computer ethics checklist

COMPUTER ETHICS CHECKLIST

There should be specific well-defined ethical standards for police officers who have special and sensitive responsibilities in the IT / CT field.

AUTONOMY (and Privacy)

Am I prima facie ‘trespassing’ by accessing other communications networks, systems, files, accounts?
Can I provide an over-riding ethical reason for such access?
Am I respecting the privacy of the data-subjects (and collateral/third party data subjects)
Am I prima facie breaching confidentiality? Can I provide an over-riding ethical reason for such a breach?
Have I considered implications of Human Rights legislation? (Esp. Art. 8)
Have I considered implications of local and national privacy legislation?
Have strict enough technical and procedural measures been taken to protect the data from unauthorized access inc. unauthorized access by any computer experts?
Have strict enough technical and procedural measures been taken to protect from accidental disclosure?
Have strict enough technical and procedural measures been taken to protect from third party disclosure?

BENEFICENCE / NON-MALEFICENCE

Have I thought through the balance (with consultation) of potential benefits and harms to individuals, groups, societies, governments, etc., in respect of this data manipulation?
Am I / are we operating on a ‘need to know’ basis?
Do I need this information? Need for what? Do I mean I might I need this information?
Is my access to this data morally defensible; professionally and ethically defensible; legally defensible?
Am I being tempted to put this information to personal use or gain or idle curiosity?
Have I considered retention periods and disposal criteria and methods for this data?
Is there a policy on retention, review and disposal? If not, shouldn’t there be one?
Am I using / intending to use this data only for the purpose for which it was targeted in the first place? If the purpose has changed, is that ethically defensible?

CONSENT

Does the data subject have right to review or correct this data (at the location where I got it, or where I have put it)?
Am I working from a presumption in favour of consent of the data subject? That is, can I provide an over-riding ethical reason for operating without data subject’s consent?
Have I considered implications of Freedom of Information Legislation in the nations involved?
Have I considered legislation empowering citizen rights to data protection and access?
Have I considered implications of this data manipulation for public confidence in the police service, and effects on public cooperation in fighting crime?

JUSTICE

Is the gathering, storage, analysis, interpretation, application of this data discriminatory on the basis of
- gender - race - religion - age - disability - nationality - or in any other way?
Am I showing sufficient sensitivity to cultural and religious values and diversity?
Have I done everything reasonably possible to ensure accuracy?

ACCOUNTABILITY

Am I accountable in my acts and omissions i.e. prepared to explain and justify them to those affected by their consequences?
Are my data manipulations covered by internal monitoring and audit procedures?
Are such procedures in effect in this case?
Can such procedures (and policies) be improved in the light of my experience?
Has everyone involved in sensitive data manipulation been screened (as well as associated colleagues, etc.)?
Is there adequate and continuous professional training for competence and standard-setting?
Am I up to date with policies, procedures, techniques, technology, etc?
Are there in my organisation appropriate measures to maintain the requirements of this ethical checklist in the context of information-sharing and the ‘cascade problem’?
Who should I share this data with, and on what ethical basis?

- internal to my organisation

- associated with my organisation

- informers, informants

- other agencies / individuals outside my organisation

Have I considered the communications legislation in all the nations involved?
What will I do if I see a colleague acting unprofessionally / unethically / illegally?
Does my organisation have adequate internal ‘whistle-blowing’ procedures in place?
Am I showing sufficient vigilance for software and communications defects, weaknesses & anomalies which might have compromising implications?
Have I declared any conflicts, or potential conflicts, of interest?

CONCLUSION

Recommendations might include:

Managers who have strategic, organizational and social responsibilities must respect the principle of accountability in particular.

Police services require policies, structures and procedures which are premised on a sound understanding of ethics. An ethics committee or forum is recommended.

Codes of conduct, disciplinary procedures, grievance and internal whistle-blowing procedures, complaints procedures should all take account of the ethical implications of IT and communications technology-based investigations and crime prevention activities.

A publicly accountable police service takes appropriate measures (through police authorities, consultative groups, etc.) to inform and discuss developments with representative cross-sections of the public and corporate bodies.

There should be specific well-defined ethical standards for police officers who have special and sensitive responsibilities in the IT / CT field.

Return to IFPE Index Return to site's GENERAL INDEX