Identity is one of the seven concepts: the lens for how digital systems shape who we are, as individuals, groups, and communities.
Identity is the set of qualities, beliefs, values, and characteristics that make a person recognisable and distinct, including obvious labels (age, nationality) and quieter things (what you care about, how you speak).
Works at three levels at once: individual (own traits, beliefs), group (shared with others of the same interests or goals), community (collective values and cultural norms). Sharing a song can express all three at once.
Identity is not fixed: it shifts with context and how others see you (a job interview vs close friends, not dishonest). Digital systems constantly change your context and audience and record signals about you at unmatched scale.
Analogy
Analogy
Think of identity as nested rings: you at the centre, inside your groups, inside the wider communities whose norms you share.
A single action can express any of the three rings at once.
Digital Identity: Your Online Representation
Digital identity = the online version of you, assembled from your profiles, posts, and the trail of data you leave. It stands in for you without being the person behind it.
Built three ways at once: constructed by your activity (post, like, follow, search); stored, often permanently, on company servers you never see; influenced by the platforms, which decide what is shown, in what format, and to whom.
Forms whether you intend it or not: even choosing not to post is a readable signal.
Most people run several digital identities (roughly one per platform) that rarely line up; keeping the slices apart is constant, active effort.
Example
Example
A digital identity is far more than a profile picture and bio.
It also includes posts, purchases, search and watch history, location trail, and who you follow, most of which you never set out to publish.
The Self You Show vs the Self Inferred
A digital identity has two sides that do not always match: the presented identity (on purpose) and the inferred identity (from your behaviour).
Presented = curated: chosen username, photo, and posts; can be anonymous or pseudonymous. Valuable control over how audiences see you.
Inferred = built from your data without consent: platforms combine taps, location, dwell time, and contacts to guess interests, mood, income, and habits, then act on it and often sell it. You usually cannot see it.
The two drift apart: the decisions that affect you (ads, prices, content) are made from the inferred version while the presented one sits unused.
Through power: who controls the inferred identity? The person it describes usually has the least say, flipping the assumption that your identity is yours to define.
A Footprint That Persists
Digital footprint = the accumulated record of your online presence; hard to erase and it outlasts the moment that created it.
Two parts: an active trail you create on purpose (posts, shares) and a passive trail collected in the background (logins, locations, cookies, purchases). Both persist.
Larger than expected: it includes metadata (when and where a photo was taken, the device, who you were with, links you followed), invisible to you but readable by the companies that store it.
Persistence has an upside and a downside: a lasting record can serve as evidence or memory, yet it can also pin you to an old post. Under the EU's right to be forgotten (part of GDPR), lets people ask search engines to remove results, but it collides with public interest and free expression, so it is settled case by case.
Common Mistake
Common mistake
Deleting a post does not reliably erase it.
Copies, backups, screenshots, and archives can survive, which is why the right to be forgotten is hard to enforce.
Privacy, Surveillance, and Identity Theft
Because a digital identity is detailed and persistent, losing control causes real harm. Three overlapping threats: loss of privacy, surveillance, identity theft.
Impacts on real people: monitoring causes anxiety; stolen identities lead to fraud and months of cleanup; leaked information can wreck a reputation, end a job, or expose someone to danger, especially vulnerable groups.
Surveillance is not only governments: companies track users across sites, and people monitor each other. Feeling watched causes a chilling effect, where people self-censor.
Recent case: Clearview AI scraped billions of public photos to build a facial-recognition identity database; in September 2024 the Dutch data-protection authority fined it €30.5 million. An identity was assembled from people's public traces without their consent.
Genuine tension: collecting identity data improves safety and security (fraud detection, finding missing people, public health). The same collection eats into privacy, and no setting gives you all of one without losing some of the other.
Contested across cultures: broad camera and data surveillance is accepted with little protest in some safety-first societies, such as extensive public CCTV in China, while in the EU it meets legal limits under GDPR, which treats data protection as a fundamental right.
Theory of Knowledge
TOK
To what extent should security justify collecting data about people's identities?
Do views on privacy differ across cultures, and if so, whose view should set the rules?
Active recall
Self review
What three levels does identity operate at, and what does each cover?
What is a digital identity, and in what three ways is it built?
What is the difference between the identity you present and the identity inferred about you?
Why is a digital footprint hard to erase, even after you delete something?
Why is the balance between privacy and security described as contested across cultures?