Ethics, Law, Sustainability and Future Technologies

Introduction

Information technology is no longer confined to technical departments. Digital systems determine access to education, employment, finance, healthcare, public services and political information. Consequently, advanced IT professionals must evaluate not only whether a system works, but also whether it is lawful, fair, secure, accessible, environmentally responsible and socially legitimate.

This chapter examines professional ethics, privacy, intellectual property, cyber law, accessibility, algorithmic bias, responsible artificial intelligence, digital inclusion and sustainable IT. It then considers quantum computing, blockchain, spatial computing and changes in the future workforce. These topics are interconnected: a facial-recognition system, for example, involves data protection, consent, algorithmic fairness, accessibility, cybersecurity, energy consumption and employment consequences simultaneously.

Learning Objectives

By the end of this chapter, students should be able to:

1. Apply ethical theories and professional codes to IT decisions.
2. Distinguish privacy, data protection, confidentiality, security and anonymity.
3. Explain intellectual-property rights and major cyber-law responsibilities.
4. Evaluate accessibility, digital inclusion and algorithmic discrimination.
5. Propose governance controls for responsible AI.
6. Assess the environmental and social sustainability of IT systems.
7. Explain the principles, opportunities and limitations of quantum computing, blockchain and spatial computing.
8. Analyse how emerging technologies influence occupations, skills and professional responsibility.

1. Professional Ethics in Information Technology

Ethics concerns reasoned judgments about what ought to be done. Law establishes enforceable minimum standards; ethics often demands more. An action may be legal but still unethical—for example, collecting excessive personal data under a technically valid consent notice.

Ethical theories and their use

Consequentialism evaluates actions by their outcomes. A data-sharing arrangement may be justified if it produces substantial public benefit, but the analyst must consider foreseeable harms, including discrimination and loss of trust.

Deontology focuses on duties, rights and principles. Under this view, deception, unauthorized access and using people merely as data sources are wrong even if a useful result is obtained.

Virtue ethics asks what a responsible professional would do. Honesty, competence, courage, fairness and accountability are relevant virtues when reporting a security weakness or rejecting unsafe requirements.

Justice and rights-based approaches emphasize fair distribution of benefits and burdens, non-discrimination, autonomy and due process. They are particularly important when automated decisions affect employment, credit, insurance or public services.

A practical ethical decision process is:

1. Identify affected stakeholders, including people who are not customers.
2. Define the factual problem and distinguish facts from assumptions.
3. Identify duties, rights, risks, benefits and relevant professional codes.
4. Generate alternative actions, including doing nothing.
5. Assess proportionality, reversibility, fairness and foreseeable harm.
6. Consult appropriate technical, legal and social experts.
7. Decide, document reasons, implement safeguards and review outcomes.

Professional codes from bodies such as ACM and IEEE commonly emphasize public welfare, avoidance of harm, privacy, competence, honesty, fairness and accountability. Codes do not eliminate judgment; they provide standards against which judgment can be explained.

2. Privacy, Data Protection and Security

Privacy is the ability of individuals or groups to control information about themselves and aspects of their lives. Confidentiality restricts disclosure to authorized parties. Security protects systems and information against unauthorized access, alteration, destruction or disruption. Anonymity means that an identity is not linked to an action or record. These concepts overlap but are not identical.

A sound data-governance programme applies the following principles:

• Purpose limitation: collect and use data for specified legitimate purposes.
• Data minimization: collect only what is necessary.
• Accuracy: provide mechanisms for correction.
• Storage limitation: retain data only for as long as justified.
• Transparency: explain collection, processing, sharing and automated decisions.
• Security: apply controls proportionate to risk.
• Accountability: assign responsibility and retain evidence of compliance.

Privacy impact assessments should be performed before high-risk processing. They should describe the data flow, purpose, legal basis, affected groups, threats, possible harms, mitigations, retention period and residual risk.

A useful risk model is:

Likelihood is the estimated probability or frequency of a harmful event, and impact is the magnitude of resulting harm. The model is a prioritization aid, not an objective measurement of morality. It assumes that likelihood and impact can be estimated on compatible scales. Qualitative categories such as low, medium and high are often more defensible than false numerical precision.

Security controls should be layered. Preventive controls include authentication, least privilege, encryption and secure coding. Detective controls include logging, monitoring and anomaly detection. Corrective controls include backups, incident response and recovery testing. Privacy by design embeds these controls during requirements and architecture rather than after deployment.

3. Intellectual Property and Cyber Law

Intellectual property (IP) law protects different interests:

Software may contain third-party libraries whose licences impose conditions such as attribution, source-code disclosure or restrictions on redistribution. A professional development team should maintain a software bill of materials, review licence compatibility, preserve notices and obtain permission where required. “Open source” does not mean “without obligations.”

Cyber law varies by jurisdiction, but common legal concerns include unauthorized access, unlawful interception, data interference, fraud, identity misuse, harassment, unlawful content, breach notification and misuse of personal data. Cross-border incidents create jurisdictional and evidence challenges. Authorized security testing should have a written scope, approved targets, time limits, methods, reporting obligations and rules for handling discovered data.

Digital evidence must be collected lawfully and preserved with integrity. Investigators should document who acquired the evidence, when, from which system, using what method and how it was stored. Chain-of-custody records support the credibility of evidence.

4. Accessibility and Digital Inclusion

Accessibility means that people with diverse abilities can perceive, understand, navigate and interact with digital services. It includes visual, auditory, physical, speech, cognitive and neurological differences, as well as temporary and situational limitations.

The Web Content Accessibility Guidelines commonly organize accessibility around four principles: content should be perceivable, operable, understandable and robust. Practical measures include:

• keyboard operation for all essential functions;
• meaningful headings, labels and alternative text;
• sufficient colour contrast and non-colour indicators;
• captions and transcripts for multimedia;
• error messages that explain correction;
• predictable navigation and adequate time limits;
• compatibility with screen readers and assistive technologies;
• accessible authentication and document formats.

Accessibility is not achieved by adding a single accessibility plug-in. It requires inclusive research, semantic design, testing with disabled users and procurement requirements. Accessibility also benefits people without disabilities—for example, captions help language learners and users in noisy environments.

Digital inclusion is broader. It concerns affordable connectivity, devices, electricity, digital skills, language, trust, relevant content and support. A government service that is technically accessible but requires expensive broadband and advanced literacy may remain socially exclusionary. Inclusive strategies therefore provide multiple channels, community assistance, offline alternatives and accessible training.

5. Algorithmic Bias and Responsible AI

An algorithm is not automatically neutral. Bias may enter through historical data, sampling, labels, proxy variables, measurement choices, model objectives, deployment context or feedback loops. A system can have high overall accuracy while producing unacceptable error rates for a minority group.

Suppose a classifier produces positive decisions. For group g, the positive predictive value is:

Here, TP is true positives and FP is false positives. The formula is meaningful only when the decision threshold, outcome definition and evaluation population are clearly specified. Comparing PPV across groups assesses one form of predictive fairness; it does not prove that a system is fair overall. Different fairness criteria can conflict, especially where base rates differ.

Important evaluation questions include:

• Who is represented in the training and testing data?
• Are labels valid, necessary and free from institutional bias?
• Which groups experience false positives and false negatives?
• Is the system being used for a purpose different from its original design?
• Can people obtain an explanation, correction or human review?
• What happens when the model is uncertain or data drift occurs?

Responsible AI requires governance throughout the lifecycle:

1. Purpose and impact assessment: define a legitimate, necessary purpose and identify affected communities.
2. Data governance: document provenance, quality, consent, representativeness and retention.
3. Model evaluation: test performance, robustness, subgroup effects, security and accessibility.
4. Human oversight: specify when humans must review, override or stop a system.
5. Transparency: provide understandable information about capabilities and limitations.
6. Monitoring: detect drift, unexpected harms and distributional effects after deployment.
7. Accountability: identify owners, escalation routes, audit records and remedies.

Generative AI introduces additional issues: fabricated outputs, confidential-data leakage, copyright disputes, prompt injection, impersonation, deepfakes and automation bias. Organisations should classify acceptable uses, prohibit entering sensitive information into unapproved tools, verify outputs, disclose synthetic content where appropriate and retain human responsibility for consequential decisions.

6. Sustainable Information Technology

Sustainable IT considers environmental, economic and social effects across the system lifecycle: manufacture, transport, operation, maintenance, reuse and disposal. Impacts include energy use, greenhouse-gas emissions, water consumption, critical-mineral extraction, electronic waste, labour conditions and unequal environmental burdens.

Energy consumed over a period can be estimated as:

where E is energy, P is average power and t is operating time. If power is measured in kilowatts and time in hours, energy is measured in kilowatt-hours. The calculation assumes reasonably stable average power and excludes embodied energy unless it is separately estimated.

For a service, a useful intensity indicator is:

where N is a defined functional unit, such as transactions, users or processed images. Comparisons are valid only when system boundaries, workloads, service quality and measurement methods are comparable.

Sustainable practice includes efficient algorithms, right-sized infrastructure, virtualization, workload scheduling, renewable-energy procurement, device repairability, longer replacement cycles, cloud-region selection, efficient cooling and responsible e-waste processing. Cloud computing can improve utilization, but it does not automatically reduce total environmental impact; rebound effects and increased demand may offset efficiency gains.

Sustainability also involves social questions. A mining operation for device materials may create labour or ecological harms. Automated efficiency programmes may eliminate jobs without retraining. Ethical sustainability therefore uses lifecycle assessment, supplier due diligence, accessibility and just-transition planning rather than focusing only on electricity consumption.

7. Future Technologies

Quantum computing

Classical bits take values 0 or 1. A qubit can exist in a quantum state represented conceptually as a combination of basis states:

The complex amplitudes α and β satisfy:

When measured in this basis, the probabilities of observing 0 and 1 are |α|² and |β|². Superposition alone does not mean that a quantum computer tries every answer and reads all answers simultaneously. Quantum algorithms use interference and entanglement to increase the probability of useful results.

Potential applications include some cryptographic attacks, molecular simulation, optimization and scientific modelling. Current systems face noise, decoherence, limited qubit quality, error-correction overhead and difficult programming models. Organisations should prepare cryptographic inventories and consider migration to post-quantum cryptography, especially for data requiring long-term confidentiality.

Blockchain and distributed ledgers

A blockchain is a replicated ledger in which records are grouped into blocks and linked using cryptographic hashes. Consensus mechanisms determine which state is accepted by participants. Digital signatures support authorization, while hashes help reveal alteration.

Blockchain is useful where several parties need a shared record without a single trusted database operator, and where auditability and tamper evidence matter. It is not automatically private, scalable, energy-efficient or legally final. Public ledgers may expose metadata, transaction fees can vary and immutability can conflict with correction or deletion obligations. A conventional database is often superior when one accountable organisation controls the data.

Spatial computing

Spatial computing combines sensors, computer vision, three-dimensional interfaces, augmented or virtual reality and sometimes digital twins. Applications include industrial maintenance, medical education, design, logistics and remote collaboration. Risks include biometric and location surveillance, motion sickness, exclusion of users with disabilities, physical hazards, manipulation and inappropriate collection of environmental data. Safe design requires clear boundaries, user consent, visible recording indicators, accessible interaction modes and protection from distraction.

8. Future Workforce and Professional Practice

Automation is likely to change tasks more often than it eliminates entire occupations. Routine coding, testing, documentation and analysis may be augmented by AI, while demand grows for systems thinking, domain knowledge, cybersecurity, data stewardship, communication, critical evaluation and ethical reasoning.

Professionals should develop a T-shaped profile: broad awareness across technology, law, society and sustainability, combined with deep expertise in one or more technical domains. Lifelong learning is necessary because tools and regulatory expectations change rapidly. Organisations have corresponding duties: provide reskilling, avoid discriminatory automated management, explain monitoring, preserve meaningful human work and consult affected employees.

Future readiness also requires institutional capability. A technically skilled employee cannot compensate for absent governance, unrealistic deadlines or incentives that reward unsafe deployment. Leadership should establish escalation channels, independent review, incident learning and measurable responsibility.

Applied Case: Illustrative Public Benefits Platform

Background

A regional authority plans an AI-assisted platform to identify households likely to qualify for housing support. The system will combine application data, public records and historical case outcomes.

Problem

Historical decisions reflect unequal access to services. Some communities have incomplete records, and applicants may lack reliable internet access. The authority proposes automatic rejection of low-scoring applications to reduce administrative cost.

Analysis

The proposal creates risks of proxy discrimination, privacy intrusion, inaccurate labels, exclusion of digitally disadvantaged residents and lack of due process. It also raises retention, lawful-processing, security and accessibility questions. Cost reduction alone is not a sufficient justification for a high-impact automated decision.

Approach and solution

The authority should first conduct an impact assessment and consult applicants, disability groups, caseworkers and privacy specialists. The model should assist prioritization rather than automatically reject people. Applicants must retain non-digital application routes, receive understandable reasons, correct inaccurate data and obtain timely human review. Data should be minimized, access-controlled and retained according to a documented schedule. Evaluation should report error rates by relevant groups, monitor outcomes after deployment and suspend the model if material harm appears. Procurement should require model documentation, audit access, incident reporting and an exit plan.

Outcome

The revised system reduces routine workload while preserving human judgment and appeal rights. It also reveals that some apparent “risk” indicators merely measure prior administrative contact, so several variables are removed. The authority publishes performance and fairness information in an accessible format.

Learning points

The case demonstrates that responsible innovation is not simply a technical accuracy exercise. Purpose, data quality, institutional history, accessibility, procedural fairness and accountability determine whether deployment is legitimate. Sometimes the ethical solution is to narrow the system’s purpose rather than improve the model.

Challenges and Limitations

Ethical assessment is difficult because values conflict. Privacy may reduce data availability; transparency may expose security details; sustainability may conflict with performance; fairness criteria may be mathematically incompatible; and innovation may move faster than legislation. International operations add different legal norms and enforcement regimes.

Risk assessments can also become paperwork exercises. Checklists are useful only when decision-makers have authority, affected communities participate and findings can change the project. Certification does not guarantee ethical conduct, and an explanation that is technically accurate may still be incomprehensible to a person affected by a decision.

Best-Practice Checklist

• Define a legitimate purpose before selecting technology.
• Map stakeholders, data flows, dependencies and possible harms.
• Use privacy, security, accessibility and sustainability by design.
• Test systems with representative users and affected communities.
• Document assumptions, limitations, decisions and residual risks.
• Provide human review, correction, appeal and remedy for high-impact decisions.
• Monitor deployed systems for drift, bias, incidents and environmental impact.
• Maintain licence records, evidence trails and supplier accountability.
• Train staff to challenge unsafe or unlawful requirements.
• Retire systems responsibly and preserve lessons learned.

Chapter Summary

Advanced IT professionals must combine technical competence with ethical judgment, legal awareness and social responsibility. Privacy requires purposeful collection, minimization, transparency, security and accountability. Intellectual-property and cyber-law obligations affect software development, licensing, security testing and evidence handling. Accessibility and digital inclusion require both inclusive design and attention to affordability, skills and alternative channels.

Algorithmic bias can arise at every stage of an AI lifecycle, and responsible AI requires impact assessment, quality data, subgroup evaluation, human oversight, transparency, monitoring and remedy. Sustainable IT evaluates energy, materials, emissions, labour and e-waste across the lifecycle. Quantum computing may transform selected problems but remains constrained by noise and error correction; blockchain provides shared tamper-evident records but is not a universal database; and spatial computing creates useful immersive applications alongside privacy and safety risks. Future professionals need technical depth, interdisciplinary understanding, lifelong learning and the courage to place public welfare above unsafe deployment.

Key Terms

Professional ethics: Reasoned principles guiding responsible professional conduct.

Privacy: Control over personal information and personal life.

Confidentiality: Restriction of information disclosure to authorized parties.

Data minimization: Collection and retention of only necessary data.

Privacy by design: Embedding privacy protections throughout system development.

Intellectual property: Legal rights protecting creations, inventions, identifiers or confidential knowledge.

Copyright: Protection for original expressive works, including software code.

Trade secret: Confidential information protected through secrecy and controls.

Cyber law: Laws governing digital systems, networks, data and online conduct.

Accessibility: Ability of diverse users to perceive and operate a system.

Digital inclusion: Meaningful access to devices, connectivity, skills and relevant services.

Algorithmic bias: Systematic unfairness introduced through data, models or deployment.

Responsible AI: Governance and design practices that promote safe, fair and accountable AI.

Human oversight: Meaningful human ability to review, intervene in or stop an automated system.

Sustainable IT: Environmentally and socially responsible technology across its lifecycle.

Quantum computing: Computing using quantum states, measurement and interference.

Blockchain: A linked, replicated ledger maintained through cryptographic and consensus techniques.

Spatial computing: Interaction with digital information through spatial sensing and three-dimensional environments.

Digital divide: Unequal access to digital technologies and the benefits they provide.

Review Questions

Short Answer Questions

1. How does professional ethics differ from legal compliance?
2. Distinguish privacy, confidentiality and security.
3. What is the purpose of data minimization?
4. Identify four practical accessibility requirements for a web service.
5. Why is a blockchain not automatically a suitable replacement for a database?

Long Answer Questions

1. Explain how consequentialist, deontological and virtue-ethics approaches could produce different judgments about deploying facial recognition.
2. Describe a complete governance lifecycle for a high-impact AI system.
3. Discuss the relationship between accessibility and digital inclusion.
4. Evaluate environmental and social dimensions of sustainable IT.
5. Compare quantum computing, blockchain and spatial computing in terms of opportunities, limitations and governance risks.

Analytical / Application Questions

1. A university wants to use student activity data to predict dropout risk. Design a privacy, fairness and human-oversight assessment before deployment.
2. A company discovers that its automated recruitment tool rejects applicants with disabilities at a higher rate. Analyse possible causes and propose immediate and long-term actions.
3. An organisation is choosing between a blockchain network and a conventional database for inter-company records. Develop decision criteria and justify when each architecture would be appropriate.

Multiple Choice Questions with Answers

Question 1

Which principle requires an organisation to collect only data necessary for a specified purpose?

A. Data minimization

B. Complete anonymity

C. Maximum retention

D. Open access

Correct Answer: A. Data minimization

Question 2

Which intellectual-property right most directly protects original software source code?

A. Patent

B. Copyright

C. Trademark

D. Trade secret only

Correct Answer: B. Copyright

Question 3

In the risk expression Risk = Likelihood × Impact, impact represents:

A. The number of system users

B. The magnitude of harm if the event occurs

C. The age of the software

D. The encryption key length

Correct Answer: B. The magnitude of harm if the event occurs

Question 4

Which action best supports accessibility?

A. Using colour alone to indicate errors

B. Requiring mouse-only navigation

C. Providing keyboard access and meaningful labels

D. Removing captions from videos

Correct Answer: C. Providing keyboard access and meaningful labels

Question 5

A false positive in a classification system occurs when the system:

A. Correctly identifies a positive case

B. Correctly identifies a negative case

C. Predicts positive when the actual condition is negative

D. Predicts negative when the actual condition is positive

Correct Answer: C. Predicts positive when the actual condition is negative

Question 6

Which practice is most consistent with responsible AI?

A. Deploying without monitoring after launch

B. Allowing automatic rejection with no appeal

C. Testing subgroup performance and providing human review

D. Using any publicly available data without assessment

Correct Answer: C. Testing subgroup performance and providing human review

Question 7

If a device operates at 0.2 kW for 5 hours, its operating energy is:

A. 0.04 kWh

B. 1 kWh

C. 5.2 kWh

D. 25 kWh

Correct Answer: B. 1 kWh

Question 8

What is a major current limitation of quantum computing?

A. It cannot represent binary information

B. Quantum states are affected by noise and decoherence

C. It never requires specialized hardware

D. It has already replaced conventional computing

Correct Answer: B. Quantum states are affected by noise and decoherence

Question 9

Which feature is central to a blockchain?

A. A single unchangeable password

B. A replicated, cryptographically linked ledger

C. Guaranteed anonymity for every participant

D. Unlimited transaction capacity

Correct Answer: B. A replicated, cryptographically linked ledger

Question 10

Digital inclusion is best understood as:

A. Providing devices without training or connectivity

B. Restricting services to expert users

C. Ensuring meaningful access, affordability, skills and relevant support

D. Replacing all human service channels with apps

Correct Answer: C. Ensuring meaningful access, affordability, skills and relevant support