthdate field and ask for year level only

After making a change, re-check the same data items against the APPs to confirm the rating improved → APP 3 | Birthdate removed | Met

APP 3 | Location | Met → A rating is given with no evidence. Add why, for example: 'GPS is collected but the app works without it', so the rating is Not met.

Recommendation: Collect less data → The recommendation is vague. It should name the data item and the change, such as 'Remove the phone number field from sign-up'.

Section C: Definitions

privacy critique — List the data a solution collects, test each item against the relevant APPs as met, partly met or not met, then recommend changes that shrink the footprint.

Section D: Fill in the Blanks

FOR EACH item IN data_list
    CHECK item AGAINST relevant_apps

IF needed = false THEN
    rating ← "not met"

IF rating ≠ "met" THEN
    ADD recommendation TO report

APPLY recommendation TO form
RE-CHECK form AGAINST relevant_apps

relevant_apps ← ["APP 3", "APP 11"]

Section E: Spot the Error

B — Python loops use 'in', not 'of'. The critique loop that tests each collected item must be 'for item in data:'.

A — The string is missing its closing quote. A rating such as "partly met" must be a complete string: status = "partly met".

C — Python counts the items in a list with len(), not length(). The footprint size should be len(collected).

B — Subtracting a list from a set causes an error. needed must be a set, needed = {"email"}, so the extra data (DOB) can be found.

C — == compares one string to the whole list, so it is never true. To check whether GPS is collected, use 'in': if "GPS" in collected:.