Lesson 24: Protecting Your Personal Information

Introduction: Your Information Has Value

Think about everything you do online in a single day. You might check your bank account, log into Google Classroom, scroll through social media, or buy something with a debit card. Every time you do these things, you share personal information — and that information is worth something.

Not just to you. To other people too.

Just like your money needs to be protected, your personal information needs to be protected. In fact, your personal information is connected to your money. If the wrong person gets it, they can steal your money, ruin your credit, and cause serious problems that can take years to fix.

In this lesson, we are going to talk about what personal information is, why it matters, and how to keep it safe — in your everyday life here in Saskatchewan and beyond.

Section 1: What Is Personal Information?

Personal information is any information that identifies you — who you are, where you live, or how to access your accounts.

Here are some examples:

- Your full name and birthdate

- Your home address

- Your phone number and email address

- Your Social Insurance Number (SIN) — This is a 9-digit number given to you by the Canadian government. You need it to work legally in Canada and to file your taxes. It is one of the most important numbers you will ever have, and you should protect it carefully. Only share your SIN when it is absolutely necessary — like with your employer or the Canada Revenue Agency (CRA).

- Your banking details — This includes your bank account number, your debit card number, your PIN (Personal Identification Number), and your online banking password. These details give access to your money. Never share them unless you are completely sure who you are talking to.

- Your passwords — for email, social media, school accounts, and anything else.

- Photos that show where you live or go to school.

All of this information, in the wrong hands, can be used to steal your identity or your money.

Section 2: Why Does This Matter to You?

You might be thinking — "I'm in Grade 10. I don't have that much money. Why would anyone want my information?"

Here's the thing: criminals don't just target wealthy people. They target anyone they can. And young people are actually common targets because they often have clean credit records and may not check their accounts as regularly as adults.

In Saskatchewan, like everywhere in Canada, financial fraud and identity theft are real problems. Scammers contact people through phone calls, text messages, emails, and fake websites. Some scams are aimed specifically at First Nations and Métis communities. For example, fake messages may claim to be from the federal government about Treaty payments, status card renewals, or benefit payments. These scams look official — but they are not.

Your personal information is valuable. Treat it that way.

Section 3: Safe Data Practices — What to Share and What to Protect

What is "data"?

Data just means information — especially information that is stored or shared digitally. When we talk about safe data practices, we mean habits that help keep your information safe, both online and offline.

Think Before You Share

Ask yourself these questions before giving out any personal information:

- Do I know exactly who is asking?

- Do they actually need this information?

- Is this a trusted website or app?

- What will they do with my information?

If you are unsure, it is okay to say no — or to ask more questions first.

Watch Out for Phishing

Phishing (pronounced like "fishing") is when someone pretends to be a trusted person or company to trick you into giving them your information. It often comes as an email, text, or phone call.

For example, you might get a text saying: *"Your bank account has been frozen. Click here to fix it immediately."* That link takes you to a fake website that looks real — and when you type in your information, the scammer steals it.

Warning signs of phishing:

- Urgency — messages that say "Act now!" or "Your account will be deleted!"

- Spelling mistakes or strange email addresses

- Requests for your password or SIN

- Links that look slightly off — like "royalbank-secure.com" instead of "royalbank.com"

When in doubt, do not click. Go directly to the official website yourself, or call the company using a phone number from their official website.

Be Careful on Public Wi-Fi

Public Wi-Fi — like at a mall, coffee shop, or library — is not always secure. Avoid logging into your bank account or entering passwords when using public Wi-Fi. If you have to use the internet for something private, use your phone's data instead.

Social Media and Oversharing

Be thoughtful about what you post online. Sharing your full birthdate, home address, school name, or photos of your house gives strangers information they shouldn't have. Even posting that you are away on a trip can create risk. Think of your social media like a public bulletin board — only put up what you'd be comfortable with a stranger reading.

Section 4: Password Security

A strong password is one of the simplest ways to protect your accounts. Here is what makes a password strong:

- At least 12 characters long

- A mix of uppercase and lowercase letters, numbers, and symbols

- Not a real word found in the dictionary

- Nothing that someone could guess — like your name, birthday, or pet's name

A strong password might look something like this: **M0ose$Run$Fast!** — it is long, mixed up, and hard to guess.

Never reuse passwords. If you use the same password for everything and one account gets hacked, all of your accounts are at risk. That's like using the same key for your house, your car, and your locker — if someone gets that one key, they have access to everything.

Password Managers

A password manager is an app that stores all of your passwords safely in one place. You only need to remember one master password to get in. Popular password managers include Bitwarden (free) and 1Password. They make it easy to use a different, strong password for every single account without having to memorize them all.

Section 5: Document Storage and Management

Part of protecting your personal information is knowing what to do with paper and digital documents.

What Documents Should You Keep?

Some financial documents are important to hold onto. Here are examples that connect to what you have already learned in this course:

- Pay stubs (from Lesson 14) — Keep these until you receive your T4 slip at tax time.

- Tax returns and Notices of Assessment (from Lesson 15) — Keep these for at least 6 years. The Canada Revenue Agency (CRA) can ask to look at them.

- Bank statements — Keep for at least 1 year, or longer if you need them for taxes.

- Important IDs — Things like your birth certificate, SIN card, Métis citizenship card, or status card should be kept in a very safe place at home. Do not carry your SIN card in your wallet. Leave it at home unless you specifically need it that day.

Safe Physical Storage

Keep important paper documents in a locked box or safe at home — not just in a drawer anyone can open. Think about who has access to your space and keep sensitive documents out of reach.

Safe Digital Storage

If you save documents digitally:

- Use a password-protected folder or a trusted service like Google Drive — with a strong password and 2FA turned on.

- Be careful about emailing documents that contain personal information. Email is not always as secure as people think.

- Never store your SIN or passwords in a plain notes app or text file on your phone or computer.

Shredding

Before throwing away any document that has personal information on it — like a bank statement, old pay stub, or anything with your name and address — shred it. A basic cross-cut shredder costs around $30 and is well worth it. Without shredding, someone could go through your garbage and find enough information to steal your identity. This is sometimes called "dumpster diving," and it actually happens.

Section 6: Your Privacy Rights in Canada

 PIPEDA — What Is It?
In Canada, there is a federal law called **PIPEDA** — the Personal Information Protection and Electronic Documents Act. That is a big name, so here is what it actually means: it is a law that controls how businesses collect, use, and share your personal information.

Under PIPEDA, businesses must:
- Tell you why they are collecting your information
- Get your consent — your permission — before collecting it
- Only collect information they actually need
- Keep it secure
- Let you see your own information if you ask for it

This means you have rights. If a company has personal information about you, you can ask to see it. If something is wrong, you can ask them to fix it.

What To Do If Your Information Is Compromised

If you believe your personal information has been stolen or misused, here is what to do:

1. Contact your bank right away. They can freeze your account to stop further damage.
2. Change your passwords for any accounts that might be affected — starting with your email.
3. Report it to the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre.ca.
4. Check your credit report through Equifax or TransUnion — both offer free reports. Look for any accounts or loans you did not open yourself.

Acting quickly is important. The sooner you report it, the less damage is usually done.

Indigenous Data Sovereignty

Indigenous communities across Canada — including First Nations and Métis people here in Saskatchewan — have been working hard to take control of their own information. This is called Indigenous data sovereignty, which means the right of Indigenous peoples to govern how data about their communities, their lands, and their lives is collected, used, and shared.

For a long time, governments, researchers, and outside organizations collected data about Indigenous communities without permission or respect. That data was often used in ways that harmed communities — not helped them. Today, Indigenous nations are reclaiming that right.

Organizations like the First Nations Information Governance Centre (FNIGC) work to make sure that Indigenous people, not outside governments or corporations, control their own information. This is connected to the Treaty relationships we talked about earlier in this course. Sovereignty — the right to govern yourself and your own affairs — includes the right to protect your community's data.

On an individual level, protecting your own personal information is part of protecting your identity and your future.