At basic level, individuals remember and implement simple tasks with guidance as needed.

• Acknowledge the importance of a cautious approach to the sharing of personal data in digital environments.
• Recognise that personal data is collected and generated through a large variety of sources and processes.
• Recognise that manipulative methods can be used in digital environments to deceive individuals into providing access to personal data, accounts or other sensitive information.
• Identify risks of sharing personal data in digital environments, including specific risks in relation to AI systems.
• Recognise that individuals have a right to privacy and that their personal data is protected under legislation.
• Implement basic security measures for online payments and transactions.
• Block or flag personal information that has been inappropriately shared online.
• Recognise and respond appropriately to signs of identity theft.

At intermediate level, individuals identify and implement well-defined tasks and solve well-defined problems autonomously.

• Recognise the importance of careful handling of personal data of oneself and others, especially vulnerable individuals and children.
• Recognise key concepts related to data protection and privacy legislation.
• Define the purpose of online privacy statements and main privacy policy concepts.
• Define personal data breach under current data protection and privacy legislation.
• Describe privacy implications associated with the use of shared online content, such as to train AI systems, recognising that regulation of personal data ownership of content shared online is complex.
• Describe techniques related to social engineering in digital environments, such as phishing or baiting, identifying and responding appropriately to instances of them.
• Safely manage personal data and privacy across a variety of digital environments, including use of privacy tools.

At advanced level, individuals assess and apply solutions to a variety of complex tasks autonomously and adapt to a variety of contexts to evaluate and execute tasks appropriately, guiding others if and as required.

• Continually explore data ownership and privacy issues in relation to digital technological developments.
• Support others to understand their rights under current data protection and privacy legislation.
• Assist others to implement basic strategies to protect personal data and manage privacy in digital environments.

At highly advanced level, individuals assess, evaluate and resolve highly complex or specialised problems to create new solutions or adapt existing ones, leading and guiding others if and as required.

• Stay informed about digital technological and legislative developments in relation to personal data, data ownership and privacy.
• Advise on policy or regulatory aspects of data protection and privacy in digital contexts.
• Lead or contribute to the design of personal data protection strategies in digital contexts.