Key Stage 4 computing · Digital literacy and online safety

GCSE online safety and privacy: a guide for parents

Technology changes faster than any school rule can, so the Key Stage 4 curriculum asks pupils to understand how those changes affect their safety, including new ways to protect their online privacy and identity. Teenagers already know how to use their devices. This work gives them the reasoning to spot new risks, make careful choices and know what protection is available.

Online safety and privacy as technology changes, explained

The statutory curriculum says all pupils should be taught to understand how changes in technology affect safety, including new ways to protect their online privacy and identity, and how to report a range of concerns. This page covers the first half: staying safe as technology changes. A separate guide covers reporting. The aim is for pupils to become responsible, competent, confident and creative users of technology, so the focus is on judgement, not on a list of banned apps.

Teenagers have already met the basics at Key Stage 3, such as keeping personal information private and recognising inappropriate content, contact and conduct. In Years 10 and 11 the questions get harder. Who profits when an app is free? What does a service collect about you, and who else sees it? Why can a photo reveal your location? Pupils look at how companies track activity across sites, how personal data can be bought and sold, and how a digital footprint can still be found by colleges, universities and employers years later.

New technology brings new tricks. Pupils learn how phishing messages are made to look genuine, how criminals use social engineering (persuading people rather than breaking into systems) and how fake profiles or cloned voices can be used to win trust. They also meet synthetic media, such as images, audio and video made or altered by artificial intelligence, and learn that seeing or hearing something is no longer reliable proof that it happened. Asking who made something, where it came from and whether it can be confirmed elsewhere is now a basic safety skill.

Protection is taught as layers. Pupils learn about strong, unique passwords (many security experts recommend a long phrase made of unrelated words), two-step verification, password managers, keeping software up to date, privacy settings and permissions on apps, and caution on public networks. They also learn that data protection law gives people rights over their personal information. No single measure is perfect, so the habit to build is to combine several and to review them, because settings often change after updates. Safety also includes behaviour toward others, such as not sharing someone’s image or private messages without their agreement.

Words your child will hear

Digital footprint: The trail of information about you left by what you post, search for and do online.
Phishing: A message that pretends to be from a trusted source to trick you into giving away information or clicking a harmful link.
Social engineering: Manipulating people, instead of hacking systems, into revealing information or giving access.
Two-step verification: Proving who you are with a second check after the password, such as a code sent to your phone.
Synthetic media: Images, sound or video created or changed by software, sometimes to look like a real person (a deepfake).
Permissions: What an app is allowed to access on your device, such as the camera, microphone or location.
Data protection: The law and good practice around how organisations collect, use and keep personal information.

What the National Curriculum says

The programme of study for Key Stage 4 says:

All pupils should be taught to understand how changes in technology affect safety, including new ways to protect their online privacy and identity, and how to report a range of concerns
Aim: pupils are responsible, competent, confident and creative users of information and communication technology.

Objectives from the National Curriculum in England, © Crown copyright, used under the Open Government Licence v3.0.

Try it: setting up a new account carefully

Your 15-year-old is about to join a new social platform. Walk through the decisions that protect their privacy and identity before they post anything.

Decide what to share at sign-up. Does it really need a full name, date of birth or phone number? Use only what is required, and use the real date of birth, because age is often what switches on extra protections for under-18s.
Create a strong, unique password. A long phrase of several unrelated words is easier to remember than random symbols and stronger than a short complicated one. It must not be reused from any other account, so one data leak cannot unlock the rest.
Turn on two-step verification, ideally with an authenticator method rather than a text message if it is offered. Even if the password is stolen, the thief cannot get in without the second check.
Review the privacy settings before posting: who can see posts, who can message or tag them, and whether the account can be found by searching their phone number. Choose the most restricted settings that still suit them.
Check the app’s permissions on the phone. A photo-sharing app may need the camera, but a precise location setting is usually not needed. Switch off anything that does not help, and check whether photos carry location details.
Think about the footprint. Ask: would I be comfortable if a future employer, a university or a grandparent saw this? Put in place a routine to review old posts and check what turns up when searching their own name.

A safe set-up shares only the information required, uses a unique passphrase, adds two-step verification, restricts who can see and contact the account, limits app permissions such as location, and builds the habit of thinking about the long-term footprint before posting.

Common mistakes and how to help

“I have nothing to hide, so privacy does not matter”

Teenagers think of privacy as hiding bad things. They do not always see that personal data can be used to target adverts, guess passwords or impersonate them.

What helps: Reframe privacy as control: who gets to know what, and when. Ask if they would hand a stranger their phone, address and daily routine.

“A complicated password with symbols is the safest”

Older advice often told people to swap letters for symbols. Short, complicated passwords are hard to remember, so people reuse them, and reuse is the bigger risk.

What helps: Encourage a long, unique passphrase for every important account, a password manager to keep track, and two-step verification on top.

“I would spot a scam straight away”

Early scam messages were full of mistakes, but modern ones can be polished, personal and sent by a hacked friend’s account. Confidence makes people click quickly.

What helps: Teach the pause: be suspicious of urgency, pressure or secrecy. Contact the person or organisation through a different, trusted route before acting.

“If it is a video or a voice, it must be real”

For years, recordings counted as proof. Software can now generate convincing fake pictures, voices and clips.

What helps: Ask where something came from and whether trustworthy sources confirm it. Make it normal to say “I am not sure this is real” without feeling silly.

How to help at home

Do a family security check. Sit down together and turn on two-step verification for the accounts that matter most, starting with email. Treat it as a joint project, not a telling-off, and do your own accounts too.
Search for yourselves. Look up each other’s names, with permission, and see what appears. It makes the idea of a digital footprint concrete and starts a calm conversation about what is worth removing.
Talk about the latest scam. When a suspicious text or a story about a scam arrives, show your teenager and ask what gives it away. Do not shame mistakes: people who fear punishment hide problems instead of mentioning them.
Review app permissions together. Go through the settings on a phone and ask why each app needs its access. Switching off a few permissions takes minutes and demonstrates that settings are choices, not defaults.
Keep the conversation open. Make it clear that they can tell you about anything that goes wrong online without losing their device. Teenagers who think they will be punished are far less likely to ask for help.

Builds on

Key Stage 3: Online identity, privacy and security
Key Stage 3: Spotting and reporting online concerns