Legal & Ethical IT: Laws, Privacy, Cybercrime & Professional Conduct

Core Concepts & Definitions

1. Legal Aspects of IT

Legal frameworks ensure accountability, protect rights, and standardize tech operations. Key areas:

• Copyright Law Protects original works (software, music, films) from unauthorized use/reproduction. Example: Nepal’s Copyright Act 2058 prohibits pirating movies or software (e.g., selling counterfeit Windows keys).

• Data Protection & Privacy Laws Regulates how organizations collect/store personal data (e.g., names, financial records). Global Example: GDPR (EU) fines companies €20M+ for breaches (e.g., Facebook’s 2018 Cambridge Analytica scandal). Nepal Example: Privacy Act 2075 requires banks (e.g., NMB, Global IME) to encrypt customer data.

• Cybercrime Laws Criminalizes hacking, fraud, and identity theft. Case Study: Nepal’s Digital Security Act 2075 punishes cyberbullying or fake news (e.g., jail for spreading misinformation during elections).

• Intellectual Property (IP) Rights Includes patents (inventions), trademarks (brand names), and trade secrets (e.g., Coca-Cola’s formula). Real-World Tie: Daraz holds trademarks for its logo; sellers violating IP rules get legal notices.

In the Real World

1. eSewa & Khalti (Digital Transactions)
   • Idea Used: Data Protection Laws (Privacy Act 2075)
   • How: These apps encrypt user transaction data (e.g., UPI PINs) to comply with Nepal’s privacy laws. A breach (e.g., hacking Khalti accounts) could trigger fines under the Electronic Transactions Act 2063.

2. Ncell & NTC (Telecom Surveillance)

   • Idea Used: Ethical Dilemma (Privacy vs. Security)
   • How: Ncell’s SIM registration system (mandated by law) balances crime prevention (tracking stolen phones) against user privacy concerns. Critics argue it enables government surveillance.

3. YouTube & Copyright Strikes

   • Idea Used: Automated Content ID (Copyright Law)
   • How: If a Nepalese musician uploads a song, YouTube’s system may block it if another user claims copyright (e.g., a record label). This enforces Berne Convention (international copyright treaty).

2. Ethical Issues in IT

Ethics guide moral decision-making in tech. Key dilemmas:

• Privacy vs. Surveillance Example: WhatsApp’s End-to-End Encryption (ethical) vs. Government Requests for User Data (legal but controversial). Nepal Case: Nepal Police’s 2021 demand for Pathao driver data raised debates on surveillance ethics.

• AI Bias & Fairness Example: Hiring Algorithms (e.g., Amazon’s scrapped AI that discriminated against women) show how biased training data harms minorities. Local Link: If a Nepalese bank uses AI to approve loans, it must avoid favoring urban over rural applicants.

• Digital Divide & Accessibility Example: Nepal’s Rural Internet Gap—while Kathmandu has 4G, remote villages lack basic connectivity. Ethical tech ensures inclusive design (e.g., screen readers for visually impaired users).

mindmap
  root((Ethical Dilemmas in IT))
    AI
      Bias in Algorithms["Nepalese bank loan bias: urban vs. rural applicants"]
      Transparency["Example: AI decision-making logs for loan approvals"]
    Accessibility
      Inclusive Design["Screen reader compatibility for visually impaired users"]
      Digital Literacy["Training programs for rural internet users"]
    Privacy
      Surveillance Trade-offs["Balancing security vs. privacy in public surveillance"]
      Data Minimization["Collecting only necessary user data (e.g., loan eligibility)"]
    Professional Conduct
      Whistleblowing["Reporting unethical AI bias in loan systems"]
      Conflict of Interest["Auditors avoiding ties to biased AI developers]

3. Professional Ethics & Codes

IT professionals follow codes to maintain trust. Key areas:

• Software Piracy Example: Using unlicensed Microsoft Office in a company violates copyright and can lead to fines (e.g., ₹50,000+ in India; similar penalties may apply in Nepal). Visual Proof:

• Whistleblowing Example: A Nepal Rastra Bank (NRB) employee reporting fraud in digital banking systems is protected under Whistleblower Protection Act 2075.

• Conflict of Interest Example: An IT consultant working for both NTC and a private ISP must disclose potential bias in network design decisions.

4. Case Studies & Worked Examples

Example 1: GDPR Fine on Google (2019)

• Scenario: Google was fined €50M for violating GDPR by not obtaining clear consent for personalized ads.
• Lesson: Even global giants must comply with data protection laws. Nepal’s Privacy Act 2075 has similar clauses.

Example 2: Kathmandu Traffic Routes & Ethical AI

• Scenario: Imagine an AI system optimizing traffic lights in Kathmandu. If it’s trained only on data from Thapathali (busy area) but ignores Bhaktapur roads, it creates bias.
• Solution: Include diverse datasets (e.g., traffic patterns in Pokhara, Biratnagar) to ensure fairness.

Comparative Table: Legal vs. Ethical Responsibilities

5. Emerging Challenges

• Deepfakes & Misinformation Example: In Nepal’s 2022 elections, deepfake videos of candidates circulated. Solution: Platforms like Facebook must label AI-generated content (as per EU’s Digital Services Act).

• Blockchain & Anonymity Example: Cryptocurrency transactions (e.g., Bitcoin) raise concerns about money laundering. Nepal Rastra Bank has banned crypto, citing legal risks.

• Right to Be Forgotten Example: A Nepalese user can request Google to remove personal data (e.g., old school photos) under GDPR. Nepal’s laws are still evolving on this.

Exam Tip

1. Memorize Key Laws:

   • Nepal: Privacy Act 2075, Digital Security Act 2075, Copyright Act 2058.
   • Global: GDPR (EU), DMCA (USA), Berne Convention (Copyright). Tip: Use mnemonics like "PDC-GD" (Privacy, Digital Security, Copyright – GDPR, DMCA).

2. Case Study Approach:

   • Exams often ask: "How would GDPR apply to eSewa’s data policies?"
   • Structure Answer:
     1. Identify the law (GDPR/Privacy Act).
     2. Link to a real scenario (e.g., user consent for transactions).
     3. Discuss consequences (fines, reputational damage).

3. Ethical Dilemmas:

   • Questions may present a scenario (e.g., "Should a bank share customer data with police?").
   • Answer Framework:
     • Legal: What does the law say? (e.g., Privacy Act allows sharing with "authorized bodies").
     • Ethical: What are the moral concerns? (e.g., potential misuse of data).
     • Professional: What would an IT code of conduct recommend?

4. Diagrams & Tables:

   • Draw flowcharts for ethical decision-making (e.g., "Should I report a colleague’s piracy?").
   • Use comparison tables (like the one above) to contrast legal vs. ethical obligations.

5. Real-World Links:

   • Always tie answers to Nepalese examples (e.g., Ncell’s SIM rules, Daraz’s IP policies).
   • Example Question: "How does Nepal’s Digital Security Act address cyberbullying?"
   • Answer: Cites the act’s penalties (fines/jail) + real case (e.g., 2021 social media harassment cases).

Visual Summary