Ethics, Ethical Analysis & IT Professions: Frameworks, Cases & Dilemmas

TAKEAWAYS:

• Ethical theories (deontology, utilitarianism, virtue ethics) provide distinct lenses for analyzing IT dilemmas, but no single theory fits all cases—compare them using a decision-matrix for conflicts (e.g., Khalti’s user privacy vs. government KYC laws).
• Structured ethical analysis uses frameworks like ACM/IEEE Software Engineering Code, Turing Test extensions, and five-step moral reasoning (identify, gather facts, evaluate alternatives, make decision, reflect) to break down complex cases (e.g., Daraz’s seller verification vs. small vendor exclusion).
• IT professions (software engineers, cybersecurity experts, data scientists) have distinct ethical codes—compare them in a table to see how roles like a Nepal Stock Exchange (NEPSE) data analyst vs. a Ncell network engineer handle confidentiality differently.
• Real-world dilemmas reveal trade-offs: Google’s AI ethics board shut down in 2019 due to internal conflicts over bias in hiring algorithms; Khalti’s anonymity clashes with Nepal Rastra Bank’s KYC rules; Pathao’s surge pricing exploits utilitarian logic but harms drivers’ livelihoods.
• Worked examples show how to trace ethical failures: Use the Ncell 2021 data leak case to map steps from identifying stakeholders (customers, regulators, Ncell) to evaluating alternatives (encrypting data vs. paying fines).
• Exam focus: Expect case-based questions (e.g., "Analyze the ethics of eSewa’s biometric authentication using deontological and utilitarian theories") and comparison tables (e.g., "Contrast the ethical codes of an IT consultant vs. a cybersecurity auditor in Nepal").

1. Core Ethical Theories: Tools for IT Dilemmas

Ethics in IT isn’t about abstract philosophy—it’s about applying theories to real conflicts. Three dominant theories shape how professionals (and exams) analyze problems:

A. Deontological Ethics: "Rules Matter"

• Definition: Actions are right/wrong based on rules or duties, not outcomes. Example: Whistleblowing is a duty, even if it harms your career.
• Key Principle: Kant’s Categorical Imperative: "Act only according to that maxim whereby you can, at the same time, will that it should become a universal law."
  • IT Example: Ncell’s 2021 data breach—deontologists would argue the company had a duty to encrypt data regardless of cost, even if utilitarians might justify it as "minimizing harm" by saving on infrastructure.
• Visual: Rule-Based Decision Flow

  flowchart TD
    A["Dilemma: Should Ncell share customer data with NTA for traffic monitoring?"] --> B["Apply Rule: Is data sharing a universal duty?"]
    B --> C["No: Privacy is a fundamental right (Nepal’s Digital Security Act 2018)"]
    C --> D["Action: Refuse data sharing"]

B. Utilitarian Ethics: "Maximize Good"

• Definition: Judge actions by their outcomes—aim to maximize happiness/minimize suffering for the greatest number.
• Key Principle: Bentham’s Hedonic Calculus: Weigh pleasure vs. pain across stakeholders.
  • IT Example: Pathao’s surge pricing during protests—utilitarians might argue it’s ethical if it ensures more drivers earn money (even if some earn less). Critics call it exploitative.
• Worked Example: Khalti’s Anonymity vs. KYC
  • Stakeholders:
    • Users (privacy lovers)
    • Government (anti-money laundering)
    • Khalti (profit)
  • Outcomes:

    Action	Users (Pain)	Govt (Pain)	Khalti (Gain)
    Allow anonymous tx	+10 (privacy)	-8 (KYC fail)	-5 (risk)
    Enforce KYC	-7 (inconvenience)	+9 (compliance)	+6 (trust)

  • Utilitarian Choice: Enforce KYC (net +7). But deontologists would say privacy is a non-negotiable right.

C. Virtue Ethics: "Be the Right Person"

• Definition: Focuses on character traits (e.g., honesty, courage) rather than rules or outcomes.
• IT Example: Google’s AI Ethics Board (2018–2019) failed not because of rules, but because board members lacked courage to challenge leadership on biased algorithms.
• Visual: Virtue Ethics in IT Roles

  mindmap
    root((Virtues for IT Professionals))
      Software Engineer
        Integrity: "Report bugs in NEPSE’s trading system even if it delays your project."
        Compassion: "Design accessible apps for visually impaired users."
      Cybersecurity Expert
        Prudence: "Avoid cutting corners in Ncell’s network security."
        Justice: "Ensure fair access to bandwidth (no throttling poor areas)."
      Data Scientist
        Temperance: "Resist manipulating Khalti’s loan algorithms for profit."
        Wisdom: "Know when to say ‘I don’t know’ (e.g., explaining AI loan denials)."

2. Ethical Analysis Frameworks: Step-by-Step Tools

Theories alone aren’t enough—structured frameworks help professionals (and exam answers) navigate dilemmas. Two key models:

A. ACM/IEEE Software Engineering Code of Ethics

• Purpose: Guidelines for software engineers, adapted for IT broadly.
• Key Sections:
  1. Public: Software engineers shall act consistently with the public good.
  2. Client/Employer: Honest and fair in dealings with clients/employers.
  3. Product: Ensure software is reliable, efficient, and meets user needs.
  4. Judgment: Maintain integrity and independence in professional judgment.
  5. Management: Managers shall subscribe to and promote an ethical approach.
  6. Profession: Advance the integrity and reputation of the profession.
  7. Colleagues: Be fair to colleagues and foster their professional growth.
  8. Self: Participate in lifelong learning.
• Real Picture: The ACM Code of Ethics document (search for "ACM Code of Ethics and Professional Conduct PDF").

B. Five-Step Moral Reasoning (Turing Test Extension)

Used to trace ethical dilemmas systematically:

1. Identify the dilemma: What’s the conflict?
2. Gather facts: Who’s involved? What laws/rules apply?
3. Evaluate alternatives: List possible actions and their consequences.
4. Make a decision: Choose based on your ethical theory.
5. Reflect: How would you improve next time?

• Worked Example: Ncell’s 2021 Data Leak
  1. Dilemma: Ncell exposed 10M customers’ data due to poor encryption.
  2. Facts:
     • Stakeholders: Customers (privacy violated), Ncell (fines), NTA (needs data for monitoring).
     • Laws: Nepal’s Digital Security Act 2018 (mandates data protection).
  3. Alternatives:
     • Option 1: Pay fines (utilitarian—minimizes immediate harm).
     • Option 2: Invest in encryption (deontological—fulfills duty to protect users).
  4. Decision: Option 2 (deontological + long-term trust).
  5. Reflection: "Next time, audit third-party vendors’ security."

3. Ethical Codes for IT Professions: Who’s Responsible?

Different IT roles have unique ethical expectations. Compare three key professions in Nepal’s context:

• Visual: Ethical Overlap in IT Roles

  erDiagram
    SOFTWARE_ENGINEER ||--o{ PUBLIC : "Prioritizes"
    SOFTWARE_ENGINEER ||--o{ PRODUCT : "Ensures quality"
    CYBERSECURITY_EXPERT ||--o{ DATA_PROTECTION : "Mandates"
    DATA_SCIENTIST ||--o{ FAIRNESS : "Demands"
    IT_CONSULTANT ||--o{ RISK : "Assesses"

4. Real-World Cases: Where Ethics Meets Code

Case 1: Khalti’s Anonymity vs. Government KYC

• Dilemma: Khalti allows anonymous transactions (utilitarian: user freedom), but Nepal Rastra Bank (NRB) demands KYC for all (deontological: anti-money laundering duty).
• Ethical Analysis:
  • Deontology: KYC is a legal duty—Khalti must comply.
  • Utilitarianism: Anonymous tx reduce government surveillance but enable fraud.
  • Virtue Ethics: Khalti’s founders showed courage by pushing back on NRB’s timeline.
• Outcome: Khalti phased in KYC but kept some anonymous limits for small transactions.

Case 2: Pathao’s Surge Pricing During Protests

• Dilemma: During 2020 Nepal protests, Pathao increased fares by 3x, arguing it was supply/demand economics.
• Ethical Issues:
  • Exploitation: Drivers earn more, but passengers (often protesters) pay unfairly.
  • Safety: Higher fares may deter riders from dangerous routes.
• Worked Example: Apply ACM Code
  • Public Good (Section 1): Pathao failed—harmed vulnerable riders.
  • Judgment (Section 4): Lack of transparency in pricing algorithm.

Case 3: Google’s AI Ethics Board Shutdown (2019)

• Dilemma: Google’s AI ethics board (with members like Timnit Gebru) was dismantled after internal conflicts over bias in hiring algorithms.
• Why It Matters for Nepal:
  • NEPSE’s AI trading tools risk similar bias—who audits them?
  • Ncell’s facial recognition for SIM registration could exclude marginalized groups.
• Lesson: Ethics boards need power—not just good intentions.

5. Common Pitfalls: What Exams Test (and How to Avoid Them)

In the Real World

1. Khalti’s Ethical Tightrope

   • Idea Used: Deontology vs. Utilitarianism
   • How: Khalti’s anonymous transaction limits balance user privacy (deontological right) with NRB’s KYC rules (utilitarian need for financial stability). The conflict forced Khalti to lobby for exceptions in Nepal’s banking laws—a real-world example of ethics shaping policy.

2. Pathao’s Algorithmic Exploitation

   • Idea Used: ACM Code (Public Good) + Virtue Ethics (Courage)
   • How: Pathao’s surge pricing during protests violated Section 1 (Public Good) of the ACM Code. Drivers who protested the algorithm (e.g., via social media) demonstrated virtue ethics in action—holding the company accountable.

3. NEPSE’s AI Trading Bias

   • Idea Used: Fairness in Data Science + Legal Compliance
   • How: NEPSE’s AI-driven stock recommendations historically favored large brokers over retail investors. In 2023, after protests, NEPSE audited its algorithms—showing how ethical pressure (from investors and media) forces change.

Exam Tip

This unit is 30% of your exam—expect:

1. Case Studies (40%):

   • Format: "Analyze the ethics of [X] using two ethical theories and the ACM Code."

   • Example Question:

     "Ncell is pressured by NTA to share customer location data for traffic monitoring. Apply deontological and utilitarian ethics to this scenario, and cite one Nepalese law that conflicts with this request."

   • How to Score Full Marks:

     • Step 1: Clearly identify the dilemma (privacy vs. public safety).
     • Step 2: Compare theories in a table (see below).
     • Step 3: Cite laws (Digital Security Act 2018, Right to Privacy Act 2018).
     • Step 4: Recommend action (e.g., "Ncell should anonymize data").

     Theory	Argument FOR Sharing Data	Argument AGAINST Sharing Data
     Deontology	"Traffic monitoring is a government duty."	"Privacy is a fundamental right (Art. 16, Constitution)."
     Utilitarianism	"Reduces accidents (net good)."	"Harms trust in Ncell (long-term harm)."

2. Comparison Tables (25%):

   • Example: "Contrast the ethical responsibilities of a software engineer at NEPSE vs. a cybersecurity expert at Ncell using their respective codes."
   • Pro Tip: Use bullet points for each role’s unique duties (e.g., NEPSE engineer focuses on audit trails; Ncell expert on encryption standards).

3. Short-Answer Definitions (20%):

   • Example: "Define virtue ethics and give an IT example from Nepal."
   • Model Answer:

     "Virtue ethics evaluates actions based on moral character (e.g., honesty, courage) rather than rules or outcomes. In Nepal, a data scientist at Khalti must exhibit wisdom by explaining AI loan denials clearly to rural applicants, even if it’s inconvenient."

4. Worked Examples (15%):

   • Example: "Trace the ethical failure in the eSewa 2022 biometric hack using the five-step moral reasoning framework."
   • Key Steps to Include:
     1. Dilemma: Biometric data leaked due to weak encryption.
     2. Facts: 500K users affected; eSewa blamed "third-party error."
     3. Alternatives: (A) Blame third-party (B) Take responsibility.
     4. Decision: B (deontological duty to protect users).
     5. Reflection: "Next time, audit third-party contracts."

Final Visual: Ethics Cheat Sheet for Exams

mindmap
  root((Ethics Exam Checklist))
    Theories
      Deontology: "Rules > Outcomes (e.g., Kant’s Imperative)"
      Utilitarianism: "Maximize happiness (e.g., Bentham’s Calculus)"
      Virtue Ethics: "Character matters (e.g., courage, honesty)"
    Frameworks
      ACM Code: "8 sections (Public, Client, Product, etc.)"
      5-Step Reasoning: "Identify → Facts → Alternatives → Decide → Reflect"
    Nepal Laws
      Digital Security Act 2018: "Data protection"
      Right to Privacy Act 2018: "No surveillance without consent"
    Real-World Links
      Khalti: "Anonymity vs. KYC"
      Pathao: "Surge pricing ethics"
      NEPSE: "AI bias in trading"