Lesson Plan

• Describe why data protection legislation is required.
• Identify the seven core principles of a typical data protection act.
• Explain how each principle can be applied in a school or business setting.
• Analyse the consequences of non‑compliance for organisations.
• Evaluate the role of a Data Protection Officer in ensuring accountability.

• Projector and screen
• Whiteboard and markers
• Printed handout of the data‑protection principles table
• Sample privacy‑notice worksheet
• Laptop with internet access for a short video
• Sticky notes for group activity

Start with a quick poll: “What personal information do you share online each day?” Use the responses to highlight why safeguarding that data matters. Connect to prior learning about internet safety and explain that today’s focus is on the legal framework that protects such data. Success criteria: students will be able to list the key principles, give real‑world examples, and explain the impact of breaching the law.

1. Do‑Now (5'): Students write on sticky notes one piece of personal data they think is most sensitive; share briefly.
2. Mini‑lecture (10'): Present why legislation is needed and introduce the seven principles using the projector.
3. Interactive table walk‑through (12'): In pairs, students match each principle to a real‑world example on the handout.
4. Video & discussion (8'): Watch a 3‑minute clip on data breaches, then discuss consequences.
5. Group activity (10'): Teams create a simple privacy notice for a fictional school app, applying at least three principles.
6. Check for understanding (5'): Quick quiz (Kahoot or paper) covering key points.

Recap the seven principles and ask a few students to share one way they will apply a principle in their own digital life. Collect exit tickets where each learner writes one potential penalty for non‑compliance. Assign homework: research a recent data‑protection breach in the news and prepare a one‑paragraph summary of what went wrong and how the principles were violated.