Teach Kids Data Privacy with a Simple Personal Data Inventory Activity

Why a “Personal Data Inventory” is the best data privacy lesson for kids

Parents often want to teach online safety, but “data privacy” can feel abstract—especially for kids. The trick is to make it concrete. A Personal Data Inventory turns privacy into something kids can see, sort, and manage, like organizing a backpack.

This activity works because it answers the big questions kids actually have:

• What is personal data for kids? (Not just your full name—also your photos, location, and even your gaming handle.)
• Where does my information go online? (Apps, websites, classmates, group chats, school tools.)
• What can I control? (What you share, with whom, and what settings you use.)

It’s also a parent-friendly way to start a conversation without fear-based lectures. You’re not saying “The internet is dangerous.” You’re saying, “Let’s learn what information is yours, and how to protect it.”

Step 1: Explain personal data in kid-friendly categories

Before you inventory anything, you need shared language. Here’s a simple definition you can use:

Personal data is any information that can identify you, find you, contact you, or describe you in a way that could be linked back to you.

Then introduce categories. Kids remember categories better than long rules.

• Identity data: full name, birthday, school name, student ID
• Contact data: phone number, email, home address
• Location data: live location, geotags in photos, check-ins
• Account data: usernames, passwords, recovery email/phone
• Device data: device name, IP address (for teens), ad ID
• Media & social data: photos, videos, voice notes, friend list
• Behavior data: searches, watch history, game stats, clicks

Quick age-based script (use whichever fits your child):

• Ages 8–10: “Personal data is information about you that other people could use to find you or figure out who you are.”
• Ages 11–13: “Personal data is information that connects to your real life—your identity, your location, or your accounts.”
• Ages 14–17: “Personal data is any data that can identify you directly or indirectly, including metadata like location and behavior patterns.”

To keep it practical, share a few examples that surprise them:

• A selfie can include school logos, street signs, or location tags.
• A gaming username used everywhere can become a trackable identity.
• A “harmless” quiz app can collect birthday, interests, and contacts.

Step 2: Run the Personal Data Inventory (30–45 minutes)

This is the main online privacy activity for students, and it works well at home or in a classroom.

What you need (pick one approach):

• Paper + pen (great for younger kids)
• Notes app or a shared doc (great for teens)
• Optional: two highlighters (green = safe, yellow = think twice)

The core rule: Your child lists what data exists, where it shows up, and whether it’s necessary.

The inventory prompts

Have your child walk through these “data zones” and list what’s shared in each:

• Profiles: Google/Apple account, school accounts, gaming profiles, social apps
• Posts & media: photos, videos, stories, voice messages
• Messages: group chats, DMs, comments
• Devices: phone/tablet settings, smartwatch, family computer
• Payments & subscriptions (teens): saved cards, store accounts, delivery apps

To keep it from turning into a lecture, use curiosity questions:

• “What name does this app show to other people?”
• “Can strangers see your profile photo?”
• “Does it ask for your birthday? Did you have to give the real one?”
• “If someone searched your username, what would they learn?”

The Personal Data Inventory table (copy/paste)

Use this table to make the lesson measurable and actionable.

Personal data item	Where it appears (app/site/device)	Who can see it now?	Risk level (Low/Med/High)	Keep / Limit / Remove	One action to take today
Full name	School platform profile	Class + teachers	Med	Limit	Change display name to first name + last initial
Profile photo	Messaging app	Contacts	Med	Limit	Use a non-identifying avatar or crop out background
Birthday	Game account	Public	High	Remove	Set to private or use month/day only if allowed
Location services	Phone settings	Apps with permission	High	Limit	Turn off “Always”; set to “While Using”
Username	Multiple games + socials	Public	Med	Limit	Use different usernames for different platforms
Photos with school logo	Camera roll / shared albums	Friends + friends of friends	Med	Limit	Don’t post; share in private album without location tags
Recovery email/phone	Account settings	Only you (but critical)	High	Keep	Add 2-step verification; update to parent-managed email if needed

Tip for parents: Don’t aim for perfection. Aim for awareness plus one meaningful change.

A simple scoring method kids like

If your child enjoys numbers, add a quick “privacy score”:

• Low risk = 1 point
• Medium risk = 2 points
• High risk = 3 points

Add up the points for items that are public. Your goal isn’t to hit zero; it’s to reduce the score with a few smart changes.

Step 3: Teach “Share smart” rules using real scenarios

After the inventory, kids need a decision tool. The best rules are short and repeatable.

Here are five “share smart” rules that work across ages 8–17:

• Separate “who you are” from “what you like.” Interests are usually safer than identifiers.
• Don’t combine identifiers. Name + school + photo + city is more risky than any one alone.
• Keep location data on a tight leash. Location is often the highest-risk category.
• Usernames are identities. Reusing the same handle everywhere makes you searchable.
• If you wouldn’t put it on a backpack, don’t put it on a profile. (Great for younger kids.)

Practice with mini-scenarios (5 minutes each)

Use these as quick conversation starters:

• Scenario 1 (8–11): “A new friend in a game asks what school you go to.”

  • Best response: “I don’t share personal info in games. Want to play another round?”

• Scenario 2 (11–13): “A class group chat wants everyone to share their phone numbers.”

  • Best response: “I’ll message you in the app instead,” or ask a parent about safer options.

• Scenario 3 (14–17): “An app offers a discount if you allow contacts and location.”

  • Best response: “No. Discounts aren’t worth extra tracking,” or use ‘While Using’ location only.

If your child pushes back (“But everyone shares this”), validate the social pressure and return to the inventory:

• “Totally get it. Let’s decide what you want public. Your info, your choice.”

Step 4: Turn the inventory into upgrades (settings + habits)

This is where the activity becomes a real online privacy lesson for students: you connect awareness to action.

Pick 2–4 upgrades based on the highest-risk items from the table.

High-impact privacy upgrades (parent-approved)

• Lock down location

  • Turn off precise location for most apps
  • Remove location permission from games and social apps

• Strengthen accounts

  • Use a password manager with family sharing (or a written passphrase system for younger kids)
  • Turn on 2-step verification where available

• Reduce profile identifiers

  • Switch to first name + last initial
  • Use an avatar instead of a face photo (especially for public profiles)

• Clean up old posts and permissions

  • Delete old public posts that include school/team logos
  • Review app permissions monthly (camera, mic, contacts, photos)

A quick permission checklist kids can run themselves

Teach them to ask:

• “Does this app need my location to work?”
• “Would I be okay if a stranger saw this?”
• “Is this set to ‘Everyone’ when it could be ‘Friends’?”
• “Am I using the same username everywhere?”

For teens, add one more:

• “Would future-me (college, job, coach) be fine with this being searchable?”

Next Steps: Make it a monthly 10-minute habit

A Personal Data Inventory shouldn’t be a one-time project. The internet changes fast—new apps, new accounts, new social pressures. Keep it light and consistent.

Here’s a simple plan you can start this week:

• Today (30–45 minutes): Do the inventory table together and choose two changes.
• This weekend (10 minutes): Check location permissions + profile visibility on top 3 apps.
• Once a month (10 minutes): “Privacy pit stop”
  • Review new apps installed
  • Re-check who can see profiles
  • Update passwords or enable 2-step verification where possible
• Before new apps (2 minutes): Ask: “What data does it request, and why?”

If you want to make it motivating, let your child “level up” their privacy:

• Level 1: Knows what personal data is
• Level 2: Can list 10 types of personal data
• Level 3: Can adjust privacy settings with a parent
• Level 4: Can explain why a permission is risky

The goal isn’t to raise a kid who’s scared of the internet. It’s to raise a kid who can confidently say: “This is my data, and I get to choose what happens to it.”