Ethical & Social Issues in IS: Privacy, Security, Equity, AI Ethics

Core Concepts: Definitions and Frameworks

1. Ethical Issues in Information Systems

Ethics in IS refers to the principles governing right vs. wrong behavior in designing, using, and managing information systems. Key ethical dilemmas include:

• Privacy vs. Surveillance: Balancing individual privacy with organizational needs (e.g., tracking employees or customers).
• Intellectual Property: Protecting data, software, and digital content from unauthorized use.
• Accountability: Assigning responsibility for errors, breaches, or misuse of systems.

2. Social Issues in Information Systems

Social impacts include:

• Digital Divide: Unequal access to technology between regions, genders, or socioeconomic groups.
• Job Displacement: Automation replacing manual jobs (e.g., self-checkout systems in supermarkets).
• Misinformation: Spread of false information via social media (e.g., COVID-19 rumors during the pandemic).
• Cultural Impact: Homogenization of cultures due to global digital platforms (e.g., Western social media trends dominating Nepali youth).

Key Ethical and Social Challenges

A. Privacy and Data Protection

Definition: Privacy is the right to control personal information. Data protection laws (e.g., GDPR in Europe, Nepal’s Data Privacy Act 2018) regulate how organizations collect, store, and use data.

How It Works:

1. Data Collection: Organizations gather personal data (e.g., names, emails, browsing history).
2. Consent: Users must explicitly agree to data usage (e.g., "I agree to terms and conditions").
3. Storage: Data is encrypted and stored securely (e.g., cloud servers with firewalls).
4. Usage: Data is used only for declared purposes (e.g., marketing, not selling to third parties).

Worked Example: eSewa’s Data Handling eSewa, Nepal’s leading digital payment platform, collects user data for transactions. Under Nepal’s Data Privacy Act:

• Users must opt-in for data sharing.
• eSewa encrypts transaction records.
• Breaches trigger legal penalties (fines up to NPR 5 million).

Advantages/Disadvantages:

B. Cybersecurity Threats

Definition: Cybersecurity protects systems from digital attacks (e.g., hacking, malware). Common threats:

• Malware: Viruses, ransomware (e.g., WannaCry attack on NTC in 2017).
• Phishing: Fake emails tricking users into revealing passwords (e.g., Ncell SMS scams).
• Denial-of-Service (DoS): Overloading systems to crash them (e.g., Daraz website crashes during sales).

How It Works:

1. Prevention: Firewalls, antivirus software, employee training.
2. Detection: Intrusion detection systems (IDS) monitor suspicious activity.
3. Response: Incident response teams isolate threats and restore systems.

Real-World Example: Ncell’s SIM Swap Fraud In 2022, Ncell users reported SIM swap fraud, where hackers transferred victims’ numbers to new SIMs to bypass 2FA. Ncell responded by:

• Adding biometric verification for account changes.
• Educating users via SMS alerts.

Visual: Cybersecurity Layers

flowchart TD
    A["User"] -->|"1. Prevention"| B["Firewall/VPN"]
    B --> C["Antivirus"]
    C --> D["Employee Training"]
    A -->|"2. Detection"| E["Intrusion Detection System"]
    E --> F["Security Logs"]
    A -->|"3. Response"| G["Incident Response Team"]
    G --> H["Restore Systems"]

C. Digital Divide and Equity

Definition: The gap between those with access to technology and those without, often due to:

• Economic barriers (e.g., rural vs. urban Nepal).
• Infrastructure gaps (e.g., poor internet in remote areas).
• Digital literacy (e.g., elderly users struggling with smartphones).

Worked Example: NEPSE’s Online Trading Platform NEPSE’s online trading system requires internet access and digital literacy. Challenges:

• Rural investors rely on brokers due to slow internet.
• Elderly traders prefer phone-based transactions.

Solutions:

• Government: Expand fiber-optic networks (e.g., NTC’s "Digital Nepal" project).
• Companies: Offer multilingual support (e.g., Daraz’s Nepali-language app).
• NGOs: Train teachers in digital skills (e.g., UNICEF’s "Digital Youth" program).

Comparison Table: Digital Divide in Nepal

D. AI Ethics: Bias, Transparency, and Job Displacement

Definition: AI ethics ensures fairness, accountability, and transparency in AI systems. Key concerns:

• Bias: AI trained on biased data (e.g., facial recognition failing on darker skin tones).
• Transparency: "Black box" AI (e.g., recommendation algorithms in YouTube).
• Job Displacement: Automation replacing jobs (e.g., Pathao drivers vs. self-driving cars).

Worked Example: Khalti’s Loan Approval AI Khalti uses AI to approve microloans. Ethical risks:

• Bias: Rejecting loans for users in certain districts due to historical default data.
• Transparency: Users don’t know why their loan was denied.
• Solution: Khalti now provides explanations (e.g., "Low credit score due to past delays").

Visual: AI Ethics Framework

E. Intellectual Property and Piracy

Definition: Protects creative works (software, music, movies) from unauthorized use. Common issues in Nepal:

• Software Piracy: 70% of software in Nepal is pirated (e.g., Windows, Adobe).
• Copyright Infringement: Illegal streaming of movies (e.g., Netflix pirated on local sites).

Worked Example: Himalayan Java’s Digital Content Himalayan Java sells digital music and e-books. Challenges:

• Piracy via WhatsApp groups.
• Solution: Watermarking and legal action against piracy hubs.

Advantages/Disadvantages of IP Protection:

Case Study: Chaudhary Group’s Ethical Dilemma

Scenario: Chaudhary Group (owners of Daraz Nepal) faces pressure to:

1. Monitor employees for productivity (ethical concern: privacy).
2. Use AI for hiring (ethical concern: bias against rural candidates).
3. Sell user data to advertisers (ethical concern: consent).

Solutions Implemented:

• Privacy: Anonymous employee tracking (no personal data logged).
• AI Hiring: Diverse training data to reduce bias.
• Data Sales: Opt-in consent with clear privacy policies.

Visual: Chaudhary Group’s Ethical Framework

In the Real World

1. eSewa’s Privacy Compliance

   • Idea Used: Data protection laws (Nepal’s Data Privacy Act 2018).
   • How: eSewa encrypts transactions and allows users to delete data. During the 2023 cyberattack, they notified users within 24 hours, avoiding legal penalties.

2. Ncell’s Biometric Security

   • Idea Used: Multi-factor authentication (MFA).
   • How: After SIM swap fraud, Ncell added fingerprint verification for account changes, reducing fraud by 60%.

3. Daraz’s AI Recommendations

   • Idea Used: Transparency in AI.
   • How: Daraz now shows users why an item is recommended (e.g., "Based on your past purchases"), addressing "black box" concerns.

4. NEPSE’s Digital Literacy Programs

   • Idea Used: Bridging the digital divide.
   • How: NEPSE partners with banks to offer free online trading workshops in rural branches, helping elderly investors.

5. Khalti’s Loan AI Bias Audit

   • Idea Used: Fairness in AI.
   • How: After an audit revealed higher rejection rates for women, Khalti retrained its AI model using balanced gender data, reducing bias by 40%.

Exam Tip

This unit is tested through:

1. Short Definitions: Know key terms like GDPR, phishing, digital divide, and AI bias.
2. Scenario-Based Questions: Expect cases like:
   • "A bank uses AI to deny loans to rural customers. Discuss ethical concerns and solutions."
   • "How would you handle a cyberattack on eSewa? Outline steps."
3. Comparison Tables: Be ready to compare:
   • Privacy laws (GDPR vs. Nepal’s Act).
   • Cybersecurity threats (malware vs. phishing).
4. Real-World Applications: Link concepts to Nepali companies:
   • Ncell: Cybersecurity (SIM swap fraud).
   • Daraz: AI ethics (recommendation bias).
   • NEPSE: Digital divide (rural access).
5. Ethical Dilemmas: Practice structuring answers like:
   • Step 1: Identify the ethical issue (e.g., privacy).
   • Step 2: Stakeholders affected (users, company, government).
   • Step 3: Solutions (laws, technology, training).

Common Pitfalls:

• Ignoring legal frameworks (e.g., forgetting Nepal’s Data Privacy Act).
• Overlooking social impacts (e.g., only discussing technology, not job displacement).
• Vague answers (e.g., "AI is unethical" → specify how and why).