And So It Begins: Data Privacy and Security
Before our first face to face class, our facilitator asked us to join the class Facebook group and answer a survey. The survey was about our knowledge and attitudes toward Data Privacy and Security. We rated our knowledge from 1 as lowest to 5 as highest. There were also agreement questions where we rated statements from strongly disagree to strongly agree. These statements included believing that data and information play a crucial role in education, being confident in adapting to new technological tools and methods, being willing to invest extra time and effort to improve skills in this area, being open to collaborating with peers on privacy and security projects, preferring hands-on learning, engaging in group discussion and team activities, using technology and software to enhance learning, and exploring real-world case studies. There were also open questions about our recent experience with social media privacy or security concerns and our expectations for the course and the facilitator.
While answering the survey, I reflected on my own level. I am interested in Data Privacy and Security but I am not fully confident in my knowledge yet. I know some basic practices like being careful with passwords and not sharing too much personal information online, but I also know there are deeper parts of security that I still do not understand well. I would place myself somewhere in the middle, not completely new but not advanced either. I am willing to learn more because the topic is useful not only in school but also in daily digital life.
For example, one of the survey questions asked about my most recent experience with social media privacy and security concerns. I reflected that I recently received unusual login attempts on my account. I immediately changed my password and logged out from all devices. This situation made me realize that security issues can happen anytime, even with accounts I thought were safe. It reminded me that protecting personal data is not just theoretical but requires action and awareness in real situations. Answering these survey questions made me think critically about my habits and how often I encounter potential security risks.
At the same time, we were also asked to read about the Data Privacy Act of 2012 (RA 10173). Based on my understanding, it is a law that protects people’s personal information and explains that organizations must handle data properly and not just collect or share it carelessly. It also means people have rights over their own personal data and can question or report misuse. Even with just a basic reading, I understood that privacy is not only a good practice but also supported by law. Thinking about this before the first class already made me more aware of how serious data protection is.
During the first face-to-face class, we started with the usual first day briefing. Our facilitator discussed the university strategic framework, including the goals and direction of the school. A new part mentioned was the Sustainable Development Goals or SDGs. It was explained that these goals are connected to responsible development and that even technology-related subjects connect to them because protecting data and using technology responsibly affects society. We also went over the graduate attributes and what kind of skills students are expected to develop. These include being responsible with technology and making ethical decisions when handling information. From that part, I realized that this subject is not only technical but also about responsibility. We also reviewed the course syllabus so we could see the topics, grading, and general expectations. It helped give a basic picture of what the subject covers.
I also think it is worth mentioning that our facilitator is a former Data Privacy Officer of the University. I feel this is particularly suitable and valuable for this subject because he brings firsthand experience in handling real-world data privacy and security challenges. His background allows him to share practical insights, not just theoretical knowledge, and gives credibility to the lessons. Knowing that someone with actual experience in protecting sensitive information is guiding the course makes me more confident that what we are learning is relevant, accurate, and aligned with professional standards. It also makes discussions more engaging because he can relate the concepts to real situations he has encountered, which helps bridge the gap between theory and practice.
One part of the class discussion that really stood out was when our facilitator asked about the difference between data and information. The class kind of went in circles because many answers sounded like data is information and information is data. It showed that even common terms can be hard to define clearly. While listening, I tried to form my own explanation. My idea was that data is raw while information is data with meaning. For example, data is just something like “pen,” while information is “I have a pen so I can write.” I could not explain it clearly during the discussion, but that was my idea. Looking back at it, my idea was just that data is the raw part and information is the explained or useful part. I understood it in my own way but could not say it clearly, so that is something I need to work on when sharing answers in class.
After that, we reviewed the survey results together. Most answers were high, but a few rated themselves very low in some parts. Our facilitator pointed out that it was a bit concerning that someone rated themselves low in knowledge or agreement in such an important topic, even if it was only a small number of responses. The point was not to judge but to show that awareness about privacy and security should not be too low today because we all use technology regularly. That part made me think about how different students see their own knowledge and readiness. Some people may underestimate themselves while others may feel confident but still have gaps. Another realization I had is that even simple activities like our class survey are already examples of data collection. Our answers were data, and when the facilitator showed the summary of results, that became information because we could see patterns and meaning. It made me more aware that data collection happens often, even in small and normal situations, especially on social media and online platforms.
Get Adrian Labisores’s stories in your inbox
Join Medium for free to get updates from this writer.
There are times when I reuse passwords or quickly allow permissions just to continue using an app. After this first meeting and the reading task, I became more aware that these small actions matter. Even if nothing bad happens immediately, weak habits increase risk over time. This subject might help me correct those habits early. Another small realization is that awareness should come before using any tools. Many people look for apps or software for protection, but if the user is careless, tools alone are not enough. The survey, the short discussion, and the reading task already point toward responsible thinking first. For me, that means slowing down a bit when dealing with online forms and accounts instead of always rushing.
Another thing that came to mind during the first class is how quickly technology evolves and how that affects privacy and security. Even if we learn certain practices today, new apps, platforms, and tools constantly appear with new privacy risks. This made me realize that learning about data privacy is not just a one-time effort but an ongoing process. Being aware of potential risks, knowing how to respond, and regularly updating our knowledge and habits is essential. For example, a security measure I use today, like two-factor authentication, might become less secure tomorrow if a new vulnerability is discovered. This awareness encourages me to keep a proactive mindset rather than relying only on what I know now.
I also began thinking about how cultural and social habits influence privacy. Many people, including myself at times, share personal details online without fully considering the consequences. Even small information, like location check-ins or posts about daily routines, can be pieced together to create a bigger picture. This makes me appreciate why our facilitator’s experience is so valuable. He can provide examples from real-life situations where minor oversights had significant consequences. It shows that protecting data is not abstract but affects people in practical ways.
Each time I interact online, I am not only protecting my own data but also indirectly affecting others. Sharing a friend’s information, tagging them in posts, or using collaborative apps can expose them to risks if I am careless. This first session made me see that privacy and security are collective responsibilities, not just personal ones. Even as a beginner in this subject, I feel motivated to approach my online interactions more thoughtfully and to learn actively so I can apply these lessons in both school and everyday life.
Most of the time we use apps, websites, and online accounts without really thinking about where our data goes. We just click accept, sign up, and continue. Because of that habit, it is easy to forget that our personal details are being stored somewhere. This first meeting already reminded me that behind every account and every platform there are rules and responsibilities. It is not only about convenience but also about protection. I realized that being careless with data can cause real problems, not just small issues.
We also discussed how most of us, as users, often just click “accept” or “agree” when registering on websites or apps without actually reading the terms and conditions. It feels faster and easier to start using the service, but this can give the platform permission to collect and share our personal data in ways we do not expect. Social media platforms, for example, often send our information to third-party apps for advertising, analytics, or other purposes. This means that even small actions, like signing up quickly or allowing app permissions without checking, can put our privacy at risk. It made me realize that being careless with these agreements can expose not just my own data, but also information about my friends, contacts, and other people I interact with online. It reminded me that awareness and careful reading are important, even for something as simple as clicking “accept.”
Even though it was only the first face-to-face session, it already made me more conscious about how I view data. Before, data was just something in the background. Now I see it as something connected to identity and responsibility. I think this change in perspective is already a good outcome for a first meeting. As the subject continues, I expect to build more knowledge on top of this starting awareness and become more confident in explaining and applying privacy and security concepts.
From this first meeting, my main takeaway is that Data Privacy and Security is closely connected to responsible use of technology and awareness of how data works. Even basic terms can be confusing if not clearly defined. The survey results and short discussions already showed that people have different levels of knowledge and awareness. That makes the subject more important because it helps build a shared understanding of how to handle data properly. I also think this first meeting helped set my mindset for the rest of the subject. Instead of thinking that privacy and security are only for experts, I now see that even regular users like us are part of it. Our daily behavior online affects our own safety. Simple choices like what we post, what links we open, and what information we give already connect to privacy. That makes the topic feel closer and more personal, not just something written in books or laws.
Overall, the first face-to-face session was a simple but useful introduction. It focused on the university framework, SDGs, graduate attributes, the syllabus, and reviewing the survey results about our knowledge and attitudes on privacy and security that we answered before the class. It also gave me time to reflect on my habits, my understanding of data versus information, and why privacy matters to me. I am entering this subject knowing that I still have a lot to learn, and I think being aware of that is a good starting point.
