# data[].attributes.headline
Week 2 - Topic: Why online service providers might want to track you?

# data[].attributes.subject
Week 2 - Topic: Why online service providers might want to track you?

# data[].attributes.attachment_link.title
Tracking users on the Internet | Internet safety | Khan Academy

# data[].attributes.body
Understanding the significance of data safety in today's digital era is crucial. It guards against data breaches, protects personal information, and ensures a secure online environment for users. As we embark on this course, let's familiarize ourselves with the core reasons why data safety is essential and the potential risks of neglecting it.

# data[].attributes.body
What is data safety (data security)?

What kinds of personal information can be stolen online?

What other things can be stolen online?

Quizz - Diagnostic assessment

Reflective question: Are there any instances you or someone you know got their personal information leaked to third party? Share it on a padlet (formative assessment)

# data[].attributes.attachment_link.title
Importance of Data Security | Internet safety | Khan Academy

# data[].attributes.body
Protect your critical information:

In groups, research some data policies from one of these popular platforms: Facebook, YouTube, Tiktok, Coursera, etc. What do they claim to enhance services and protect users?

What in-platform features do they provide to protect user data?

Summative assessment: Present a video, padlet, graphics or presentation to our class - Class tutorial for presentations (40%)

# data[].attributes.attachment_link.title
Data Security: Protect your critical data (or else)

# data[].attributes.body
Class tutorial/forum discussion

Do you think their reasoning is valid?

Do their policy protect users or exploit user information for other purposes?

How do you feel about seeing ads related to your age, place of resident, most recent search, etc.?

What are web cookies? What should you do to them?

# data[].attributes.headline
Week 3: How might a third-party exploit your personal information online?

# data[].attributes.subject
Week 3: How might a third-party exploit your personal information online?

# data[].attributes.body
In our journey to becoming responsible digital citizens, it's imperative that we adopt safe online practices. This section will cover practical tips and strategies to enhance your data safety, such as creating strong passwords, being wary of phishing scams, and regularly updating software.

As we conclude this course, it's crucial to reflect on our learning journey and envision how we can implement data safety measures in our own lives. This section invites you to design a personalized data safety plan, considering the tools and strategies we've discussed. Share your plan and inspire others!

# data[].attributes.body
Credit Card Scams to Know in 2024 (and How to Avoid Them)

https://time.com/personal-finance/article/credit-card-scams-to-know/

How AI can fuel financial scams online, according to industry experts

https://abcnews.go.com/Technology/ai-fuel-financial-scams-online-industry-experts/story?id=103732051

What are the consequences of these cases, look for real life court cases, damages and fines? Where can you report scams? Share it on Padlet (Formative assessment)

# data[].attributes.headline
Week 8 - Summative assessment: Create your own data safety checklist

# data[].attributes.subject
Week 8 - Summative assessment: Create your own data safety checklist

# data[].attributes.body
Check out this monthly plans to keep your data safe. Is there anything you can apply for your self and your family members, especially young siblings (under 18)?

Try to look for online data safety guidance in Vietnam (your country of residence). Create your own personal plan to keep your (and your family members') online data safe including but not limited to: protecting personal information, what to do with access grant and cookies, anti virus measures, age restrictions, how to deal with data breech. It can be in any forms with or without timeline: graphics, videos, etc. (60%)

# data[].attributes.attachment_link.title
Cybersecurity Checklist – Steps to Take to Protect You and Your Family at Home | Netgain

# data[].attributes.attachment_link.description
Even though October is Cybersecurity Awareness Month, following proper cybersecurity best practices and protecting your organization’s networks and sensitive data is a commitment that lasts all year long. The same cybersecurity commitment you make at work needs to also be made at home because if you or someone in your family is hacked, it can […]

# data[].attributes.body
Read about common cyber security measures: https://www.ucl.ac.uk/data-protection/guidance-staff-students-and-researchers/practical-data-protection-guidance-notices/report-breach

What are some things you should always do and things you should never do with your online data?

Read this guidance from UCL https://www.ucl.ac.uk/data-protection/guidance-staff-students-and-researchers/practical-data-protection-guidance-notices/report-breach

and which this video on what to do after you experience a data breech: https://www.youtube.com/watch?v=k5rIMr-u0Jw

Go on a website (shopping, social media, e-learning, news, etc.). Tell us what you would do if it asks for your personal information and to accept cookies. What should you do if you don't use a website for a long time? How do you manage your passwords? - Share it on Padlet. (Formative assessment)

# data[].attributes.attachment_link.readable_text
In cases where there has been an incident which resulted in a potential breach of personal data, it is imperative that it is reported immediately to Information Security Group (ISG).
Contents
A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Personal data breaches can be the result of both accidental and deliberate causes. It also means that a breach is more than just about losing personal data.

Examples of personal data breaches

This list is non-exhaustive but it does give examples of some of the more common data breaches and 'near misses' that must be reported.

accessing personal data by an unauthorised third party;

deliberate or accidental action (or inaction) by a controller or processor affecting the security of personal data;

sending personal data to an incorrect recipient;

computing devices containing personal data being lost or stolen;

altering personal data without permission;

losing the availability of personal data; and

any 'near miss' incident that had the potential to cause a data breach even though it might not have done so.

The consequences are far-reaching, the potential harm it might cause to the individual(s) whom the personal data is about, and UCL icould face serious fines and negative impact on reputation.

While UCL could face potential fines of twenty million Euros or four percent of global turnover for data breaches, it is often the unseen consequences that have a greater impact, for example, the harm to the individual. A breach resulting in privacy harm to an individual could leave them with lasting damage and could result in secondary consequences for the individual.

Furthermore, Article 28 notes that "the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of this regulation and ensure the protection of the rights of the data subject." As such, one consequence of a data breach could be that a 3rd party organisation does not recognise that UCL can provide sufficient guarantees and therefore stop the transfer and/or processing of data. This could have a detrimental impact on UCLs core business.

The Information Security Group (ISG) and The Data Protection Officer (DPO) are responsible for handling data breaches. All potential personal data security breaches should be reported separately as soon as they are discovered. If for any reason you are unsure whether an issue constitues a personal data security breach, please still report it.

If you believe there has been a breach of personal data you must complete the Personal Data Breach Reporting Form below.
Other method of reporting: By telephone
If the incident is of a critical nature; or you have not heard back from ISG, or if you have trouble with the form, then you telephone them on the following number:

Telephone: (0)20 7679 7338 (internal 37338)

Once the Information Security Group (ISG) has been notified, they will work with the DPO to undertake an assessment of the breach and carry out an investigation.

The key considerations will include:

the potential harm to the data subjects(s);

the sensitivity of the data;

the volume of data.

The DPO will notify the ICO if required.

Avoid personal data breaches by following these guidelines and in general following the data protection guidance.

Advise staff and students on the implementation of and compliance with the UCL Data protection policy and any associated guidance/codes of practice.

Ensure appropriate technical and organisational measures are taken to ensure against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

Support UCL's notification with the ICO by maintaining a register of holdings of personal data, including databases and relevant filing systems, and the purposes of the processing.

Undertake the current DPA and ISG training

# data[].attributes.attachment_link.description
In cases where there has been an incident which resulted in a potential breach of personal data, it is imperative that it is reported immediately to Information Security Group (ISG).

# data[].attributes.headline
LO1: Understanding the importance of data safety

# data[].attributes.subject
LO1: Understanding the importance of data safety

# data[].attributes.headline
LO2: Developing awareness of data exploitation

# data[].attributes.subject
LO2: Developing awareness of data exploitation

# data[].attributes.headline
L03: Creating a personal data safety action plan

# data[].attributes.subject
L03: Creating a personal data safety action plan