Digital footprint and personal privacy
AdvancedFootprints are active (what you post) and passive (what systems collect), accumulating over years into school and job consequences; the PDPO governs data collection; four checks: private account, app permissions, location tags, self-search.
- Footprints are active and passive, and they accumulate.
- Before uploading, remember: deleting is not erasing — screenshots last forever.
- Footprints shape school and career — a positive one is an online CV.
文體小知識：議題探究課從現象出發分析影響，再帶出法例和實際行動，令你學會獨立思考數碼議題。
§Text Passage
1Everything you do online — posting, liking, searching, checking in — leaves a digital footprint. An active footprint is what you publish yourself (photos, comments, videos); a passive footprint is the data systems quietly collect (browsing history, location, app permissions). Online 'deletion' often only removes it from view: screenshots and backups can keep content alive forever.
2Footprints accumulate: today's casual post or comment can resurface years later at interviews and job hunting. Some university admissions officers overseas say they check applicants' social media, and employers searching candidates' names is common practice. The reverse is also true: steadily sharing good work and engaging positively builds an 'online CV' — a footprint is what you make it.
3Hong Kong's Personal Data (Privacy) Ordinance (PDPO) protects personal data: organisations must state the purpose before collecting, must not collect excessively, and must not reuse data for other purposes without consent; you also have the right to access and correct data held about you. Octopus registration, app sign-ups and school systems all fall under it.
4Four privacy-setting checks: first, set social media to private accounts so only approved followers see posts; second, audit app permissions — a torch app needs no location and a game needs no contacts, so switch off anything unneeded; third, turn off photo location tags so pictures never reveal your home; fourth, search your own name regularly to see what is out there. Privacy protection is a habit, not a one-off.
1Summary 重點摘要
Footprints are active (what you post) and passive (what systems collect), accumulating over years into school and job consequences; the PDPO governs data collection; four checks: private account, app permissions, location tags, self-search.
2Vocabulary cards Vocabulary
All traces your online activity leaves — active and passive — accumulating over time.
Content you deliberately publish, e.g. photos, comments, videos, posts.
Data collected quietly by systems, e.g. browsing history, location data.
Data identifying an individual, e.g. name, phone, address, photo, ID number.
Hong Kong's law protecting personal data: state the purpose, collect minimally, never reuse without consent.
Account settings controlling who sees your content and data — worth reviewing regularly.
Geographic coordinates stored in photos or posts, which can reveal home and routines.
Access an app asks for, e.g. location, contacts, microphone; refuse anything unrelated to its function.
Under the PDPO, the right to ask an organisation for and correct the personal data it holds about you.
3Step by step Steps
- Active versus passiveDigital footprints come in two kinds. An active footprint is what you publish yourself: stories, comments and photos on social platforms. A passive footprint is the data that systems and organisations quietly collect, such as the mall Wi-Fi logging your device as you walk past, or the location data uploaded when your phone album syncs to the cloud. Active footprints you control by deciding what to post; passive ones are reduced through privacy settings and app permission management.
- A footprint's lifespanOnline content lives longer than expected: a funny photo posted in S1 can resurface before an S6 admissions interview, and even after deletion someone may have screenshotted or backed it up. Before uploading anything, assume it will exist forever, then decide whether to post; this habit works far better than deleting afterwards. Stories on social platforms are not truly temporary either — a screen recording keeps them permanently.
- School and career impactFootprints affect admissions and careers: some admissions teams openly review applicants' social media, and employers searching candidates' names is common practice. The same footprint can also be an asset — a student who steadily publishes coding projects and volunteer records builds a public CV that strengthens any application. Rather than fearing old posts, start accumulating positive, high-quality content from today; direction decides the outcome.
- Three PDPO pointsHong Kong's Personal Data (Privacy) Ordinance (PDPO) rests on three points: an organisation must state the purpose before collecting data, as when an app asks for your phone number; it must not over-collect — a dating app has no business asking for your report card; and it must not sell or pass your data to others without consent. You also have the right to access and correct data held about you. Octopus registration, app sign-ups and school systems all fall under it, and excessive requests can be refused and reported to the Privacy Commissioner.
- Privacy settings, step oneThe first step of privacy protection is reviewing social-media privacy settings: switch the account to private so only approved followers can see posts and strangers cannot browse. Then review 'photos you are tagged in'; remove tags on unsuitable photos posted by friends so they no longer appear on your profile. These two settings take five minutes yet directly decide what strangers can see — many users never open the settings page at all and stay public without knowing it.
- The permission auditThe app permission audit is simple: open phone Settings, go to Apps, and check permissions one by one. The rule is that permission must match function: a torch asking for location? Unrelated — switch it off. A photo editor asking for contacts? Unrelated — off. Do not fear breaking anything: permissions can be re-enabled later, while the real danger is apps holding unrelated permissions for months. Audit fully every three months, and read the permission list before approving any newly installed app.
- Location tags and self-searchPhoto location tags are easy to overlook: when the camera app holds location permission, every photo carries GPS coordinates, and shared photos can reveal your estate and daily movements. Removing the camera's location permission so photos carry no coordinates is simple and effective. In addition, search your own name and usual nicknames every three months to see what is public; if unsuitable content appears, contact the platform or the poster to remove it promptly.
4Diagrams Diagrams
5Worked example Example
Example: May, about to enter S4, audits her digital footprint and finds a public account with 3 photos showing her home block, a game app asking for contacts, and location tags on every photo. Write her improvement list.
- Photos whose background reveals the home address are high-risk data: delete or hide those 3 photos, switch the account to private, and watch the background for sensitive details before taking photos in future.
- A game app asking for contacts has a permission completely unrelated to its function: switch the permission off in phone settings; if the app pressures with 'no permission, no use', consider removing the app.
- Location tags on the whole album can expose the home and daily movements: remove the camera app's location permission, and strip location data before sharing old photos.
- Build a regular checking habit: search her own name and nicknames every three months to confirm that no new risks have appeared in the public information.
- Answer: The improvement list has four items: a private account with the address-revealing photos removed, unrelated app permissions switched off, camera location tags turned off, and a self-search every three months. After these four steps the digital footprint moves from high-risk to under control.
6Common mistakes Mistakes
7Quick check Quick check
Q1What are the two kinds of digital footprint?
Q2Why does 'delete online' not mean 'gone'?
Q3What does the PDPO require of organisations collecting personal data?
Q4A torch app asks for your location. How should you handle it?
Q5Name any three privacy-setting checks.
8Recap Recap
- Footprints are active and passive, and they accumulate.
- Before uploading, remember: deleting is not erasing — screenshots last forever.
- Footprints shape school and career — a positive one is an online CV.
- The PDPO protects personal data: state the purpose, collect minimally, access and correct your data.
- Four checks: private account, app permissions, location tags off, periodic self-search.