The complexity and frequency of online attacks have been steadily increasing; additional privacy protection and security measures are necessary for individuals to safeguard Personal Identifiable Information (PII). Challenges exist for Trinidad State College (TSC) students to improve online personal privacy protection behaviors. Protective measures, or cyber hygiene, could include using unique passwords, multi-factor authentication, Privacy-Enhancing Technologies (PET), antivirus, security suites, behavior modification, and the ability to recognize suspicious websites and phishing emails. Malwarebytes (2021) stated malicious software was often deployed through attackers capitalizing on users' lack of training and had cost businesses billions of dollars. As a best practice, employers should provide yearly training for their personnel and value knowledgeable employees who understand and react appropriately to cybersecurity risks. A qualitative, exploratory study based on the Internet Users' Information Privacy Concerns (IUIPC) framework was conducted to explore what challenges existed for Trinidad State College (TSC) students to improve online personal privacy protection behaviors. Purposive and random sampling was used to select participants from the TSC-Valley Campus population. Interviews were conducted with nine participants over Zoom. The responses were organized into categories linked to developing themes. This study found participants applied the security measures they were knowledgeable about or additional precautions if required by the application. A future study could examine students' ability to apply and use security settings before and after attending a cyber hygiene course. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com.bibliotheek.ehb.be/en-US/products/dissertations/individuals.shtml.]