Ethical Theories & Professional Codes in IT Ethics

TAKEAWAYS:

• Ethical theories (deontology, utilitarianism, virtue ethics) provide frameworks for IT decision-making, each with distinct strengths and limitations.
• Professional codes (IEEE, ACM, Nepali IT laws) establish standards for IT practitioners, balancing technical expertise with ethical responsibility.
• Case studies (e.g., Facebook-Cambridge Analytica, Ncell data leaks) illustrate how ethical theories clash in real-world scenarios and how codes fail or succeed.
• Comparative analysis of theories and codes reveals gaps in current regulations, especially in emerging tech like AI and blockchain.
• Nepali context highlights how local laws (e.g., Electronic Transactions Act 2008) adapt global ethical principles to cultural and legal frameworks.
• Critical thinking is required to apply theories to modern dilemmas (e.g., privacy vs. surveillance in Pathao’s ride-hailing app).

Core Ethical Theories in IT Ethics

Ethical theories are philosophical frameworks that guide decision-making. In IT, they help professionals navigate dilemmas like data privacy, AI bias, or cybersecurity trade-offs. Below are the three primary theories covered in the syllabus, each with real-world applications and limitations.

1. Deontological Ethics (Duty-Based Ethics)

Definition: Actions are judged by their adherence to rules or duties, not consequences. Key proponent: Immanuel Kant. Key Principle: "Act only according to that maxim whereby you can, at the same time, will that it should become a universal law." How It Works in IT:

• Rules matter more than outcomes. For example, an IT professional must never disclose a user’s data, even if it could save lives (e.g., a hacker’s data might reveal a terrorist plot, but deontology forbids unauthorized access).
• Focuses on rights (e.g., user privacy rights under Nepal’s Privacy Act 2018).

Worked Example: Ncell’s Data Leak (2021)

• Scenario: Ncell’s customer data was leaked due to poor security controls. A deontological approach would argue that regardless of the consequences (e.g., customer trust loss), Ncell had a duty to protect data under Nepal’s Electronic Transactions Act 2008.
• Criticism: Deontology can be rigid. For instance, if disclosing a hacker’s identity could prevent future attacks, a deontologist might refuse, even if utilitarianism would justify it.

Visual: Kant’s Categorical Imperative

flowchart TD
    A["Deontological Ethics"] --> B["Universalizability: Is the action a rule you'd want everyone to follow?"]
    B --> C["Example: 'Do not hack' → Would you want a world where everyone hacks?"]
    B --> D["Example: 'Protect user data' → Is this a rule for all IT professionals?"]
    C & D --> E["If yes → Ethical. If no → Unethical."]

2. Utilitarianism (Consequence-Based Ethics)

Definition: Actions are judged by their outcomes, specifically maximizing happiness or minimizing harm for the greatest number. Key Principle: "The greatest good for the greatest number." How It Works in IT:

• Cost-benefit analysis is central. For example:
  • Facebook’s Data Sharing: Cambridge Analytica used Facebook data to influence elections. A utilitarian might argue that if the data helped more people than it harmed, it could be justified (though this is controversial).
  • AI in Healthcare: An AI system that predicts diseases might sacrifice some privacy (e.g., sharing anonymized data) if it saves thousands of lives.

Worked Example: eSewa’s Transaction Risks

• Scenario: eSewa processes millions of transactions daily. A utilitarian approach would weigh:
  • Risk: Fraud losses (~NPR 50M/year).
  • Benefit: Convenience for 10M+ users.
  • Decision: Implement two-factor authentication (2FA), even if it slightly reduces user convenience, because the net benefit (fewer frauds + convenience) outweighs harm.

Comparison Table: Deontology vs. Utilitarianism

3. Virtue Ethics

Definition: Focuses on the moral character of the decision-maker rather than rules or outcomes. Key proponent: Aristotle. Key Principle: "A virtuous person acts with wisdom, courage, and integrity." How It Works in IT:

• Character matters more than rules. For example:
  • A virtuous IT manager at Daraz would voluntarily improve security even if not legally required, because it’s the "right thing to do."
  • Contrast with a self-interested manager who cuts security costs to boost profits.

Worked Example: Pathao’s Driver Safety

• Scenario: Pathao’s algorithm ranks drivers. A virtue-based approach would ask:
  • Does the algorithm treat drivers fairly (e.g., no bias against rural drivers)?
  • Does it uphold trust (e.g., transparent cancellation policies)?
• Outcome: Pathao’s Driver Safety Score system (which penalizes reckless driving) aligns with virtue ethics by encouraging responsible behavior.

Visual: Virtue Ethics in IT Roles

mindmap
  root((Virtue Ethics in IT))
    --- Wisdom
        --> Makes ethical judgments (e.g., "Should we use AI for hiring?")
    --- Courage
        --> Stands up to unethical practices (e.g., whistleblowing at a bank)
    --- Integrity
        --> Honesty in coding (e.g., not hiding bugs to meet deadlines)
    --- Fairness
        --> Equal access (e.g., designing apps for rural Nepal)
    --- Compassion
        --> Ethical AI (e.g., not using facial recognition for surveillance)

Professional Codes of Ethics in IT

Ethical theories provide frameworks, but professional codes give practical guidelines. Below are the key codes relevant to Nepal and global IT:

1. IEEE Code of Ethics (Institute of Electrical and Electronics Engineers)

Purpose: For engineers and IT professionals, emphasizing public safety, honesty, and competence. Key Principles:

1. Public Welfare: IT systems must prioritize safety and well-being (e.g., NTC’s network must not fail during emergencies).
2. Honesty: No misrepresentation of data or skills (e.g., a developer must admit if their AI model has biases).
3. Competence: Stay updated with latest security practices (e.g., learning about zero-trust architecture for Ncell’s systems).

Worked Example: NEPSE’s Trading System

• Scenario: NEPSE’s online trading platform must ensure fair access and no insider trading.
• IEEE Application:
  • Public Welfare: Ensure the system doesn’t crash during high-volume trading.
  • Honesty: Disclose any conflicts of interest (e.g., if a board member trades based on insider info).

2. ACM Code of Ethics (Association for Computing Machinery)

Purpose: Broader than IEEE, covering AI, privacy, and societal impact. Key Principles:

1. General Moral Imperatives: Avoid harm, respect privacy.
2. Professional Responsibilities: Uphold public trust (e.g., WhatsApp’s end-to-end encryption).
3. Compliance with Laws: Follow Nepal’s Electronic Transactions Act 2008 and Data Privacy Act 2018.

Worked Example: Google’s AI Ethics Board

• Scenario: Google’s AI Principles state "avoid creating or reinforcing unfair bias."
• ACM Alignment:
  • General Moral Imperatives: Google’s AI must not discriminate (e.g., in hiring tools).
  • Professional Responsibilities: Engineers must audit AI models for bias.

Comparison Table: IEEE vs. ACM Codes

3. Nepali IT Professional Codes

Nepal’s Electronic Transactions Act 2008 and Data Privacy Act 2018 incorporate ethical principles into law. Key Provisions:

1. Data Protection: IT professionals must secure user data (e.g., Khalti’s encryption standards).
2. Transparency: Must disclose how data is used (e.g., Daraz’s privacy policy).
3. Accountability: Penalties for breaches (e.g., fines for Ncell’s 2021 data leak).

Worked Example: Khalti’s Two-Factor Authentication (2FA)

• Ethical Principle: User trust (virtue ethics) + data protection (deontology).
• Legal Alignment: Data Privacy Act 2018 requires consent and security.
• Utilitarian Outcome: Reduces fraud, benefiting millions of users.

Ethical Dilemmas: Where Theories Clash

Real-world IT dilemmas often pit theories against each other. Below are three common scenarios where ethical frameworks conflict:

1. Privacy vs. Security (Deontology vs. Utilitarianism)

Scenario: A bank (e.g., NMB) detects a fraud pattern but needs to share customer data with law enforcement to stop money laundering.

• Deontology: "No, sharing data violates user privacy rights."
• Utilitarianism: "Yes, if it stops NPR 1B in fraud, the net benefit is positive."
• Nepali Law: Data Privacy Act 2018 allows sharing with judicial approval.

Visual: Privacy vs. Security Dilemma

flowchart TD
    A["Bank Detects Fraud"] --> B["Deontology: Protect Privacy"]
    A --> C["Utilitarianism: Share Data to Stop Fraud"]
    B --> D["Legal: Data Privacy Act 2018"]
    C --> D
    D --> E["Solution: Share with Court Order"]

2. AI Bias (Virtue Ethics vs. Utilitarianism)

Scenario: An AI hiring tool (used by Nepali startups) favors urban candidates because rural data is scarce.

• Virtue Ethics: "The AI designer should reject the biased model, even if it’s efficient."
• Utilitarianism: "Use it if it fills 10,000 jobs, even if slightly biased."
• Real-World Example: Google’s AI hiring tool (2018) was scrapped due to gender bias—virtue ethics won.

3. Whistleblowing (Deontology vs. Virtue Ethics)

Scenario: An IT employee at NTC discovers corruption in fiber allocation but risks losing their job.

• Deontology: "Blow the whistle—it’s your duty to expose wrongdoing."
• Virtue Ethics: "Act with courage and integrity, even if it’s risky."
• Nepali Law: Whistleblower Protection Act 2011 encourages reporting.

Worked Example: Nepali Telecom Scandal (2019)

• Scenario: Employees at NTC reported overbilling by contractors.
• Outcome: Deontology and virtue ethics aligned—whistleblowers were protected, and reforms were made.

In the Real World

Ethical theories and professional codes aren’t just academic—they shape how companies operate daily. Here’s how Nepal and global firms apply these ideas:

1. eSewa’s Ethical Dilemma: Fraud vs. Convenience

   • Theory Applied: Utilitarianism (balance fraud risk vs. user convenience).
   • How It Works: eSewa uses AI fraud detection to block suspicious transactions (maximizing net benefit for users).
   • Ethical Conflict: Some argue deontology requires zero fraud, even if it slows transactions.

2. Pathao’s Driver Ratings: Virtue Ethics in Action

   • Theory Applied: Virtue ethics (encouraging responsible behavior).
   • How It Works: Pathao’s Driver Safety Score rewards safe drivers, aligning with courage (reporting accidents) and integrity (honest ratings).
   • Real Impact: Reduced accidents by 15% in Kathmandu (2022 data).

3. Ncell’s Data Leak: Failure of Deontology and ACM Codes

   • Theory Violated: Deontology (duty to protect data) and ACM’s "avoid harm" principle.
   • Outcome: NPR 50M+ in fines and loss of customer trust.
   • Lesson: Nepal’s Data Privacy Act 2018 now requires strict compliance, but utilitarianism (cost-cutting) led to the breach.

Exam Tip

This unit is heavily tested in TU/PU exams through:

1. Scenario-Based Questions (30-40% weight):

   • "A Daraz employee discovers a bug that could crash the website. Using deontology, how should they act?"
   • Answer: "They must report it (duty to public safety) under IEEE’s ‘public welfare’ principle."

2. Comparison Tables (20% weight):

   • "Compare utilitarianism and deontology in the context of NTC’s network security."
   • Key Points:
     • Utilitarianism: "Balance security costs vs. network reliability."
     • Deontology: "Prioritize security rules regardless of cost."

3. Case Study Analysis (25% weight):

   • "Analyze the Facebook-Cambridge Analytica scandal using ACM and IEEE codes."
   • Structure:
     1. ACM Violation: "Lacked transparency (General Moral Imperatives)."
     2. IEEE Violation: "Failed public welfare (data misuse)."
     3. Nepali Law: "Violated Data Privacy Act 2018 (consent and security)."

4. Short-Answer Definitions (15% weight):

   • "Define ‘virtue ethics’ and give an IT example."
   • Answer: "Virtue ethics focuses on moral character (e.g., a Khalti developer voluntarily improving encryption beyond legal requirements)."

Pro Tip:

• Memorize the 3 theories and 2 professional codes (IEEE + ACM).
• Link every answer to Nepal (e.g., "This aligns with Nepal’s Data Privacy Act 2018").
• Use real examples (eSewa, Pathao, Ncell) to stand out in exams.

Final Visual Summary

mindmap
  root((Ethical Theories & Professional Codes))
    --- Deontology
        --> Rules > Outcomes
        --> Example: Ncell data protection
    --- Utilitarianism
        --> Outcomes > Rules
        --> Example: eSewa fraud vs. convenience
    --- Virtue Ethics
        --> Character > Rules/Outcomes
        --> Example: Pathao’s driver ratings
    --- Professional Codes
        --- IEEE
            --> Safety, honesty, competence
        --- ACM
            --> AI ethics, privacy, societal impact
        --- Nepali Laws
            --> Electronic Transactions Act 2008
            --> Data Privacy Act 2018
    --- Real-World Dilemmas
        --- Privacy vs. Security
        --- AI Bias
        --- Whistleblowing