Ethics and privacy issues in IT
IT ethics are moral rules for using computers fairly; key issues include privacy, software piracy, intellectual property, accuracy, and acceptable use at work.
Main ethical issues (Mason's PAPA, plus acceptable use)
| Issue | What it means | Business example |
|---|---|---|
| Privacy | What personal data may be collected, used or shared | Selling a customer list without consent |
| Accuracy | Who is responsible for correct data and information | A wrong credit record that blocks a loan |
| Property | Who owns software, designs and information; piracy | Using unlicensed copies of software |
| Accessibility | Who may access information and technology; the digital divide | Rural customers without internet access |
| Acceptable use at work | Using office systems only for proper purposes; employee monitoring | Sending offensive emails from a work account |
Privacy issues for business
- Collecting more customer data than needed.
- Selling or sharing data without consent.
- Cookies and online tracking of browsing habits.
- CCTV and monitoring of employees' email and internet use.
- Data leaks caused by weak security.
- Marketing messages sent to people who never agreed.
Good privacy practice
- Tell people what data you collect and why.
- Get consent and use the data only for that purpose.
- Collect only what you need and keep it accurate.
- Protect it with security safeguards.
- Let people see and correct their data.
- Delete it when it is no longer needed.
Sri Lankan laws to know
| Law | What it covers |
|---|---|
| Computer Crime Act No. 24 of 2007 | Makes hacking, unauthorised access and other computer-related acts criminal offences |
| Electronic Transactions Act No. 19 of 2006 | Gives legal recognition to electronic documents and electronic signatures |
| Intellectual Property Act No. 36 of 2003 | Protects copyright, including computer software |
| Personal Data Protection Act No. 9 of 2022 | Sets rules for how organisations collect, use and protect personal data; it is being brought into force in stages |
Codes of conduct
Many organisations ask staff to sign an IT code of conduct or acceptable use policy: use systems only for work, never install unlicensed software, keep passwords secret, and respect other people's data and privacy. Ethics asks what is right, even where the law is silent.
Sri Lanka's Personal Data Protection Act No. 9 of 2022, which is being brought into force in stages, requires a telco, bank or retailer to handle customers' personal data lawfully and only for stated purposes, and using pirated software breaches copyright protected by the Intellectual Property Act No. 36 of 2003.
Short answer: “What is software piracy?” Copying, using or distributing software without a valid licence from its owner.
Structured question: “Explain the privacy issues a business faces when collecting customer data.” Over-collection, sharing without consent, tracking, employee monitoring, leaks; then good practice: notice, consent, minimum data, security, access, deletion.
Essay: “Discuss the ethical and privacy issues in using information technology in business.” Define ethics, use PAPA (privacy, accuracy, property, accessibility), add acceptable use and monitoring, Sri Lankan laws and good practice.
Ethical issues = PAPA (Mason, 1986): Privacy, Accuracy, Property, Accessibility. Add acceptable use at work.