Teach them how to use PGP/GPG, S/MIME, VPNs, never to use "free" email services, never post anything identifying on any social networking site, don't use cloud file services without encrypting files first/etc.
Thats a good start anyways.
Thats a good start anyways.
Also, I would teach them not to post or share anything on the Internet that they do not wish to come back to haunt them at a later date. Give examples of users that have had such things happen and the consequences as well (since many people do not believe it can happen to them). If they use services like Facebook, limit how much info you share (and also private info you give Facebook) and use a private browser windows while browsing such sites. Obviously this does not prevent everything, but there's no reason to make those that would watch them's jobs that much easier.
There are problems with one of your suggestions however. If I teach students how to use a VPN, I'm potentially giving them the skills to access pirated material anonymously and/or attempt to circumvent the school's safety filters. Their parents might have issue with this.