← Years 9–10 Data & Information

Reading a privacy policy

A statement of what personal information a system collects, why, who it is shared with, and how you can access or correct it. Read it for these four points.

Part of: 9-10 Digital Technologies: Data privacy and the Australian Privacy Principles — Module 18, ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 31

Understanding Reading a privacy policy in Years 9–10 Data & Information

What it does: The statement gives a specific time period, which answers the 'how long it is kept' sub-theme. It gives a clear way to request access and correction, which is the fourth point to look for when reading a policy. A privacy policy covers what is collected, why, who it is shared with, and how you can access or correct it. Download numbers are not part of that. 'Partners' is vague wording. A good policy names the types of organisations or says exactly who receives your information. 'Business purposes' could mean almost anything. The order receipt example states exactly what is collected and why.

Common mistakes: The 'what' point should record the personal information that is collected, such as name, email and location. 'We value your privacy' is a slogan that says nothing about what is collected. The 'shared' point should say who receives the data, such as parents only. '12 months' is a time period, which belongs in the 'kept' point.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Reading a privacy policy to a class →

This module's key terms are also in a printable crossword (Modules 83–132) and word search (Modules 6–132).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which of these is something a privacy policy should tell you?

What personal information the app collects and whyHow many people have downloaded the app

Matches

We may use your data for business purposes.

↓

The wording is vague. It does not say which data is used or why, so the 'why it is collected' point is not clear.

Applying

Meanings

Term

Meaning

A statement of what personal information a system collects, why, who it is shared with, and how you can access or correct it. Read it for these four points.

Practice

Collects: name, email, location

Testing

Gaps

policy. = ["name", "email"]

Check Answer

Spots

1what ← "we value your privacy"

2why ← "to deliver your order"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which of these is something a privacy policy should tell you?

A. How many people have downloaded the app

B. What personal information the app collects and why ✓

A privacy policy covers what is collected, why, who it is shared with, and how you can access or correct it. Download numbers are not part of that.

2. A policy says: 'We may share your details with our partners.' What is the problem?

A. It is vague because it does not say who the partners are ✓

B. It is clear because it names exactly who gets your data

'Partners' is vague wording. A good policy names the types of organisations or says exactly who receives your information.

3. Which policy line clearly states how long data is kept?

A. We delete your account data 12 months after you close your account. ✓

B. We keep your data for as long as we think is necessary.

A clear time period like 12 months is specific. 'As long as we think is necessary' is vague and tells you nothing.

4. You want to check who your information is shared with. Which part of the policy do you look for?

A. The section on the app's colour scheme and fonts

B. The section on disclosure or sharing with third parties ✓

Look for headings like 'Sharing', 'Disclosure' or 'Third parties' to find who else receives your personal information.

5. Which wording is vague and should make you ask questions?

A. We may use your data for business purposes. ✓

B. We use your email address to send your order receipt.

'Business purposes' could mean almost anything. The order receipt example states exactly what is collected and why.

Match the Pairs

We collect your name, email address and location. → This is the 'what is collected' point: it lists the types of personal information the system collects.

We may share your details with trusted partners. → This is the 'who it is shared with' point, but it is vague because 'trusted partners' is not named.

A clear policy says how long your data is kept, so you know when it will be deleted. → We delete your account data 12 months after you close your account.

A policy should tell you how to access or correct your personal information. → Email privacy@school.edu.au to see or fix the data we hold about you.

We may use your data for business purposes. → The wording is vague. It does not say which data is used or why, so the 'why it is collected' point is not clear.

We keep your information for as long as we need it. → This does not say how long the data is kept. 'As long as we need it' is vague and gives no time period.

Key Term

privacy policy

A statement of what personal information a system collects, why, who it is shared with, and how you can access or correct it. Read it for these four points.

Fill in the Blanks

1. policy.collects = ["name", "email"]

Hint: Type the field that lists what personal information the system collects

2. policy.shared_with = ["advertisers"]

Hint: Type the field that shows who else receives the data

3. policy.kept_for = "2 years"

Hint: Type the field that states how long the data is stored

4. wording = "we may share with partners" IF wording is vague THEN ask who exactly

Hint: Type the word describing unclear wording that should make you ask questions

5. policy.access = "email the privacy officer"

Hint: Type the field that explains how you can see or fix your own information

Spot the Error

Question 1

A what ← "we value your privacy"

B why ← "to deliver your order"

C shared ← "courier company"

D kept ← "12 months"

Line A — The 'what' point should record the personal information that is collected, such as name, email and location. 'We value your privacy' is a slogan that says nothing about what is collected.

Question 2

A what ← "name, school, grades"

B why ← "to report to parents"

C shared ← "12 months"

D kept ← "until end of year"

Line C — The 'shared' point should say who receives the data, such as parents only. '12 months' is a time period, which belongs in the 'kept' point.

Question 3

A kept ← "as long as needed"

B IF no time period given THEN

C flag ← "clear"

D OUTPUT flag

Line C — 'As long as needed' gives no time period, so the wording is vague. Line 3 should set flag to "vague", not "clear".

Question 4

A what ← "name, email"

B why ← "to run your account"

C shared ← "payment provider"

D access ← "to run accounts"

Line D — The 'access' point should say how you can see or correct your information, such as asking the privacy officer. 'To run accounts' is a purpose, which belongs in the 'why' point.

Question 5

A shared ← "partners"

B IF shared is specific THEN

C note ← "ask who they are"

Line B — 'Partners' does not say who the data is shared with, so the condition should be 'is not specific'. As written, the note to ask who they are would only run when the wording is already clear.

Student with a class code? Join your class →