Skip to content
Study Hall
Lesson 3 of 7Social Media, Society and Professional Practice
Unit 4 · Lesson 3 of 7

Digital Footprint, Privacy and Community Management

What a photo quietly reveals before anyone reads the caption, the extra care needed when minors are on camera, how to run the comments on an account you manage, and the Canadian rules for disclosing sponsorship.

5 min read11 practice questionsAsk AI about this →

Key things to remember

  1. 1EXIF metadata can include the device, settings, date, time and GPS coordinates of a photo.
  2. 2Many platforms strip metadata on upload, but email, cloud links and file-sharing often keep it — remove it yourself.
  3. 3Anyone under 18 needs a parent or guardian's consent on a release, and the media consent list must be checked before publishing.
  4. 4Uploading usually keeps your copyright but grants the platform a broad, royalty-free licence to use the content.
  5. 5Cyberbullying response: do not retaliate, document, report, block, and tell a trusted adult.
  6. 6Under Canada's Competition Act, material connections must be clearly disclosed, for example with #ad at the start and inside the video.

Posting a photo feels like sharing one picture. In practice it can share the exact coordinates where it was taken, the time, the device, the house number behind you and the name of your school — to anyone, permanently, because copies outlive deletions. Running an account for a club or a business adds another layer: you are now speaking for other people, moderating strangers, and possibly being paid. This lesson is about the habits that keep the people in your media, and the people behind the account, safe.

Your digital footprint and hidden metadata

Your digital footprint is everything about you that exists online. The active part is what you post; the passive part is what is collected about you or posted by others — tags, location data, someone else's photo with you in the background. Every digital photo also carries EXIF metadata: the camera or phone model, the settings, the date and time, and — if location services are on — the GPS coordinates to within a few metres. Many large social platforms strip this data from public images when they are uploaded, but files sent as email attachments, shared through cloud links, sent as 'documents' in messaging apps or posted on personal websites often keep all of it. The safe habit is to remove it yourself: turn off location tagging in the camera app, use the share option that removes location, or export with metadata stripped.

  • The background talks. House numbers, street signs, licence plates, a school logo on a jersey, a timetable on the fridge, and reflections in windows and sunglasses have all been used to locate people.
  • Combinations identify. A first name alone is harmless; first name plus school plus team plus neighbourhood narrows to one person.
  • Real-time location reveals patterns. A geotag on a story says where you are right now. Posting after you have left — 'post late' — removes the risk and loses nothing.
  • Deleting is not erasing. Screenshots, reposts, archives and the platform's own backups mean anything posted should be treated as permanent.
  • Lock down the account itself: a strong unique password, two-factor authentication, and for an organization's account, at least two administrators so it is never lost when one person leaves.

Filming minors and platform terms

  • Anyone under 18 needs a parent or guardian's consent on the release before identifiable footage of them is published.
  • Check the consent list before publishing, not after. Some students must not appear in published media at all, sometimes for serious safety reasons such as a custody or protection order. Schools and boards keep a media consent list; blur or cut anyone not cleared.
  • Do not attach identifying details to minors: no full names, schedules or locations alongside their faces, and never identify a young person in a sensitive context.
  • Most major platforms require users to be at least 13, and some features have higher minimums. An account for a younger audience is the wrong place for a campaign.
  • You usually keep copyright in what you upload, but you grant the platform a licence — typically worldwide, non-exclusive and royalty-free — to host, display and distribute it. Read the terms before uploading client or commissioned work.
  • Community guidelines are enforceable. A platform can remove posts or close an account that breaks its rules, and an organization that built its whole audience there can lose it overnight.

Moderating a community

  • Publish a short comment policy and pin it: what is welcome, what is removed (harassment, hate, spam, personal information), and what happens to repeat offenders. Removing a comment is far easier to defend when the rule existed first.
  • Know the tools: keyword filters that hide comments automatically, hide (only the writer still sees it), delete, restrict, block and report. Hiding is often better than deleting because it does not start a second argument.
  • Criticism is not abuse. A complaint about the event starting late deserves a calm, public, helpful reply in the account's voice. Personal attacks, threats and slurs do not deserve a reply at all.
  • Do not feed trolls. Arguing publicly rewards the attention-seeking behaviour and spreads the comment to more people.
  • Escalate what is serious. Threats of violence, self-harm, hate or anything involving a minor go to the platform and to a responsible adult or school administration immediately — not just quietly deleted.
Responding to cyberbullying
Do not retaliate. Document first: screenshots that show the content, the account name, the date and the address of the post. Then report it to the platform, block the account, and tell a trusted adult or the school. Ontario's Education Act includes cyberbullying in its definition of bullying, and the most serious behaviour can be criminal — the Criminal Code covers criminal harassment, uttering threats and sharing intimate images without consent.

Brand voice and sponsorship disclosure

AVoice: stays the same
  • The account's personality, written down in a few words
  • For a robotics club: curious, encouraging, a little nerdy
  • Same vocabulary and level of formality in every post
  • What makes captions sound like one organization
BTone: changes with the moment
  • Celebrating a win: excited, exclamation marks allowed
  • Answering a complaint: calm, specific, no jokes
  • Announcing a cancellation: clear and apologetic
  • Same voice, adjusted to what the reader is feeling
Who sets the rules for marketing in CanadaFederal lawCompetition Actmisleading advertisingEnforced by the Competition BureauBans false or misleading claims used topromote a product or a business.e.g. a “was $80, now $40” sale when the itemnever really sold for $80.Industry self-regulationAd StandardsCanadian Code of Advertising StandardsIndependent, not-for-profit advertisingself-regulatory bodyAdministers the Code, which sets thestandards for acceptable ads, andreviews complaints from the public.e.g. someone complains an ad is inaccurate,and it is judged against the Code.Federal lawCASLCanada's Anti-Spam LegislationEnforced mainly by the CRTCGet consent before sending commercialelectronic messages such as emails andtexts.Each message must identify the sender andinclude a way to unsubscribe.Federal privacy lawPIPEDAPersonal Information Protection andElectronic Documents ActOverseen by the Office of the PrivacyCommissioner of CanadaBusinesses need consent to collect, use,or share customers' personalinformation, and must protect it.e.g. a store cannot hand its customer emaillist to another company without consent.Laws are enforced by government; Ad Standards is the advertising industry regulating itself.
Fig 1The Competition Act bans misleading advertising, and Ad Standards publishes the industry's disclosure guidelines for influencers.

Canada's Competition Act prohibits false or misleading representations to promote a product or business. The Competition Bureau has said that a post promoting something without revealing a material connection — payment, free products, discounts, a job with the company, or a family tie — can be misleading, and that both the brand and the person posting can be held responsible. Ad Standards' influencer disclosure guidelines set out what clear disclosure looks like: a plain label such as #ad or #sponsored, placed where it is seen before the 'more' cut-off, repeated on every sponsored post, and said or shown inside a video as well as in the caption. Vague abbreviations such as #sp or #spon, or a disclosure buried among twenty hashtags, do not count.

If you got something, say so up front
The test is simple: would a viewer judge the post differently if they knew about the connection? If a local shop gave the club free pizza for a review, they would. Disclose clearly at the start, and keep your opinions honest — disclosure makes a sponsored post legal, not a false claim within it.

Worked examples

Reveal one step at a time and try to beat it to the next line.

Example 1
A student wants to post a photo of themselves in their team jersey on their front step, taken a minute ago. Audit it before posting.
Example 2
Under the club's open-house post, one comment complains the event was badly organized, two comments insult a named member, and one is a link to a scam giveaway. Handle the thread.
Example 3
A local pizza shop offers the club 10 free pizzas in exchange for a short video review. Plan the disclosure.

Where marks get lost

  • Assuming a photo's location is removed because a platform strips it, then sharing the original file by email or cloud link.
  • Checking only the subject of a photo and missing the house number, licence plate or timetable in the background.
  • Publishing event footage before checking the media consent list for students who must not appear.
  • Arguing with abusive commenters in public instead of documenting, removing, reporting and blocking.
  • Using #sp or hiding #ad at the end of a long hashtag list, which does not count as clear disclosure.

Flashcards 10

Digital footprint
EXIF metadata
Post late
Media consent list
+ 6 more

Practice

1
Which piece of information can EXIF metadata contain that is most dangerous to share?
2
A club's photo was posted on a platform that strips metadata. When could the location still leak?
3
What is the name for the hidden data stored inside a photo file, such as the date, device and location?
4
Give a hashtag that clearly discloses a sponsored post.
5
A club's post received 240 comments, and the keyword filter automatically hid 18 of them. What percentage were hidden? (Round to 1 decimal place.)
%
6
A student gets free headphones from a brand and posts a review. Under Canadian rules, what is required?
7
What is the best first step when you receive a cyberbullying message?
8
What does a platform's terms of service usually say about content you upload?
9
Order the steps for responding to a harassing comment on an account you manage.
  1. 1Add its keywords to the comment filter
  2. 2Tell the targeted person and a responsible adult
  3. 3Hide or delete the comment and block the account
  4. 4Screenshot the comment with the account name, date and address
  5. 5Report the comment and account to the platform
10
Match each situation to the right response.
A polite complaint about the event
A scam giveaway link
A threat of violence
A photo with a geotag of a member's home
11
Why should an organization's social account have at least two administrators?

Spot a mistake on this page? Let us know