Family & Everyday Life
Digital Boundaries and Online Privacy: A Practical Family Conversation
Make sharing choices understandable, apply boundaries to everyone and agree how to ask for help.
Archive edition: 14 October 2026 · assigned for archive organisation
A useful conversation about online privacy starts with what people enjoy doing online. That may be messaging friends, sharing artwork, gaming or finding a community around a special interest. Privacy planning should help people take part with clearer choices, rather than treating all online activity as a problem to eliminate.
This guide offers a collaborative worksheet for Canadian families, including autistic young people and adults who want support with digital decisions. It is not a claim that autistic people have one level of online understanding. Match the explanation to the person, respect adult autonomy and keep family expectations separate from a platform’s own age and account requirements.
At a glance
- Discuss the purpose, audience and information involved before posting.
- Apply privacy boundaries to adults’ posts about children as well as children’s own accounts.
- Use accessible examples and agree how to ask for help without blame.
- Review account settings and the agreement when circumstances change.
Ask about the person’s online life
Invite the person to explain a familiar activity. Who do they talk to? What do they like sharing? Which parts of an app are confusing or unwanted? They can answer by talking, typing, drawing or showing a non-sensitive example. Do not require access to private conversations simply to start a general discussion.
The Office of the Privacy Commissioner of Canada’s May 2026 report describes youth focus groups held in February 2025. Participants discussed both benefits and privacy concerns, including parents posting about them without asking. Read the OPC’s youth privacy report. These qualitative accounts are not an autism-specific study or a prevalence estimate for all Canadian young people.
Use that distinction in the conversation: a concern someone raises deserves attention even when other people have a different experience. Ask what control they want over their own information. Avoid assuming that a family member’s willingness to share a photograph also means permission to share a diagnosis, difficulty or private conversation.
Separate three questions before sharing
First, identify the content. A photograph can reveal more than the person in the foreground: a school name, an address label or a timetable might appear behind them. Second, identify the intended audience. A family chat, a public profile and a group with unfamiliar members are different settings. Third, consider what happens if someone copies or forwards it.
Get Cyber Safe advises reviewing social-media privacy settings, limiting personal details and checking photographs for revealing background information. It also recommends unique account passwords and multi-factor authentication. Read the official social-media safety guidance. Settings can reduce some exposure, but they are not a promise that another person cannot copy material.
Make the choice concrete. Instead of “Never overshare,” compare two fictional posts: a picture of a finished model on a plain table, and the same picture beside a visible school timetable. Ask what information each shares and whether that information is necessary for the intended purpose.
Agree on boundaries that apply to everyone
Discuss what needs permission before sharing. Possible categories include photographs, location information, health details, screenshots and stories about a difficult day. Let people choose different boundaries for different audiences. “You may send this to Grandma” does not automatically mean “You may post it publicly.”
Parents and supporters also need a clear rule for their own accounts. Before posting about another person, ask whether the content, wording and audience are acceptable to them in an accessible way. If they do not want the material shared, look for another way to meet the poster’s purpose, such as discussing a general question without identifying them.
Make room to reconsider. Someone may later feel uncomfortable about a previously agreed post. Discuss how to request removal and what the family will do, while being honest that copies elsewhere may remain. Avoid promising complete erasure from every device or service.
| Situation | Question to discuss | Possible agreement |
|---|---|---|
| Photo sharing | Who is pictured, and who will see it? | Ask the person before sharing to the named audience. |
| Location | Is the location necessary to the purpose? | Keep routine locations out of public posts. |
| Private messages | Does a screenshot reveal someone else’s information? | Ask before forwarding a conversation. |
| Account help | What assistance is wanted? | Explain the setting together without silently changing it. |
| Unwanted contact | Who can help and how? | Use an agreed support route and the platform’s current reporting tools. |
Make security actions manageable
Get Cyber Safe’s family resource covers unique credentials, pausing before suspicious links, software updates and backups. Read its cyber security family guidance. Choose one practical task at a time rather than presenting the entire list as a test the person must pass.
For example, review one account’s audience controls together. Explain what a setting changes, ask what the account holder wants and check the result. If the interface has changed, use that service’s current official help. Do not give a universal menu path that may be wrong for the device or app version.
Agree on how account recovery will work without putting passwords or recovery codes into a shared family worksheet. A supporter may help someone understand a password manager or recovery process, but the arrangement should be clear about access and responsibility. An adult’s request for help with one setting is not blanket permission to read all their messages.
Practise asking for help without blame
- What? Identify the information in the post, image or request.
- Who? Name the intended audience and anyone else affected.
- Choose. Decide whether to share, change the content or wait.
- Get help. Use an agreed contact when the situation is unclear or unwanted.
Offer a simple script: “I received something that worries me. Can you help me check it?” A supportive response can begin by thanking the person for telling you and clarifying what happened. Avoid making immediate loss of all online access the automatic response to every request for help.
If information has already been shared, identify what it was, where it went and which account or service is involved. Use the relevant service’s official reporting and recovery guidance. A general family conversation cannot resolve every kind of harassment, fraud or account compromise; seek the appropriate support for the actual incident.
In a fictional example, Sam wants to share a drawing from a school project. Sam and a parent notice the school name on a document in the background. Sam chooses another photograph and agrees that it can go to a small art group, while declining a public family post. The useful outcome is a clear choice about this image, not a claim that all future sharing is safe.
Common questions
Should privacy rules focus only on children?
No. Adults can also reveal another person’s information through photographs, stories or screenshots. Discuss everyone’s responsibilities and ask before sharing identifiable details about someone else. Model the same pause and permission process you are asking younger family members to use.
Does a private account make every post confidential?
No setting can guarantee what an authorised viewer does with content afterwards. Discuss screenshots, forwarding and changes in audience as possibilities. Use settings thoughtfully while still considering whether the information is appropriate for the people who can see it.
How can we explain privacy without abstract language?
Use a familiar, fictional example and compare specific choices. Identify the information, the audience and the purpose. Let the person explain the choice in their preferred communication format. Avoid asking them to reveal a real private message just to demonstrate understanding.
Can I post about someone’s diagnosis to seek advice?
Consider whether you can ask the question without identifying the person or disclosing their private details. Discuss any proposed identifiable post with them in an accessible way. Your wish for support does not remove their interest in controlling information about their own life.
What if a relative keeps posting unwanted photographs?
Make the request specific: identify the image, the audience and what you want changed. Ask them to remove it and to check before sharing again. If needed, review the service’s current reporting options. Avoid promising that every copied version can be retrieved.
Should an adult share passwords with a supporter?
Do not treat password sharing as the default condition for receiving help. Clarify the exact assistance wanted and explore ways to provide it without unnecessary account access. Any authorised support arrangement should be understood by the account holder and protect recovery information.
What if someone sends a suspicious link from a familiar account?
Pause before opening it or providing information. A familiar name does not establish that a request is genuine. Check through an independently known contact route when appropriate and use official service guidance. Do not send passwords or security codes to resolve an uncertain message.
Is blocking someone always rude?
A family agreement can explain that people may use boundaries to manage unwanted contact. Discuss the platform’s available options and what each does. The person does not have to continue an uncomfortable conversation merely to appear polite; support should match the actual situation.
How often should we review the agreement?
Revisit it when someone starts using a new service, their preferences change or an incident shows a gap. Keep the review short and relevant. A regular conversation can also help, but it should not become an unexpected inspection of private messages.
Can this worksheet replace a platform’s age requirements?
No. Check the service’s current terms and age requirements separately. A family agreement explains expectations and support; it does not authorise a false age or override account rules. Choose services and arrangements that are appropriate to the actual user.
Sources
Primary Canadian privacy and cyber-security resources opened and checked on 21 October 2026. No family accounts were inspected or changed. The worksheet, scripts and Sam example are original editorial material; they are not a validated autism-specific intervention.
- OPC: Understanding Young Canadians’ Online Experiences in Relation to Data Privacy — May 2026 report on February 2025 qualitative focus groups.
- Get Cyber Safe: Social media — general account and sharing guidance.
- Get Cyber Safe: Cyber security family rules — practical family security topics.
