Data Protection — 10‑Story Lesson

Story 1: The Mystery File. You ask a school, company, or council for your data. They panic. They stall. They act confused. Reality: you have the right to access your data — it’s called a Subject Access Request.

Story 2: The “We Don’t Have That” Myth. An organisation says, “We don’t store that information.” You know they do. They know they do. If they use it, reference it, or rely on it — they must provide it.

Story 3: The Email Panic. You ask for emails with your name in them. They act like you requested the moon. Emails count as personal data — they must be included.

Story 4: The Redaction Drama. You receive your data. Half of it is blacked out like a spy document. Redactions must be justified — not random. They can only hide other people’s data or legal exemptions.

Story 5: The “We Need ID” Myth. They ask for extreme ID — passport, birth certificate, blood sample. Reasonable ID only. They cannot demand excessive proof.

Story 6: The Data Deletion Glow-Up. You ask an organisation to delete your data. They act shocked. They pretend it’s impossible. You have the right to erasure — especially if the data is no longer needed.

Story 7: The “We Shared It” Surprise. You discover your data was shared without your knowledge. You feel betrayed. Organisations must tell you who they shared your data with — and why.

Story 8: The Teen Data Superpower. Teens think data protection is adult territory. It’s not. Teens have full rights — access, correction, deletion, and complaints. Understanding data rights makes you unshakeable.

Story 9: The Complaint Button. An organisation ignores your request. You escalate to the ICO. Suddenly they reply within 24 hours. The ICO is your data protection ombudsman — and organisations fear it.

Story 10: The Data Protection Realisation. You realise data protection isn’t complicated — it’s empowering. You control your information. You decide how it’s used. You decide who sees it. Once you understand your rights, organisations stop being intimidating.