(3) Ethical & Social Issues in Information Systems

Core definition of ethics

A set of moral principles, values, and rules that guide the behaviour of people (individuals or groups) within an organization or society

Definition of Information Systems (IS) Ethics

The moral principles, guidelines, and standards governing the responsible development and use of digital technologies and data; addresses privacy, security, and algorithmic fairness to ensure technology serves society without causing harm

Primary Ethical Issues in Information Systems

1. Misuse of personal information

2. Misinformation and deep fakes: unverified opinions or fake media rapidly across social media

3. Lack of oversight and acceptance of responsibility: ambiguity over third-party liability

4. Use of AI: ethical dilemmas regarding health tracking, job replacement, and facial recognition

5. Autonomous technology: safety and legal liability of self-driving cars, robotic cars, etc.

Definition and purpose of code of ethics

A documented set of rules, principles, and values designed to guide the behaviour and decision-making of individuals within an org or profession; evaluates specific actions as appropriate or inappropriate and ensures honesty, integrity, and accountability

Five core principles of code of conduct for IS professionals

1. Privacy and data protection: prevent unauthorized data sharing/surveillance and ensure storage transparency

2. Responsibility and cybersecurity: protect systems, disclose data breaches, and practical ethical hacking

3. IP rights: avoid software/content piracy; respect open-source and proprietary code

4. Plagiarism and misinformation prevention: credit original code/content and prevent spreading fake news

5. Workplace ethics standards: maintain fair labor practices and eliminate bias in performance monitoring tools

ACM code of conduct requirements for leaders and organizations

• General moral imperatives: avoid harm to others

• Professional conduct: maintain professional competence

• Leadership roles: be fair and objective in evaluations; support and respect team members

• Quality of work life: leaders must ensure computer systems improve (not damage) work quality

• System protection: prohibit unauthorized system/data use and forbid designing harmful system

Five strategic advantages of a code of ethics

1. Improve decision-making

2. Enhances reputation and brand value

3. Provides legal compliance

4. Attracts and retains talent

5. Improves company culture

Five disadvantages and limitations of a code of ethics

1. Vagueness and formality: often too broad, leading to multiple interpretations in complex situations

2. Lack of enforcement: lacks legal weight; relies mostly on internal consequences

3. Inconsistent application: management may apply rules unevenly, eroding trust

4. Limited coverage: cannot anticipate every possible scenario or dilemma

5. Ineffective and outdated: can fail to alter behaviour and becomes outdated quickly as tech evolves

Consequences of violating an organization’s ethical code

• Professional penalties: disciplinary actions randing from formal warnings to immediate termination

• Legal and regulatory action: lawsuits, financial fines, or sanctions imposed by government authorities

• Reputational damage: severe loss of personal or corporate credibility and market trust

Definition of Acceptable Use Policies (AUP)

An operational policy specifying guidelines for user behavior when accessing technology services

Definition of Intellectual Property (IP)

Intangible creations of the mind — such as inventions, literary/artistic works, designs, symbols, names and images — used in commerce; IP laws protect the results of an idea, not the abstract idea itself

Core rationale for Intellectual Property (IP) Protection

Advocates argue IP protection provides creators and inventors with financial incentives and recognition; without legal protection (“All Rights Reserved”), inventors would lack the motivation to spend time and capital innovating

Scope and duration of copyright protection

Applies to original works (songs, software programs, books, artwork)

Owner rights: control over copying, creating derivative works, public performance, display, and distribution

Process of obtaining copyright in Qatar

Copyright is created automatically upon creation of the work. However, to formalize protection in Qatar, authors register their work with the Copyright Protection Office at the Ministry of Commerce and Industry (MoCI) to obtain an official certificate

Doctrine of fair use

A legal exception allowing limited use of copyrighted material without permission (must be cited)

Four determinants/factors of fair use

1. Purpose and character of use (e.g. teaching vs commercial)

2. Nature of the copyrighted work

3. Amount and sustainability of the portion used

4. Effect of the use on the work’s potential market value

Definition of creative commons

A non-profit providing flexible licensing models that are less restrictive than traditional copyright (e.g. open-source software, open textbooks)

Definition of public domain

Works with expired IP rights or no IP protection; anyone can freely copy, modify, distribute, or build upon them without permission

Patent rights in Qatar

Exclusive government-granted right for an invention (product, process, tech) preventing others from making, using, or selling it

Qatar duration: 20 years (non-extendable)

Requirements in patent rights

1. Novelty: must be completely unique

2. Inventive step: adds significantly to developing the technological ecosystem

3. Industrial applicability: must be practical, not pure theory

Definition of trademarks

A distinctive mark, logo, symbol, phrase, music, or color scheme used by a business to distinguish its goods or services from competitors

Validity and symbols of trademarks

Validity: registration lasts for 10 years

Symbols: TM (Common Law Trademark) or R (Registered Trademark)

Five moral dimensions of social issues in IS

1. Information rights and obligations: individual privacy and personal data control

2. Property rights and obligations: intellectual property protection in digital forms

3. Accountability and control: determining responsiblity for damages caused by IS

4. System quality: standards for data accuracy and system reliability

5. Quality of life: preserving cultural values, employment, and social structures against tech disruption

Definition and examples of Personally Identifiable Information (PII)

Data that can be used directly or indirectly to distinguish or trace a specific individual’s identity

Examples: full name, QID, place of birth, date of birth, medical records

Non-Obvious Relationship Awareness (NORA)

A technology that collates massive amounts of personal data from multiple disparate sources to construct detailed individual profiles and identify hidden connections

Applications of NORA

• Used extensively by government and law enforcement

• Originally developed by casinos

• Commercial use is heavily regulated unless a single company owns all input data sources

Qatar Data Protection Law (Law No. 13 of 2016)

• Qatar was the first GCC nation to enact a comprehensive data protection framework

• Based on the EU’s General Data Protection Regulation (GDPR), the law mandates that individual privacy and personal data protection outweigh commercial business interests (unlike the US model where both hold equal weight)