Lesson Plan

Lesson Plan
Grade: Date: 25/02/2026
Subject: Information Communication Technology ICT
Lesson Topic: Know and understand the need for personal data to be kept confidential and protected to avoid inappropriate disclosure
Learning Objective/s:
  • Describe what personal data is and give examples of common categories.
  • Explain why confidentiality of personal data is essential, including legal and ethical reasons.
  • Identify at least three risks associated with inappropriate disclosure of personal data.
  • Apply appropriate protection methods (strong passwords, 2FA, encryption, access controls) to safeguard personal data.
  • Evaluate a case study to determine key lessons for improving data security.
Materials Needed:
  • Projector and screen for presentation
  • Whiteboard and markers
  • Printed handout summarising protection methods
  • Case‑study worksheet (2022 e‑commerce breach)
  • Laptops or tablets for password‑strength activity
  • Quiz sheets for quick assessment
Introduction:
Begin with a short video clip showing a news headline about a recent data breach, asking students how they would feel if their personal details were exposed. Recall that they have already discussed what constitutes personal data in previous lessons. Today they will explore why keeping that data confidential matters and how they can protect it. By the end of the lesson they should be able to describe protection methods and evaluate real‑world scenarios.
Lesson Structure:
  1. Do‑now (5'): Students answer a quick quiz on personal data definitions using mini‑whiteboards.
  2. Teacher input (10'): Presentation on types of personal data, associated risks, and legal frameworks.
  3. Guided activity (12'): Small groups analyse the 2022 e‑commerce breach case study and complete a worksheet identifying failures and protective measures.
  4. Hands‑on demo (10'): Demonstrate creating a strong password and setting up two‑factor authentication on a demo account.
  5. Practice (8'): Students use an online password‑strength checker on their devices and suggest improvements.
  6. Review & check for understanding (5'): Whole‑class discussion summarising key protection methods.
  7. Exit ticket (5'): Each student writes one personal action they will adopt to keep their data confidential.
Conclusion:
Summarise that confidentiality protects privacy, prevents fraud, and meets legal obligations. Invite a few volunteers to share their exit‑ticket actions, reinforcing the link between knowledge and practice. For homework, ask students to audit the privacy settings on one of their online accounts and bring a brief report to the next lesson.