[Paper Review] Are Children Fully Aware of Online Privacy Risks and How Can We Improve Their Coping Ability?

Ge Wang, Jun Zhao+1 more|arXiv (Cornell University)|Feb 6, 2019

Child Development and Digital Technology10 references4 citations

TL;DR

This study investigates children's awareness of online privacy risks through focus groups with 29 children aged 6–10, revealing that while they understand basic risks like oversharing and identity concealment, they lack awareness of more complex threats such as online tracking and data-driven recommendations. Drawing on Vygotsky’s Zone of Proximal Development, the paper proposes targeted educational and technological interventions to close these knowledge gaps and improve children’s coping strategies in digital environments.

ABSTRACT

The age of children adopting digital technologies, such as tablets or smartphones, is increasingly young. However, children under 11 are often regarded as too young to comprehend the concept of online privacy. Limited research studies have focused on children of this age group. In the summer of 2018, we conducted 12 focus group studies with 29 children aged 6-10 from Oxfordshire primary schools. Our research has shown that children have a good understanding of certain privacy risks, such as information oversharing or avoiding revealing real identities online. They could use a range of descriptions to articulate the risks and describe their risk coping strategies. However, at the same time, we identified that children had less awareness concerning other risks, such as online tracking or game promotions. Inspired by Vygotsky's Zone of Proximal Development (ZPD), this study has identified critical knowledge gaps in children's understanding of online privacy, and several directions for future education and technology development. We call for attention to the needs of raising children's awareness and understanding of risks related to online recommendations and data tracking, which are becoming ever more prevalent in the games and content children encounter. We also call for attention to children's use of language to describe risks, which may be appropriate but not necessarily indicate a full understanding of the threats.

Motivation & Objective

• To assess the extent to which children aged 6–10 understand online privacy risks, particularly those related to data tracking and personalized recommendations.
• To identify critical gaps in children’s understanding of privacy threats that are increasingly prevalent in children’s digital environments, such as online tracking and promotional content.
• To explore how children articulate privacy risks using language, and whether such descriptions reflect true comprehension or superficial awareness.
• To apply Vygotsky’s Zone of Proximal Development (ZPD) as a framework for designing future educational and technological interventions to enhance children’s privacy literacy.
• To inform the development of age-appropriate tools and curricula that support children in recognizing and coping with complex online privacy threats.

Proposed method

• Conducted 12 focus group sessions with 29 children aged 6–10 from primary schools in Oxfordshire, UK.
• Used qualitative, semi-structured discussions to explore children’s perceptions, language use, and coping strategies related to online privacy.
• Analyzed children’s descriptions of privacy risks and their self-reported behaviors to assess depth of understanding.
• Applied Vygotsky’s Zone of Proximal Development (ZPD) to identify the gap between children’s current understanding and what they could achieve with guidance.
• Identified key privacy risks—such as data tracking and targeted promotions—that children failed to recognize despite exposure.
• Suggested design principles for future educational programs and privacy-enhancing technologies based on children’s cognitive and linguistic development levels.

Experimental results

Research questions

• RQ1 To what extent do children aged 6–10 understand common online privacy risks such as oversharing personal information or hiding their identity?
• RQ2 How aware are children of more complex privacy threats, such as online tracking, data collection, and personalized recommendations in games and content?
• RQ3 How does children’s use of language to describe privacy risks correlate with their actual understanding of the underlying threats?
• RQ4 What are the critical knowledge gaps in children’s privacy awareness that could be addressed through education or technology?
• RQ5 How can Vygotsky’s Zone of Proximal Development inform the design of effective privacy education and tools for young children?

Key findings

• Children aged 6–10 demonstrated a solid understanding of basic privacy risks, such as avoiding disclosure of real names or personal details online.
• Children frequently used descriptive language to explain risks, but such language did not always indicate deep conceptual understanding of the threats.
• Children showed significantly less awareness of indirect privacy threats, including online tracking, data profiling, and targeted advertising in games.
• The study identified a notable lack of awareness regarding how personalized recommendations and data tracking operate in children’s digital experiences.
• Children’s ability to articulate risks was often superficial, suggesting that verbal descriptions may not reliably reflect true comprehension.
• The application of Vygotsky’s ZPD revealed that children are capable of understanding more complex privacy concepts with appropriate scaffolding, indicating a strong potential for educational intervention.