Ethical Theories & Professional Codes in IT Ethics

Core Concepts: Ethical Theories in IT

1. Deontological Ethics (Duty-Based)

Definition: Ethical actions are determined by rules/duties, not consequences. Key principle: "Do what is right, regardless of outcome." How it works:

• Focuses on intent and adherence to moral laws (e.g., "Do not steal data").
• Kant’s Categorical Imperative: Act only on maxims you’d universalize (e.g., "Would you want hacking to be legal for everyone?").
• IT Application: Mandates like "never disclose passwords" or "report vulnerabilities" align with duty.

Visual: Moral Dilemma Framework

flowchart TD
    A["Deontology"] --> B["Rule: 'Never hack'"]
    B --> C["Action: Report vulnerability"]
    C --> D["Outcome: Legal, but no reward"]
    A --> E["Utilitarianism"] --> F["Rule: 'Maximize good'"]
    F --> G["Action: Hack to expose flaw"]
    G --> H["Outcome: System fixed, but illegal"]

Real-World Example:

• Nepal’s Electronic Transactions Act (2008): Requires IT professionals to never disclose user data (deontological duty), even if it could "do good" (e.g., exposing a corrupt official). Example: A bank employee discovering fraud must report it through proper channels, not leak data.

2. Utilitarianism (Consequence-Based)

Definition: Actions are right if they maximize overall happiness/benefit. How it works:

• Greatest Good Principle: Weigh outcomes (e.g., "Is whistleblowing worth the legal risk?").
• IT Trade-offs:
  • Example 1: A developer finds a bug in a hospital’s system. Deontology says fix it quietly; utilitarianism might argue publicizing it saves lives (even if it violates NDAs).
  • Example 2: Khalti’s fraud detection: Utilitarianism justifies sharing fraud patterns across banks to minimize losses, even if it slightly reduces privacy.

Comparison Table: Deontology vs. Utilitarianism

Real-World Example:

• Pathao’s Driver Data: Pathao uses utilitarian logic to share aggregated driver location data with traffic police to reduce accidents, even though it involves some privacy trade-off. Worked Example:
  • Scenario: A Pathao driver’s real-time location is leaked to a third party.
  • Deontological View: Always protect user data (violation = ethical failure).
  • Utilitarian View: If sharing anonymized data reduces traffic deaths by 10%, it’s justified.

3. Virtue Ethics (Character-Based)

Definition: Ethics stem from developing good character traits (e.g., honesty, integrity). How it works:

• Aristotle’s Golden Mean: Virtue is the midpoint between excess and deficiency (e.g., courage is between recklessness and cowardice).
• IT Traits:
  • Honesty: Disclosing conflicts of interest (e.g., a Daraz employee owning stock in a competitor).
  • Responsibility: Taking ownership of mistakes (e.g., a coder who accidentally leaks data must apologize publicly).

Visual: Virtue Ethics in IT Roles

mindmap
  root((Virtue Ethics in IT))
    Honesty
      Example: Disclosing bias in AI algorithms
    Integrity
      Example: Refusing to build surveillance tools for abuse
    Responsibility
      Example: Documenting code changes transparently
    Compassion
      Example: Helping nonprofits with pro bono tech support

Real-World Example:

• Google’s AI Principles: Emphasizes "social benefit" and "avoiding harm" as virtues. Example: Google employees protested Project Maven (military AI) on grounds it violated their virtue of compassion and integrity.

4. Social Contract Theory

Definition: Ethics arise from mutual agreements in society (e.g., laws, professional codes). How it works:

• IT professionals implicitly agree to follow codes of conduct (e.g., IEEE, ACM) in exchange for trust and career opportunities.
• Breach Example: A Nepalese IT consultant working for a foreign firm must follow both Nepal’s IT Act and the client’s ethics policy.

Professional Codes in IT Ethics

1. Key Codes of Conduct

Worked Example: ACM Code Violation

• Scenario: An Ncell employee uses company servers to mine cryptocurrency.
• Breach: Violates ACM’s "Avoid harm" (wastes resources) and "Honesty" (misuse of assets).
• Nepalese Law: Violates Electronic Transactions Act (2008), Section 30 (misuse of IT resources).

2. How Codes Work in Practice

flowchart LR
    A["IT Professional"] --> B["Faces Ethical Dilemma"]
    B --> C["Consults Code of Conduct"]
    C --> D["Weighs Theories (Deontology/Utilitarianism)"]
    D --> E["Seeks Mentorship"]
    E --> F["Documents Decision"]
    F --> G["Implements Action"]
    G --> H["Evaluates Outcome"]

Real-World Example: WhatsApp Encryption Debate

• Dilemma: WhatsApp’s end-to-end encryption prevents law enforcement from accessing messages.
• Deontological View: Encryption is a duty to protect privacy (ACM/IEEE).
• Utilitarian View: Governments argue it harms national security (e.g., Nepal’s Cybersecurity Strategy 2076 seeks backdoor access).
• Outcome: WhatsApp maintains encryption, citing social contract with users.

3. Nepal-Specific Ethical Challenges

1. Data Localization: Nepal’s IT Policy 2068 requires sensitive data (e.g., NID, bank records) to be stored locally. Example: Daraz must host Nepali user data on servers in Nepal, not overseas.
2. Digital Divide: Ethical codes must address access disparities (e.g., rural schools lacking IT infrastructure). Example: Ncell’s "Digital Seva" program aligns with virtue ethics (compassion) but faces utilitarian trade-offs (cost vs. reach).
3. Cultural Norms: Nepali workplace hierarchies may pressure juniors to bypass ethical codes. Example: A junior at a Kathmandu IT firm might be told to "ignore a bug" to meet deadlines—violating ACM’s "Avoid harm" principle.

Case Studies: Ethical Theories in Action

1. Facebook-Cambridge Analytica Scandal (2018)

• Theory Applied: Utilitarianism (Facebook argued data sharing "connected people") vs. Deontology (users’ right to privacy was violated).
• Outcome: $5B fine; led to GDPR (EU) and Nepal’s Data Privacy Directive (2020).
• Nepal Link: Khalti’s data sharing with banks was scrutinized similarly—utilitarian benefit (fraud reduction) vs. deontological duty (privacy).

2. Nepal’s NTC Website Hack (2019)

• Dilemma: Hackers defaced NTC’s site to protest internet shutdowns.
• Analysis:
  • Deontology: Hacking is illegal (violates Cybersecurity Act 2075).
  • Utilitarianism: If it exposed government corruption, was it justified?
• Resolution: NTC improved transparency (virtue of responsibility), but hackers faced legal action.

Exam Tip

1. Theory Application: Always link ethical theories to real scenarios (e.g., "How would a deontologist respond to a Daraz data leak?").
2. Code Comparison: Memorize ACM vs. IEEE vs. Nepal’s IT Act—exams often ask for differences (e.g., IEEE focuses on "public welfare," while Nepal’s code emphasizes data sovereignty).
3. Case Study Format:
   • Scenario → Theory Applied → Code Violated → Nepalese Law Impact.
   • Example Answer:

     "If a Pathao engineer anonymizes driver data to reduce accidents, they apply utilitarianism. This aligns with ACM’s ‘Contribute to Society’ but may conflict with Nepal’s Data Privacy Directive (2020) if not disclosed transparently."

4. Visuals in Exams: Sketch flowcharts (e.g., decision-making process) or comparison tables to score extra marks.
5. Nepal Focus: Prioritize Electronic Transactions Act (2008), Cybersecurity Strategy 2076, and NID Data Protection Rules (2076) in answers.

Key Formula to Remember: For ethical dilemmas, use the 4-Step Framework:

1. Identify stakeholders (e.g., users, company, government).
2. Apply 2+ theories (e.g., deontology + utilitarianism).
3. Check professional codes (ACM/IEEE/Nepal).
4. Align with Nepalese laws (e.g., IT Act, GDPR-like directives).