Curriculum
Course: Smart4Food MicroLearning Course
Login

Curriculum

Smart4Food MicroLearning Course

Text lesson

UNIT 6 – CASE SCENARIO ACTIVITY

Narrative scenario

Andreas is a farmer in rural Cyprus. To save water and improve crop yields, he installs soil-moisture sensors across his orange grove. The sensors connect to a free mobile app provided by an overseas company. The app requires him to create an account, upload data and share his farm’s location. Without reading the privacy policy, Andreas uses the same password he uses for email.

The app syncs his sensor data over a public Wi-Fi network at the local café and stores the data on external servers abroad. Over time, the app collects information about his irrigation habits, harvest timings and yields. He begins receiving unexpected marketing emails that seem related to his farming practices and notices that some local competitors mention similar insights.

 

Your Task

Read the scenario above. Identify two potential data security risks Andreas faces when using this third-party app. For each risk, consider an appropriate mitigation measure.

Reflect on possible vulnerabilities related to password practices, network usage, and data sharing policies before reviewing the model responses below.

 

Model Responses (for Self-Assessment)

Risk 1: Unauthorised Access or Data Breach

By using the same password for multiple accounts and uploading data over a public Wi-Fi network, Andreas exposes his account to hacking. Attackers could intercept his login details or steal sensor data from the app’s servers.

Mitigation:
Use unique, strong passwords for each account and enable two-factor authentication. Avoid public Wi-Fi for data uploads; instead, use a secure, password-protected network. Choose apps that encrypt data during transfer and storage.

Risk 2: Misuse of Data by the Third-Party Provider

The app’s company might analyse or sell his farm data without his knowledge, revealing sensitive information about yields, irrigation practices and harvest times. Competitors or advertisers could gain an unfair advantage.

Mitigation:
Read the app’s privacy policy to understand how data is used. Choose services that comply with GDPR and clearly state they will not share data without consent. Limit the amount of data you share, anonymise it where possible, and regularly review what permissions you have granted. If in doubt, switch to a more reputable service.