Preparation

This lesson assumes that participants have an account with an online service (e.g. email provider or social network). Participants must be able to access the profile information of this account using an internet-enabled device.
The exercise sheets serve as additional support and stimulation.

Method / Process description

Ask participants to log into the relevant online service. There they should look for the profile/account information.

Identify and evaluate the following settings:

• What personal data is stored with the provider? Specifically, personal data such as name, date of birth, hobbies, preferences or other stored information. 
• How is the use of my personal data (e.g. photos) regulated by the online service? Legal information from the online service to check who has ownership of the photos or data that are stored by the user. 
• Are there configuration options to make individual pieces of information public or private?
• Is it possible to export one's own data from the online service? (Export or save options of own data; useful e.g. if the account is to be terminated and all information is to be saved).
• What are the security options for accessing the account? Password recovery process, 2-factor authentication, second email for account recovery. 

During the review of the configuration options, the following control questions should be discussed:

• Is it appropriate for the online service to store all this information about me?
• Are the privacy options and settings options well understood or at least sufficiently explained? 
• Are the privacy options sensibly chosen? 

Further task:

• Simulation of a password recovery process. (To check whether access to the account can be restored in an emergency).

Suggestion: 

The exercise can also be done in small groups. In this case, each group is given the task to check certain online services and write down the most important setting options. At the end of the exercise, the results are presented and discussed in plenary.