Privacy by design for a student solution

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which describes privacy by design?

A Building privacy into a solution from the very start

B Adding privacy settings after the app is finished

2. A student builds a quiz app for their class. Which setting follows privacy by design?

A Scores are public by default, and students must turn sharing off

B Scores are private by default, and students choose to share them

3. Your app needs to track which student borrowed a library book. Which is the better way to identify students?

A Use an anonymous ID such as S-4821

B Store each student's full name and home address

4. Which is a data deletion plan?

A Deleting survey responses 30 days after the project ends

B Keeping all survey responses forever just in case

5. You are designing a sign-up form for a school sports club app. Which form follows privacy by design?

A Ask for name, birthday, address and phone number just in case

B Ask only for first name and year level

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1profile_visibility = "private"		APrivate by default: new accounts start with the most private setting, and users choose to share more
2student_id = "S4821"		BAn anonymous ID is stored instead of the student's real name
3A data deletion plan: records are removed automatically after the project ends		Cfields = ["nickname", "score"]
4Privacy by design means collecting minimal data, so only the data the app needs is asked for		DNew accounts start as public, so students' info is shared before they choose. Private by default means the setting should be "private".
5profile_visibility = "public"		EA real name and class are used as the ID. An anonymous ID like "P207" should be used instead.
6player_id = "Mia Nguyen, 10B"		Fdelete_after_days = 30

Definitions

privacy by design

Fill in the Blanks

Complete each line of code by filling in the missing parts.

SET profileVisibility TO _______

SAVE ___________ INSTEAD OF fullName

IF today > deleteDate THEN ______ record

shareLocation = _____

deleteDate = today _ 30

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A id = make_anon_id()

B profile = 'private'

C keep_days = 90

D keep_forever(keep_days)

Question 2

A user = {}

B user['id'] = new_anon_id()

C user['year'] = ask_year()

D user['visible'] = 'public'

Question 3

A def sign_up(nickname):

B id = make_anon_id()

C visible = True

D return id

Question 4

A collect(name, address)

B set_privacy('private')

C wait(keep_days)

D delete(anon_id)

Question 5

A score = get_score()

B who = student_name

C save(who, score)

D delete_after(60)

Answer Key

Privacy by design for a student solution

Section A: Quick Questions

A — Building privacy into a solution from the very start

B — Scores are private by default, and students choose to share them

A — Use an anonymous ID such as S-4821

A — Deleting survey responses 30 days after the project ends

B — Ask only for first name and year level

Section B: Match the Pairs

profile_visibility = "private" → Private by default: new accounts start with the most private setting, and users choose to share more

student_id = "S4821" → An anonymous ID is stored instead of the student's real name

A data deletion plan: records are removed automatically after the project ends → delete_after_days = 30

Privacy by design means collecting minimal data, so only the data the app needs is asked for → fields = ["nickname", "score"]

profile_visibility = "public" → New accounts start as public, so students' info is shared before they choose. Private by default means the setting should be "private".

player_id = "Mia Nguyen, 10B" → A real name and class are used as the ID. An anonymous ID like "P207" should be used instead.

Section C: Definitions

privacy by design — Building privacy into a solution from the start: collect minimal data, use anonymous IDs, make settings private by default and plan how data will be deleted.

Section D: Fill in the Blanks

SET profileVisibility TO PRIVATE

SAVE anonymousID INSTEAD OF fullName

IF today > deleteDate THEN DELETE record

shareLocation = FALSE

deleteDate = today + 30

Section E: Spot the Error

D — A data deletion plan means the data is deleted after the set time. The last line should be delete_after(keep_days), not keep_forever.

D — Privacy by design means settings are private by default. The visible setting should be 'private', not 'public'.

C — New profiles should be private by default, so visible should start as False. Users can choose to share later.

A — Privacy by design collects minimal data and uses an anonymous ID. It should collect anon_id and year_level, not a name and address.

B — Scores should be linked to an anonymous ID, not a real name. The line should be who = anon_id.