Project – Digital Footprints and Consumer Privacy Awareness Among University Students: A Study of Students of the University of Lagos

CHAPTER ONE

INTRODUCTION

1.1 Background to the Study

The rapid development of digital technology has transformed the way individuals communicate, learn, work, shop and participate in contemporary society. The internet, smartphones, social networking platforms, mobile applications, cloud computing and online services have become integral components of everyday life. University students, in particular, are among the most active participants in digital environments because they rely on digital technologies for academic activities, social interaction, entertainment, information seeking, financial transactions and professional development. As students engage with these technologies, they continuously generate information about themselves. The collection of these traces of online activity is commonly described as a digital footprint.

A digital footprint refers to the information trail generated by an individual’s activities in digital environments. It can include information deliberately provided by users, such as social media posts, photographs, comments, registration details and online purchases, as well as information generated automatically, such as browsing histories, cookies, device identifiers, location information and records of online interactions. Sánchez et al. (2012) explain that students’ engagement with digital technologies contributes to the development of their digital identities and leaves traces that can potentially have consequences beyond the immediate context in which the information was created. Digital footprints can therefore provide a representation of an individual’s interests, behaviour, relationships and preferences.

Digital footprints are generally considered in terms of active and passive forms. An active digital footprint consists of information deliberately created or shared by an individual, such as a social media post, online comment, photograph, video or completed online form. A passive digital footprint, on the other hand, may be created without the user consciously intending to disclose particular information. Examples include browsing records, cookies, location data, IP addresses and information about device usage. This distinction is important because individuals may have considerable awareness of the information they deliberately post while having limited knowledge of the amount of information generated passively through their everyday digital activities.

The increasing generation of digital footprints has created new challenges for individual privacy. Privacy in a digital society is no longer limited to physical secrecy. It increasingly concerns individuals’ ability to understand and exercise control over the collection, processing, use, storage and dissemination of information relating to them. Solove (2021) argues that modern privacy problems are closely connected to the enormous capacity of organisations to collect, store, analyse and aggregate personal information. Information that appears insignificant when considered separately can become highly revealing when combined with other information.

The relationship between digital footprints and privacy is therefore particularly important among university students. Students frequently use social networking platforms to communicate with friends, express opinions, share photographs and participate in online communities. They also use search engines, online learning platforms, mobile applications and electronic financial services. Each of these activities may generate information that contributes to their digital footprints. Young and Quan-Haase (2017) found that privacy concerns influence how individuals manage personal information on social networking sites, although privacy decisions are also affected by social relationships and the benefits individuals derive from online participation.

One important issue associated with digital footprints is the privacy paradox. The privacy paradox refers to the apparent inconsistency between individuals’ stated concerns about protecting personal information and their actual willingness to disclose such information online. An individual may be concerned about privacy but still provide personal information to social networking sites or digital service providers because of convenience, social interaction or perceived benefits. Xie and Karan (2019), in their study of college students, found that privacy concerns and privacy-protection behaviour on social networking sites are influenced by multiple factors, demonstrating that concern about privacy does not necessarily result in consistently protective behaviour.

The privacy paradox is particularly relevant to university students because social media and digital communication have become important components of student life. Students may disclose personal information to maintain friendships, create online identities, participate in trends, seek entertainment or gain social recognition. Consequently, students may sometimes consider the immediate benefits of information disclosure to be more important than potential long-term privacy risks. Young and Quan-Haase (2017) observe that users adopt different privacy-protection strategies depending on their level of privacy concern, privacy literacy and social circumstances.

Another important issue is that the value and meaning of personal information can change when data are aggregated. A student may not consider an individual social media post, location record or browsing activity particularly sensitive. However, when information from different sources is combined, it may reveal patterns about the individual’s behaviour, preferences, movements and relationships. Acquisti, Brandimarte and Loewenstein (2015) explain that the increasing availability of personal information in digital environments has changed the nature of privacy and made it more difficult for individuals to assess the consequences of information disclosure.

Digital platforms increasingly use personal information for activities such as targeted advertising, personalisation, recommendation systems, fraud detection and behavioural analysis. This means that digital footprints may have considerable commercial value. A student’s online searches, social media interactions, browsing behaviour and purchasing activities can potentially be used to develop profiles of preferences and interests. Therefore, consumer privacy is becoming increasingly important as individuals interact with businesses and service providers through digital platforms.

Consumer privacy refers to the protection of personal information belonging to individuals in their interactions with organisations, businesses and digital service providers. It involves concerns about how information is collected, the purposes for which it is used, whether it is shared with third parties, how long it is retained and whether individuals have meaningful control over its use. In digital environments, consumers may be required to provide personal information in exchange for access to services. However, users do not always fully understand the privacy implications of accepting terms and conditions or granting application permissions.

The problem of consumer privacy is intensified by the complexity of privacy policies and digital terms of service. Privacy policies may be lengthy and technically complex, making it difficult for ordinary users to understand exactly what information is being collected and how it will be used. Acquisti et al. (2015) argue that individuals frequently make privacy decisions under conditions of incomplete information and uncertainty. As a result, consumers may agree to data-processing practices without fully appreciating their implications.

University students are also increasingly exposed to privacy concerns through digital educational systems. Universities use online registration systems, learning management platforms, electronic libraries, student portals, online assessment tools and other digital technologies. These systems can collect information about students’ identities, academic activities, interactions and learning behaviours. While such information can support educational administration and learning improvement, it also raises concerns about privacy, consent, transparency and data governance.

Learning analytics provides a good example of this development. Learning analytics systems can collect and analyse information about students’ engagement with digital learning platforms. Such information can potentially be used to identify students who require academic support, evaluate learning activities and improve institutional decision-making. However, Jones et al. (2023) note that students may have privacy concerns relating to the collection and use of their data within learning-analytics environments. The usefulness of educational data therefore needs to be balanced against students’ rights and expectations concerning privacy.

The rapid development of artificial intelligence has further expanded the scope of digital privacy concerns. AI systems can analyse large volumes of personal information and generate predictions, classifications and recommendations. Students increasingly interact with AI-powered applications for academic research, writing assistance, information seeking, entertainment and other purposes. In doing so, they may provide personal, academic or other information to AI systems without fully understanding the implications of such disclosure. Recent research on university students’ privacy awareness in relation to generative AI highlights concerns relating to data collection, data use and information disclosure (Alharbi et al., 2026).

Digital privacy awareness is therefore an increasingly important component of digital literacy. Digital literacy is not simply the ability to operate technological devices or access online information. It also involves the ability to use digital technologies critically, safely and responsibly. A student may be highly active on social media and highly proficient in using smartphones but may have limited knowledge about cookies, tracking technologies, application permissions, data brokers or third-party information sharing.

The assumption that young people are automatically digitally competent has been challenged by empirical research. Margaryan, Littlejohn and Vojt (2011) found substantial variation in university students’ use of digital technologies, demonstrating that students cannot simply be assumed to possess similar levels of technological competence because of their age. Consequently, frequent technology use should not automatically be equated with high levels of digital privacy awareness.

Poor privacy awareness can expose students to several risks. These include identity theft, phishing, cyberstalking, fraud, unwanted surveillance, reputational damage and unauthorised use of personal information. Students who share excessive personal information may also increase their exposure to social engineering attacks because information available online can be used by malicious actors to construct convincing fraudulent messages. Consequently, understanding digital footprints is not only a privacy issue but also an important component of cybersecurity awareness.

The persistence of digital information is another concern. Information posted online may be copied, downloaded, shared or archived by other users. Removing the original content does not necessarily mean that all copies have disappeared. A social media photograph, comment or video created while a student is in university may therefore potentially remain accessible or be reproduced in the future. Sánchez et al. (2012) emphasise the importance of educating students about the long-term implications of their digital footprints because online information can contribute to their continuing digital identities.

The Nigerian environment makes the issue increasingly important. Nigeria has experienced substantial growth in internet access, social media use, mobile technology, electronic banking and other digital services. As more Nigerians participate in the digital economy, the amount of personal information generated through digital interactions also increases. This has created a need for stronger data-protection mechanisms and greater public awareness of privacy rights.

In response to these developments, Nigeria enacted the Nigeria Data Protection Act 2023, which provides a legal framework for the protection of personal data and the regulation of its processing. The Act recognises various rights of data subjects and establishes obligations for organisations that process personal data (Nigeria Data Protection Commission, 2023). The existence of a legal framework is important, but effective privacy protection also requires individuals to understand their rights and adopt responsible data-protection practices.

University students constitute an important group within this context because they are active users of digital technologies and are likely to continue using digital platforms throughout their professional and personal lives. Their university years also represent a period in which they develop professional identities, social networks and patterns of technology use. Awareness of digital footprints during this period may therefore have long-term benefits.

The University of Lagos provides a particularly suitable context for investigating digital footprints and consumer privacy awareness. As a major Nigerian university situated in Lagos, the country’s leading commercial and technological centre, the institution’s students interact with numerous digital technologies. Students use digital platforms for registration, academic communication, online learning, research, social interaction, entertainment, financial transactions and professional networking. These activities potentially generate extensive digital footprints.

The university environment also provides students with access to multiple forms of digital communication. Students may simultaneously use university platforms, social media applications, email services, cloud-based applications and mobile technologies. The combination of these platforms creates a complex digital environment in which students may have difficulty identifying all the information they generate and determining who can access it.

Existing research has demonstrated the importance of privacy within higher education. Kularski and Martin (2022), in a systematic review of online student privacy research, found that student privacy has become an increasingly important area of research as higher education institutions expand their use of digital technologies. Their review demonstrates that privacy concerns can arise from social networking, online learning, institutional technologies and other forms of digital participation.

The issue is therefore not whether university students should use digital technologies. Digital technologies offer substantial benefits for education, communication, innovation and economic participation. The central issue is whether students possess sufficient knowledge to use these technologies while making informed decisions concerning their personal information. Digital-footprint awareness can potentially enable students to understand what information they leave behind, how that information can be used and what measures they can adopt to reduce unnecessary privacy exposure.

It is against this background that this study examines Digital Footprints and Consumer Privacy Awareness Among University Students: A Study of Students of the University of Lagos. The study seeks to determine students’ awareness of their digital footprints, assess their consumer privacy awareness, examine their understanding of privacy risks and determine whether digital-footprint awareness is significantly related to consumer privacy awareness.

1.2 Statement of the Problem

The increasing integration of digital technologies into university students’ academic, social and personal activities has resulted in the continuous generation of digital footprints. Students leave digital traces whenever they post on social media, conduct online searches, use learning-management systems, download applications, make electronic payments or interact with online services. Although these activities provide considerable benefits, they also create privacy risks. The major problem is that students may generate substantial amounts of digital information without fully understanding what constitutes their digital footprint, how such information can be collected and the potential consequences of its disclosure.

A major concern is the difference between active and passive digital footprints. Students are generally aware when they deliberately post photographs, comments or personal information online. However, they may not be equally aware that websites and applications can collect information concerning their browsing behaviour, location, device characteristics and online interactions. Acquisti et al. (2015) explain that individuals often face difficulties understanding the extent to which their personal information can be collected and processed in contemporary digital environments. Consequently, students may believe that they are protecting their privacy while unknowingly generating extensive passive digital footprints.

Another problem concerns the privacy paradox. Many students may express concern about privacy but continue to disclose personal information online. Xie and Karan (2019) found that college students’ privacy concerns do not necessarily prevent them from engaging in information-disclosure behaviour on social networking sites. This suggests that awareness of privacy risks may not automatically result in privacy-protection practices.

Social media contributes significantly to this problem. Students use social networking platforms to communicate, build relationships, express opinions, share experiences and develop online identities. These activities can encourage the disclosure of personal information. Young and Quan-Haase (2017) found that privacy concerns, privacy literacy and social factors influence users’ privacy-protection strategies. Students may therefore make privacy decisions based on convenience and social benefits rather than on careful consideration of long-term risks.

Another concern is the permanence of information shared online. Students may treat social media posts, photographs and comments as temporary forms of communication. However, digital information can be copied, archived and redistributed. Sánchez et al. (2012) argue that students need greater awareness of their digital footprints because online activities contribute to the formation of digital identities that may persist over time.

The growing use of digital educational technologies introduces another dimension of the problem. Students increasingly use online learning systems, electronic libraries, student portals and digital assessment platforms. These technologies can generate information about students’ academic activities and behaviour. Although learning analytics can provide useful educational benefits, concerns may arise regarding data collection, privacy and secondary use. Jones et al. (2023) identify privacy as an important issue in learning-analytics environments because students may be concerned about how their data are collected and used.

The emergence of artificial intelligence has further complicated the privacy environment. Students increasingly use AI-powered applications and may enter personal or academic information into these systems. Without adequate awareness, students may unknowingly disclose information to platforms whose data-processing practices they do not fully understand. Alharbi et al. (2026) emphasise the importance of students’ awareness of data collection, data use and data disclosure when interacting with generative AI technologies.

There is also a problem with assuming that students’ familiarity with digital technologies automatically translates into privacy awareness. Margaryan et al. (2011) found that university students vary significantly in their use of digital technologies. Therefore, being a frequent user of social media or smartphones does not necessarily mean that a student understands digital privacy risks, data tracking, application permissions or third-party data sharing.

The consequences of inadequate privacy awareness can be serious. Students may become vulnerable to identity theft, phishing, cyberstalking, fraud, unwanted profiling and reputational damage. Personal information disclosed online can also be used by organisations for targeted advertising and behavioural profiling. The commercialisation of personal data therefore makes consumer privacy an important concern for students who interact with digital businesses and service providers.

In Nigeria, the enactment of the Nigeria Data Protection Act 2023 represents an important development in the protection of personal data. The Act establishes a framework for regulating the processing of personal data and protecting the rights of data subjects (Nigeria Data Protection Commission, 2023). However, legal protection may have limited practical effectiveness where individuals have inadequate knowledge of their rights and responsibilities. Students therefore need to understand not only that their personal information deserves protection but also how digital platforms collect and process such information.

Despite the growing importance of digital privacy, there remains a shortage of context-specific empirical evidence concerning the relationship between students’ awareness of digital footprints and consumer privacy awareness in Nigerian universities. Kularski and Martin (2022) demonstrate that online student privacy has received increasing scholarly attention internationally, but the rapid development of digital technologies requires continued investigation across different institutional and national contexts.

In particular, there is insufficient empirical evidence regarding students of the University of Lagos and the extent to which their awareness of digital footprints influences their understanding of consumer privacy. Students at the University of Lagos operate within a highly digital environment and interact with numerous platforms for academic, social, financial and personal purposes. Yet, without adequate awareness, these activities may expose students to privacy risks that they do not fully recognise.

The central problem of this study is therefore the uncertain level of awareness among University of Lagos students regarding the digital footprints they create and the implications of these footprints for consumer privacy. It is not sufficiently clear whether students understand the information trails created by their online activities, whether they recognise the risks associated with personal-data disclosure and whether they adopt appropriate measures to protect their privacy.

This situation creates a need for empirical investigation. Determining the level of digital-footprint awareness and consumer privacy awareness among students will provide evidence that can guide digital-literacy programmes, privacy education, cybersecurity awareness and responsible technology-use initiatives within the university environment.

The study consequently seeks to establish whether a significant relationship exists between digital-footprint awareness and consumer privacy awareness among students of the University of Lagos.

1.3 Aim of the Study

The main aim of this study is to examine the relationship between digital footprints and consumer privacy awareness among students of the University of Lagos.

1.4 Objectives of the Study

The specific objectives are to:

1. examine the level of awareness of digital footprints among students of the University of Lagos;
2. assess the level of consumer privacy awareness among students of the University of Lagos;
3. examine students’ understanding of the privacy risks associated with their digital footprints;
4. assess the privacy-protection practices adopted by students of the University of Lagos; and
5. determine whether digital-footprint awareness is significantly related to consumer privacy awareness among students of the University of Lagos.

1.5 Research Questions

The following research questions will guide the study:

1. What is the level of awareness of digital footprints among students of the University of Lagos?
2. What is the level of consumer privacy awareness among students of the University of Lagos?
3. To what extent do students understand the privacy risks associated with their digital footprints?
4. What privacy-protection practices are adopted by students of the University of Lagos?
5. Is there a significant relationship between digital-footprint awareness and consumer privacy awareness among students of the University of Lagos?

1.6 Research Hypothesis

The following null hypothesis will be tested at 0.05 level of significance:

H₀: There is no significant relationship between digital-footprint awareness and consumer privacy awareness among students of the University of Lagos.

1.7 Significance of the Study

The study will be significant to students of the University of Lagos because it will increase awareness of the digital traces generated through their everyday online activities. The findings may encourage students to exercise greater caution when sharing personal information, adjust privacy settings appropriately and adopt safer digital practices.

The study will be useful to the management of the University of Lagos. The findings may provide empirical evidence that can support the development of digital-literacy, cybersecurity and data-privacy awareness programmes. The university may use the findings to identify areas in which students require additional education concerning responsible use of digital platforms.

The study will also benefit lecturers and academic staff. As teaching, communication, assessment and academic administration increasingly rely on digital technologies, understanding students’ privacy concerns can help academic staff adopt more responsible approaches to handling student information.

The study will be relevant to data-protection authorities and policymakers, particularly the Nigeria Data Protection Commission. Evidence concerning students’ privacy awareness may assist in developing targeted privacy-education initiatives and improving public understanding of data-protection rights under the Nigeria Data Protection Act 2023 (Nigeria Data Protection Commission, 2023).

The study will also be useful to digital businesses and online service providers. Understanding students’ awareness of consumer privacy may encourage organisations to improve transparency concerning data collection, simplify privacy notices and provide users with more effective privacy controls.

Academically, the study will contribute to the growing literature on digital footprints, digital literacy and consumer privacy awareness. While previous studies have examined social media privacy, online student privacy and privacy behaviour in different contexts, this study will provide evidence from students within a Nigerian university environment.

Finally, the study will serve as a useful reference for future researchers interested in digital privacy, cybersecurity awareness, social media behaviour, digital citizenship, data protection and the responsible use of emerging technologies among university students.

1.8 Scope of the Study

The study focuses on Digital Footprints and Consumer Privacy Awareness among students of the University of Lagos.

The study is conceptually concerned with students’ awareness of digital footprints, understanding of digital privacy risks, knowledge of personal-data collection and processing, consumer privacy awareness and privacy-protection practices.

Geographically, the study is restricted to students of the University of Lagos, Lagos State, Nigeria.

The study does not examine the technical architecture or programming of social media platforms, artificial intelligence systems or data-storage technologies. Rather, it focuses on students’ awareness, perceptions and practices concerning digital footprints and consumer privacy.

1.9 Operational Definition of Terms

Digital Footprint: The collection of information and traces generated by an individual’s activities when using digital technologies and online platforms.

Active Digital Footprint: Information deliberately created or shared by an individual, such as social media posts, comments, photographs, videos and online forms.

Passive Digital Footprint: Information generated or collected through an individual’s digital activities without necessarily being deliberately provided, such as cookies, browsing history, location information and device identifiers.

Consumer Privacy: The protection of an individual’s personal information during interactions with businesses, organisations and digital service providers.

Privacy Awareness: The extent to which an individual understands privacy risks, personal-data practices, privacy rights and methods of protecting personal information.

Digital-Footprint Awareness: An individual’s understanding of the digital traces created through online activities and the potential consequences associated with those traces.

Privacy-Protection Practices: Actions taken by individuals to safeguard their personal information, including limiting information disclosure, using strong passwords, activating security measures and managing privacy settings.

Personal Data: Information relating to an identified or identifiable individual.

Digital Privacy Risk: The possibility that personal information generated through digital activities may be accessed, disclosed, misused, manipulated or processed in an undesirable manner.

Digital Literacy: The knowledge and skills required to use digital technologies effectively, critically, safely and responsibly.

University Student: A person formally enrolled in an academic programme at the University of Lagos.

1.10 Organisation of the Study

The study is organised into five chapters. Chapter One presents the introduction, background to the study, statement of the problem, aim and objectives, research questions, hypothesis, significance, scope and operational definition of terms. Chapter Two reviews relevant conceptual, theoretical and empirical literature on digital footprints and consumer privacy awareness. Chapter Three presents the research methodology, including the research design, population, sample size, sampling technique, research instrument, validity and reliability, data-collection procedure and method of data analysis. Chapter Four presents, analyses and interprets the data collected from respondents and tests the stated hypothesis. Chapter Five presents the summary of findings, conclusion and recommendations.

Project – Digital Footprints and Consumer Privacy Awareness Among University Students: A Study of Students of the University of Lagos