Auditing the data an existing system collects

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which columns should a data audit table have?

A App name, price, star rating

B Data collected, how it is collected, what it is used for

2. A student types their name into a school library app. How is this data collected?

A Actively - the student typed it in

B Passively - it was collected automatically

3. A website records your device type and IP address as soon as you visit it. How is this data collected?

A Actively - you typed it in

B Passively - it is collected automatically

4. Which row belongs in an audit of a school login system?

A Login time | Automatic | Shows when students use the system

B Favourite colour | Maybe | Because it is nice

5. What does a data audit of an app show you?

A The app's digital footprint: what data it collects

B How fast the app runs on your phone

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Data \| How collected \| Purpose		AFull name \| Typed in (active) \| Create the student account
2Location \| Automatic (passive) \| Show nearby shops		BThe collection method is wrong. A phone's device model is collected automatically by the app, so it should say Automatic (passive).
3A school login system records the name the student types in on the sign-up page. This is active collection.		CThe column headings of a data audit table: what data, how it is collected and why it is used
4A website quietly records which pages a visitor clicks on. This is passive collection.		DThe table is missing a How collected column, so we cannot tell if the data was typed in or collected automatically.
5Data \| Purpose Email \| Log in to the app		EPages visited \| Automatic (passive) \| Improve the website
6Device model \| Typed in (active) \| Fix bugs		FA data audit row for data the app collects by itself, without the user typing it in

Definitions

data audit

Fill in the Blanks

Complete each line of code by filling in the missing parts.

Data | How collected | ________

Email address | typed in | ______

Cookie ID | automatic | _______

Location | _________ | Find nearby shops

A __________ lists what a system collects

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A Data | Used for | How

B Name | Typed in | Greet user

C GPS | Automatic | Show map

Question 2

A Audit: school website

B Data | How | Used for

C Typed in | Email | Send login

D IP address | Automatic | Stats

Question 3

A Audit: music app

B Data | How | Used for

C Username | Typed in | Log in

D Plays | Typed in | Playlists

Question 4

A Audit: class chat app

B Data | How | Used for

C Messages | Typed in

D Device ID | Automatic | Security

Question 5

A Audit: library system

B Data | Type | Used for

C Name | Active | Borrow books

D Loan date | Active | Overdue

Answer Key

Auditing the data an existing system collects

Section A: Quick Questions

B — Data collected, how it is collected, what it is used for

A — Actively - the student typed it in

B — Passively - it is collected automatically

A — Login time | Automatic | Shows when students use the system

A — The app's digital footprint: what data it collects

Section B: Match the Pairs

Data | How collected | Purpose → The column headings of a data audit table: what data, how it is collected and why it is used

Location | Automatic (passive) | Show nearby shops → A data audit row for data the app collects by itself, without the user typing it in

A school login system records the name the student types in on the sign-up page. This is active collection. → Full name | Typed in (active) | Create the student account

A website quietly records which pages a visitor clicks on. This is passive collection. → Pages visited | Automatic (passive) | Improve the website

Data | Purpose Email | Log in to the app → The table is missing a How collected column, so we cannot tell if the data was typed in or collected automatically.

Device model | Typed in (active) | Fix bugs → The collection method is wrong. A phone's device model is collected automatically by the app, so it should say Automatic (passive).

Section C: Definitions

data audit — A table that lists each piece of data a system collects, how it is collected (typed in or automatic) and what it is used for. It shows the system's footprint.

Section D: Fill in the Blanks

Data | How collected | Used for

Email address | typed in | active

Cookie ID | automatic | passive

Location | automatic | Find nearby shops

A data audit lists what a system collects

Section E: Spot the Error

A — The header columns are in the wrong order. Each row lists the data, then how it is collected, then what it is used for, so the header should be 'Data | How | Used for'.

C — The row has its columns swapped. The data item comes first and how it is collected comes second, so it should be 'Email | Typed in | Send login'.

D — The app records which songs you play without you typing anything. That is passive collection, so the 'How' column should say Automatic.

C — The row is missing its 'Used for' column. A data audit must record what each piece of data is used for, so it should be 'Messages | Typed in | Chat'.

D — The loan date is recorded automatically when a book is scanned, so it is passive data. The row should say Passive, not Active.