← VCE Data Analytics U4O2

Privacy-enhancing practices as an emerging trend

Newer practices like data minimisation, anonymisation and encryption by default that reduce the personal data an organisation holds and exposes, lowering privacy risk.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 123

Understanding Privacy-enhancing practices as an emerging trend in VCE Data Analytics U4O2

What it does: The default value is the privacy-protective one, so users are protected unless they choose to share more. Encryption is switched on for all stored data, so exposed data is unreadable without the key. Data minimisation reduces the personal data an organisation holds, so there is less to lose in a breach. Encryption by default protects data automatically, so it does not depend on people remembering to apply it. Rising breaches and stricter privacy expectations push organisations to hold less data and protect what remains. Anonymisation removes the link to individuals, so the data held no longer exposes personal information. Limiting retention shrinks the data held over time, so old records cannot be stolen or misused later.

Common mistakes: Data minimisation means collecting only the data that is needed. Adding 'tfn' collects extra personal data. The line should be collect = needed. Limiting retention means deleting records once they are older than the retention period. Using < deletes new records and keeps the old ones. It should be if age > retention_days:.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Privacy-enhancing practices as an emerging trend to a class →

This module's key terms are also in a printable crossword (Modules 115–134) and word search (Modules 115–150).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which practice best describes data minimisation?
Collecting only the personal data needed for a stated purposeCollecting as much data as possible in case it is useful later
Matches
signup_form.fields = ['name', 'address', 'DOB', 'income', 'religion'] # for a newsletter
↓
The form collects far more personal data than a newsletter needs, which breaks data minimisation. Only an email address is needed.
Applying
Meanings
Term
privacy-enhancing practices
Meaning
Newer practices like data minimisation, anonymisation and encryption by default that reduce the personal data an organisation holds and exposes, lowering privacy risk.
Practice
DELETE FROM orders WHERE orderDate < '2026-02-05';
Testing
Gaps
FROM orders
Check Answer
Spots
1needed = ['name', 'email']
2collect = needed + ['tfn']

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Starfish' badge — Five-Point Star, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which practice best describes data minimisation?
A. Collecting only the personal data needed for a stated purpose ✓
B. Collecting as much data as possible in case it is useful later
Data minimisation reduces the personal data an organisation holds, so there is less to lose in a breach.
2. A school app is set up so location sharing is OFF until a student turns it on. Which idea is this?
A. Privacy by default ✓
B. Data repurposing
Privacy by default means the most privacy-protective settings are applied automatically, without the user having to change anything.
3. True or false: limiting retention means deleting personal data once it is no longer needed.
A. False
B. True ✓
Limiting retention means personal data is destroyed or de-identified when its purpose ends, which reduces the data exposed in a breach.
4. Which is an example of encryption by default?
A. Records are encrypted only if an employee remembers to switch it on
B. Customer records are automatically encrypted when saved to the database ✓
Encryption by default protects data automatically, so it does not depend on people remembering to apply it.
5. Why are privacy-enhancing practices an emerging trend?
A. They reduce the personal data held and exposed, lowering privacy risk ✓
B. They let organisations store more personal data for longer
Rising breaches and stricter privacy expectations push organisations to hold less data and protect what remains.

Match the Pairs

data minimisation → Collect and keep only the personal data that is really needed for a stated purpose, so less is held and exposed
limiting retention → Delete or de-identify personal data once it is no longer needed, instead of keeping it forever
Privacy by default means the most privacy-protective settings are switched on automatically, without the user having to change anything → profile_visibility = 'private'
Encryption by default means stored personal data is scrambled automatically, so stolen data is unreadable without the key → storage.encrypt_at_rest = True
signup_form.fields = ['name', 'address', 'DOB', 'income', 'religion'] # for a newsletter → The form collects far more personal data than a newsletter needs, which breaks data minimisation. Only an email address is needed.
retention_period = 'forever' → Keeping personal data forever ignores limiting retention. It should be deleted or de-identified once the purpose is finished.

Key Term

privacy-enhancing practices
Newer practices like data minimisation, anonymisation and encryption by default that reduce the personal data an organisation holds and exposes, lowering privacy risk.

Fill in the Blanks

1. DELETE FROM orders WHERE orderDate < '2020-01-01';
Hint: Type the SQL keyword that removes old rows, so the organisation limits how long it keeps data.
2. profileSharing = OFF
Hint: Privacy by default means the most private setting is used unless the user changes it. Type the setting value.
3. UPDATE students SET lastName = NULL;
Hint: Type the SQL value that removes an identifying detail, as in anonymising data.
4. SELECT house, COUNT(*) FROM students GROUP BY house;
Hint: Type the aggregate function that gives totals instead of exposing individual student records.
5. encryptByDefault = TRUE
Hint: Encryption by default means protection is switched on automatically. Type the Boolean value.

Spot the Error

Question 1
A needed = ['name', 'email']
B collect = needed + ['tfn']
C print(collect)
Line B — Data minimisation means collecting only the data that is needed. Adding 'tfn' collects extra personal data. The line should be collect = needed.
Question 2
A retention_days = 90
B age = today - record.created
C if age < retention_days:
D delete(record)
Line C — Limiting retention means deleting records once they are older than the retention period. Using < deletes new records and keeps the old ones. It should be if age > retention_days:.
Question 3
A row = get_customer(7)
B row['name'] = row['name']
C del row['email']
D save_for_analysis(row)
Line B — Anonymisation removes direct identifiers. This line just reassigns the name, so the person is still identifiable. It should be del row['name'].
Question 4
A encrypt_by_default = False
B if encrypt_by_default:
C data = encrypt(data, key)
D store(data)
Line A — Encryption by default means data is encrypted unless someone chooses otherwise. Setting the flag to False means the data is stored unencrypted. It should be True.
Question 5
A def new_account(user):
B user.sharing = False
C user.tracking = False
D user.profile = 'public'
E return user
Line D — Privacy by default means the most private settings apply to new accounts. A public profile exposes personal data by default. It should be 'private'.

Student with a class code? Join your class →