Which of the following represents a privacy risk when implementing educational technology?

• A. Collecting only essential data
• B. Allowing third-party data sharing without consent
• C. Providing opt-out options
• D. Encrypting data

Answer: (B)

Privacy in educational technology hinges on control over who can access student data and how it's used. Allowing third-party data sharing without consent bypasses oversight, can expose students to practices outside the school's control, and raises risks of misuse, profiling, or breaches. Collecting only essential data minimizes exposure, providing opt-out options strengthens consent and user choice, and encrypting data protects information both in transit and at rest. These latter practices reduce privacy risks, while third-party sharing without consent stands out as the privacy risk because it removes critical layers of protection and transparency.