Big picture
Computing decisions affect people as well as machines. Uploading a classroom photograph, copying a diagram into a project or sharing a password can affect privacy, ownership, security and access. Responsible computing asks who benefits, who may be harmed and what permission or protection is needed.
This chapter teaches enduring principles and exam reasoning rather than legal advice. When a question concerns a real incident, exact legal duties depend on the circumstances and applicable rules. In a school scenario, identify the issue, justify a practical response and avoid inventing penalties or promising complete safety.
Learning goals
Explain digital footprints and personal-data exposure.
Distinguish privacy, consent and confidentiality.
Separate plagiarism, copyright and licence permissions.
Recognise threats and justify layered protection.
Recommend inclusive and environmentally responsible practices.
Core ideas
1. Digital footprints and identity
A digital footprint is the trail of information associated with online activity. Active footprints arise from deliberate actions such as publishing a comment; passive footprints arise when systems collect information such as usage logs. Deleting a post does not ensure that copies, screenshots or backups disappear.
A digital identity combines accounts, identifiers and information through which a person is recognised online. A student using the same public username everywhere may make separate activities easier to connect. Privacy settings reduce some exposure but cannot guarantee that recipients keep information private. Before posting, consider audience, necessity, consent and long-term interpretation. An apparently harmless timetable can reveal a routine when combined with other details. Explain this cumulative effect rather than treating every data item as equally revealing in isolation.
2. Privacy, confidentiality and consent
Privacy concerns appropriate collection and use of personal information. Confidentiality limits disclosure to authorised recipients. Consent should be meaningful and specific to the intended purpose; obtaining a photograph for an identity card does not automatically justify using it in public advertising.
Data minimisation means collecting only what is necessary. A quiz application may need an account identifier but not a student's home address. Restrict access, explain the purpose and retain information only as needed under the applicable policy. Removing names does not always prevent re-identification: a rare combination of class, event and achievement may identify someone. For an exam case, identify the data involved, the purpose mismatch or unnecessary exposure, and a corrective action such as restricting access or collecting less information.
3. Intellectual property and plagiarism
Intellectual property concerns rights over creations such as software, writing and artwork. Copyright protects qualifying original expression; it does not mean a person owns every underlying idea. Plagiarism is presenting another person's work or ideas as one's own without proper acknowledgment. It is an ethical issue and can overlap with infringement, but the two are not identical.
A student can plagiarise an openly licensed paragraph by hiding its source, even when reuse itself is permitted. Conversely, acknowledging a commercial image does not automatically provide permission to reproduce it. Use original explanations, identify borrowed material and check its licence. Do not assume “available online” means “free to use.” When permission is unclear, choose material with explicit suitable terms or create an original alternative.
4. Licences, open source and responsible reuse
A software licence states the conditions under which software may be used, modified or distributed. Proprietary software usually restricts access and reuse through its terms. Open-source software provides source code under a licence granting specified reuse rights and obligations. Open source is not a synonym for having no copyright.
Freeware can be free of purchase price while remaining proprietary. Shareware may offer limited or trial use. Public-domain material and openly licensed material are distinct: a licence grants permissions while retaining underlying rights. For a project, check attribution, modification and redistribution conditions, not only whether a download button is visible. A school team distributing a modified program must examine the applicable licence rather than assume classroom use cancels every obligation.
5. Threats, phishing and social engineering
Malware is software intended to harm or misuse systems. A virus attaches to a host; a worm can spread between systems; a Trojan disguises harmful behaviour behind an apparently useful purpose. Ransomware can deny access to data and demand payment. These categories can overlap in real attacks.
Phishing uses deceptive messages or sites to steal information or trigger harmful actions. Social engineering manipulates people rather than relying solely on a software weakness. A fake scholarship message requesting an OTP is a warning sign even if it displays an official-looking logo. Verify through an independently known channel, avoid opening suspicious attachments and report the message appropriately. Do not reply with credentials to test whether a sender is genuine.
6. Cyber hygiene and layered security
Authentication verifies identity; authorisation determines permitted actions. A successful login does not entitle a user to every file. Use unique strong passwords, a trusted password manager where appropriate, multifactor authentication and timely updates. An OTP is sensitive authentication information and should not be shared with an unsolicited caller.
Backups should be recoverable and sufficiently separate from ordinary working copies. Antivirus and a firewall reduce different risks but do not guarantee protection. A firewall controls network traffic according to rules; antivirus tools detect or block known and suspicious malicious activity. Lock devices, avoid untrusted downloads and use secure connections. A layered explanation is stronger than claiming that one installed product makes a system completely safe.
7. Cyberbullying, netiquette and incident response
Cyberbullying includes repeated or serious harassment through digital communication. Netiquette means considerate online conduct: disagree with ideas without personal abuse, respect boundaries and avoid forwarding humiliating material. “It was only a joke” does not remove harm or justify sharing another person's private information.
For a threatening or abusive message, preserve relevant evidence safely, restrict further contact and seek help from a trusted adult or the appropriate school reporting route. Do not retaliate, publicise sensitive evidence widely or encourage classmates to harass the sender. A compromised account may require password changes, session review and reporting through the service's recovery process. Describe containment, evidence and support without claiming that a student should investigate an attacker personally or that deleting the message is always sufficient.
8. Law, inclusion, health and environmental responsibility
India's Information Technology Act, 2000 is an important framework in the syllabus for electronic records and cyber-related offences. Ethical analysis and legal analysis are connected but not interchangeable: an inconsiderate act can be harmful even when a question provides insufficient detail to classify an offence. Avoid memorising an invented penalty for every scenario.
The digital divide concerns unequal access to devices, connectivity, skills and accessible services. Downloadable notes and accessible text can help students who cannot stream video or use an image-only page. Respect disability needs, language differences and varying bandwidth. E-waste requires responsible collection and authorised recycling; erase personal data before handing over storage devices. Ergonomics includes comfortable posture, sensible breaks and suitable screen placement. A responsible answer balances privacy, safety, accessibility and environmental impact instead of discussing only technical performance.
A reliable approach to questions
Read the command word before choosing an answer. A definition needs the distinguishing feature; a comparison needs matching criteria on both sides; an application needs a reason linked to the situation.
Extract the supplied evidence and assumptions. Keep a small working table rather than relying on memory. If information is absent, state the limit instead of inventing a value or claiming certainty.
Work through the relevant rule one step at a time. For a program, record the changing state; for a scenario, connect the requirement to the feature that meets it. Explain why the closest alternative fails.
Check the result against the original question, including boundary cases, units and wording. Present a concise final answer followed by enough reasoning for another student to reproduce your conclusion.
Connections that matter
Computer organisation connects security to device access and storage disposal.
Data projects apply consent and minimisation during collection.
English writing uses accurate attribution and respectful communication.
Common mistakes
Assuming deletion removes every copy: recipients and backups may retain information.
Treating attribution as permission: check rights as well as acknowledgment.
Calling open-source software ownerless: licences still govern use.
Believing login grants all access: authorisation sets permitted actions.
Revision checklist
I can explain digital footprints and personal-data exposure.
I can distinguish privacy, consent and confidentiality.
I can separate plagiarism, copyright and licence permissions.
I can recognise threats and justify layered protection.
I can recommend inclusive and environmentally responsible practices.