Catalog
concept#Governance#Software Engineering#Architecture#Security

Computer Ethics

Guiding principles and norms for ethical action in the design, deployment, and operation of computing systems.

Computer ethics examines moral principles, norms, and responsibilities in the design, deployment, and operation of computing systems.
Established
Medium

Classification

  • Medium
  • Organizational
  • Organizational
  • Intermediate

Technical context

Compliance management systemsIncident response and reporting toolsTraining and LMS platforms

Principles & goals

Privacy protection and data minimizationTransparency and explainability of decisionsResponsibility and accountability for systems and decisions
Discovery
Enterprise, Domain, Team

Use cases & scenarios

Compromises

  • Greenwashing or symbolic measures without impact
  • Over-bureaucratization stifles innovation and speed
  • Unclear responsibilities lead to loss of control
  • Embed ethics early in requirements and architecture
  • Establish interdisciplinary review boards
  • Maintain transparent documentation of decisions

I/O & resources

  • Legal and regulatory requirements
  • Technical system and data overview
  • Stakeholder and user perspectives
  • Ethics policies, checklists and review protocols
  • Risk assessments and remediation plans
  • Training materials and communication plans

Description

Computer ethics examines moral principles, norms, and responsibilities in the design, deployment, and operation of computing systems. It integrates legal, social, and technical perspectives to address privacy, fairness, accountability, and safety. It is relevant for developers, architects, managers, and public policy.

✔

  • Reduces legal and reputational risks
  • Improves user trust and acceptance
  • Facilitates compliance and regulatory demonstrability

✖

  • Not all ethical dilemmas can be solved technically
  • Conflicts between stakeholder interests are hard to reconcile
  • Legal frameworks vary widely across jurisdictions

  • Policy adherence rate

    Percentage of projects complying with internal ethics policies.

  • Number of reported ethics incidents

    Number of reported incidents per quarter to gauge effectiveness.

  • Average response time

    Time from incident occurrence to initiation of mitigations.

ACM Code of Ethics as a guide

Adoption of ACM principles to guide development decisions.

Data protection impact assessment

Carrying out a DPIA for a new analytics system.

Ethics review for user research

Internal ethics committee reviews study design and consent forms.

1

Perform initial inventory and stakeholder analysis

2

Adapt ethical principles and formulate concrete policies

3

Establish review processes, responsibilities and escalation paths

4

Conduct trainings and set up communication channels

5

Implement monitoring and periodically review policies

⚠️ Technical debt & bottlenecks

  • Missing data provenance documentation
  • Insufficient monitoring and audit mechanisms
  • Legacy systems lacking privacy or governance features
Legal uncertaintyResources and budgetComplexity of interdisciplinary coordination
  • Selective compliance: applying policies only to PR-relevant projects
  • Vague policies without enforcement mechanisms
  • Use of ethics labels to obscure problematic practices
  • Too broad principles without concrete implementation rules
  • Overfocus on single technologies instead of processes
  • Ignoring cultural and local contexts
Basic data protection law knowledgeAbility to moderate interdisciplinary discussionsTechnical understanding of data flows
Transparency requirementsPrivacy and legal certaintyTraceability of decisions
  • • Divergent national legal frameworks
  • • Limited personnel capacity for reviews
  • • Conflicting business objectives