Chapter 13: Research Ethics, Privacy, Security, and Governance

1. Introduction

Information technology research increasingly operates on data, platforms, algorithms, networks, and intelligent systems that affect individuals, organizations, and societies. Research may involve personal records, behavioral traces, biometric identifiers, workplace monitoring, artificial intelligence, cybersecurity testing, or cross-border cloud infrastructures. These activities create significant opportunities for knowledge and innovation, but they also create risks. A technically valid study may still be unacceptable if participants are deceived without justification, confidential data are exposed, an algorithm discriminates against a group, or research outputs enable harmful surveillance.

Research ethics provides principles for deciding what ought to be done in the production and application of knowledge. Privacy protects individuals and groups from inappropriate collection, use, disclosure, or inference concerning personal information. Security protects information systems and data against unauthorized access, alteration, loss, or disruption. Governance establishes the structures, responsibilities, controls, and accountability mechanisms through which research is authorized and supervised.

At doctoral level, ethics is not merely a form to complete before data collection. It is a continuing design responsibility. Ethical decisions should influence the research question, sampling strategy, consent process, data architecture, analysis, publication, technology transfer, and eventual deployment. This chapter examines the principles and methods required to conduct responsible IT research in environments characterized by automation, interconnectedness, uncertainty, and global regulation.

2. Learning Objectives

After studying this chapter, readers should be able to:

1. Explain the relationship among research ethics, privacy, security, and governance.

2. Apply informed-consent principles to digital and technology-mediated research.

3. Identify ethical issues affecting vulnerable populations and surveillance studies.

4. Design proportionate controls for cybersecurity, data protection, and intellectual property.

5. Evaluate algorithmic fairness and the responsibilities associated with responsible AI.

6. Prepare research for institutional review and continuing oversight.

7. Analyze ethical and legal challenges in cross-border data governance.

8. Develop a practical governance framework for doctoral research projects.

9. Balance scientific value, participant welfare, social benefit, and institutional accountability.

3. Meaning and Concept

Research ethics is the systematic application of moral principles to the planning, conduct, evaluation, and communication of research. It concerns both the treatment of participants and the integrity of the research process. Fabricating data, manipulating results, concealing conflicts of interest, or misappropriating another researcher’s work are ethical violations even when no participant is directly involved.

Privacy is the capacity of persons or groups to control access to information about themselves and to maintain appropriate boundaries. Privacy is broader than confidentiality. Confidentiality is a duty to protect information entrusted by a participant, whereas privacy concerns the conditions under which information is observed, collected, inferred, used, and shared. For example, a researcher may obtain publicly visible social-media data, yet analysis of those data may still intrude on contextual privacy if users did not reasonably expect their posts to be aggregated and profiled.

Information security consists of technical, organizational, and physical safeguards that preserve confidentiality, integrity, and availability. Confidentiality prevents unauthorized disclosure; integrity protects accuracy and prevents unauthorized modification; availability ensures that authorized users can access systems and data when needed. Security is therefore a component of ethical research, not a substitute for it. A perfectly encrypted database can still contain data collected without valid consent.

Governance refers to the allocation of authority, responsibility, oversight, and accountability. Research governance includes institutional review boards or research ethics committees, data-management policies, security controls, audit procedures, publication rules, conflict-of-interest processes, and mechanisms for responding to complaints or unexpected harms. Good governance converts abstract principles into decisions, roles, documentation, and enforceable controls.

4. Fundamental Principles

Respect for persons and autonomy

Individuals should be treated as capable decision makers unless circumstances justify additional protection. Autonomy requires understandable information, voluntary participation, and freedom to refuse or withdraw. Digital interfaces should not hide consent choices in complex menus or use manipulative defaults. Where autonomy is limited, researchers must use legally and ethically appropriate representatives and additional safeguards.

Beneficence and non-maleficence

Researchers should maximize potential benefits and minimize foreseeable harms. Harm may be physical, psychological, social, economic, legal, reputational, or informational. A study that exposes a participant’s immigration status, health condition, political activity, or security vulnerability can cause serious harm even if no physical intervention occurs.

Justice and fairness

The burdens and benefits of research should be distributed fairly. Researchers should not recruit disadvantaged populations merely because they are accessible, inexpensive, or less able to refuse. Conversely, excluding groups from research can produce systems that fail them. Justice therefore requires both fair recruitment and attention to representativeness.

Respect for privacy and confidentiality

Researchers should collect only information justified by the research purpose, explain intended uses, restrict access, and prevent unauthorized disclosure. De-identification reduces risk but does not guarantee anonymity, particularly when datasets can be linked or when machine-learning models enable inference.

Scientific and professional integrity

Research must be honest, transparent, reproducible where appropriate, and methodologically defensible. Selective reporting, p-hacking, undisclosed data manipulation, plagiarism, and false claims undermine public trust. Ethical integrity also requires acknowledging uncertainty and limitations.

Accountability and transparency

Researchers and institutions should be able to explain who made important decisions, what evidence supported them, and how harms will be addressed. Transparency must be balanced against privacy, security, intellectual property, and legitimate confidentiality requirements.

Proportionality and necessity

The level of intrusion and control should be proportionate to the research purpose and risk. Researchers should ask whether a less intrusive dataset, less invasive method, or smaller sample could answer the question. Necessity is especially important in surveillance, biometric, and security research.

5. Major Components / Elements

Informed consent

Informed consent is an ongoing communication process rather than a signature. Participants should understand the purpose of the study, procedures, duration, foreseeable risks and benefits, data uses, storage arrangements, withdrawal conditions, compensation, contacts, and complaints process. Consent materials should use accessible language and should distinguish research from ordinary service provision. In online research, consent may involve a digital form, but the researcher must still verify comprehension and avoid treating a click as sufficient for complex or high-risk studies.

Consent can be explicit, implied, broad, or specific depending on context and applicable rules. Broad consent may permit future research under defined governance conditions, but it should not become unlimited permission. Withdrawal must be explained realistically: data already incorporated into aggregated results may not be removable, while identifiable records may be deleted when feasible.

Vulnerable populations

Vulnerability may arise from age, disability, illness, poverty, dependency, incarceration, displacement, limited literacy, language barriers, institutional power relationships, or technological exclusion. Vulnerability is contextual rather than a permanent characteristic. Employees recruited by their managers, for example, may feel unable to decline even if they are adults.

Research involving vulnerable populations should demonstrate scientific necessity, minimize burden, use accessible materials, provide additional consent protections, and avoid undue inducement. Researchers should engage community representatives without allowing gatekeepers to replace individual consent. Benefits should be shared fairly, and findings should not stigmatize the population.

Surveillance and monitoring

Surveillance research examines the observation or tracking of people, activities, communications, or locations. It may support public safety or cybersecurity, but it can chill expression, normalize intrusive monitoring, and create power asymmetries. Ethical assessment should consider purpose limitation, proportionality, transparency, retention, function creep, false positives, and opportunities for review or appeal.

The fact that data are technically observable does not automatically make their collection ethical. Researchers should distinguish public accessibility from informed expectation. Covert observation requires strong justification, minimal intrusion, and appropriate debriefing where feasible.

Cybersecurity and responsible disclosure

Security research may require penetration testing, malware analysis, vulnerability discovery, or experiments involving deception. Researchers must define authorization boundaries, isolate test environments, protect exploit details, and establish an incident-response plan. Vulnerabilities should ordinarily be reported responsibly to affected parties before public disclosure, while considering risks of vendor inaction and public safety.

Security controls should include least privilege, authentication, encryption, secure backups, logging, patch management, access reviews, and tested recovery procedures. A data-management plan should identify sensitive assets, threat actors, attack surfaces, retention periods, and destruction methods.

Intellectual property and research integrity

IT research may produce software, datasets, models, designs, patents, documentation, or research instruments. Ownership and licensing should be clarified before collaboration begins. Researchers must respect copyright, database rights, patents, trade secrets, open-source licenses, and contractual restrictions. Using an open-source component may impose attribution or source-disclosure obligations.

Authorship should reflect substantial intellectual contribution rather than status or funding power. Contributors who do not meet authorship criteria should receive acknowledgment where appropriate. Conflicts of interest, including commercial sponsorship and ownership of a technology being evaluated, should be disclosed and managed.

Data protection and lifecycle management

Data protection covers collection, classification, storage, access, use, sharing, retention, and destruction. A lifecycle approach begins with data minimization and purpose specification, continues through secure processing and controlled sharing, and ends with verified deletion or archival under approved conditions.

Researchers should separate direct identifiers from research data, use coded identifiers, maintain a key under restricted access, apply retention limits, and document lawful and ethical bases for processing. Privacy impact assessments are useful when processing is large-scale, sensitive, innovative, or likely to affect individuals significantly.

Algorithmic fairness and responsible AI

Algorithms can reproduce historical discrimination, amplify unequal representation, or create new forms of exclusion. Fairness assessment should examine the entire system: problem definition, data collection, labeling, feature selection, model design, threshold setting, deployment context, and monitoring. A model can satisfy one statistical fairness criterion while violating another because fairness measures may conflict.

Responsible AI requires human oversight, explainability appropriate to the audience, contestability, safety, robustness, privacy protection, accountability, and monitoring after deployment. Researchers should not claim that a model is objective merely because it is automated. They should document intended use, prohibited use, known limitations, subgroup performance, uncertainty, and procedures for correction.

Institutional review

Institutional review boards, research ethics committees, or equivalent bodies assess risks, consent, privacy, participant selection, compensation, security, and researcher qualifications. Review may be exempt, expedited, or full depending on risk and jurisdiction. Exemption does not mean that ethical obligations disappear. Amendments, adverse events, protocol deviations, and continuing review may require notification.

6. Process / Framework / Methodology

A practical ethics and governance process can be organized into ten stages.

Stage 1: Define the purpose and public value. State the research question, expected contribution, affected communities, and reasons the study is necessary. Reject objectives that are vague, excessively intrusive, or unsupported by credible benefit.

Stage 2: Map stakeholders and impacts. Identify participants, non-participants, data subjects, institutions, employees, communities, downstream users, and potentially affected groups. Consider direct, indirect, cumulative, and delayed harms.

Stage 3: Classify data and systems. Determine whether information includes direct identifiers, quasi-identifiers, sensitive attributes, location, biometrics, health information, credentials, proprietary code, or security vulnerabilities. Classify systems according to criticality and impact.

Stage 4: Conduct risk assessment. Estimate likelihood and severity of harms, taking account of re-identification, unauthorized access, discrimination, coercion, misuse, and operational failure. Document assumptions and residual risk.

Stage 5: Apply minimization and alternatives. Reduce sample size, data fields, retention, access, and identifiability wherever possible. Consider synthetic data, aggregation, secure enclaves, simulation, or federated analysis.

Stage 6: Design consent and participant protections. Prepare accessible information sheets, consent procedures, withdrawal mechanisms, compensation rules, safeguarding procedures, and contacts for concerns. Build accommodations for language, disability, and low digital literacy.

Stage 7: Design security and governance controls. Assign data stewards, define access roles, encrypt sensitive data, log activity, establish backup and deletion procedures, and specify incident escalation. Create agreements for collaborators and processors.

Stage 8: Obtain review and authorization. Submit the protocol, instruments, recruitment materials, data-management plan, security plan, funding disclosures, and relevant permissions to the proper authorities.

Stage 9: Monitor and document. Record consent, access, deviations, incidents, complaints, changes in risk, and decisions. Reassess the study when methods, data sources, or contexts change.

Stage 10: Close, publish, and learn. Retain or destroy data according to the approved plan, communicate results responsibly, avoid re-identification in examples, share code or data only when safe, and conduct a post-study review.

A useful governance matrix assigns each risk an owner, control, evidence of implementation, review frequency, and escalation route. This makes ethics operational rather than aspirational.

7. Important Theories and Models

The principles-based approach commonly emphasizes respect for persons, beneficence, and justice. It is useful for ethical review because it identifies duties that apply across research designs. However, principles may conflict; for example, open data may advance scientific benefit while threatening privacy.

A consequentialist approach evaluates likely outcomes, including benefits and harms. It is helpful in assessing public-interest research and emergency security studies, but predicted benefits should not be used to ignore individual rights.

A deontological approach emphasizes duties and constraints, such as the duty not to deceive or disclose confidential data without authorization. It protects fundamental rights but may provide limited guidance when duties conflict.

Virtue ethics focuses on the character of the researcher and institution. Honesty, humility, courage, fairness, and responsibility are important because not every situation can be resolved through a checklist.

The privacy-by-design model embeds privacy into systems from the beginning rather than adding controls after development. Its practices include proactive prevention, default protection, full functionality, lifecycle security, visibility, and respect for user interests.

The NIST-style risk-management perspective organizes governance around identifying, protecting, detecting, responding, and recovering. Although developed for cybersecurity contexts, this logic can support research-data governance. Fairness models such as equal opportunity, demographic parity, and individual fairness provide analytical tools, but none is universally correct; the selected criterion must reflect the social and institutional context.

8. Practical Applications

In a usability study of a health application, researchers should obtain consent for both participation and any secondary use of health-related data. They should collect only necessary fields, separate identity from performance data, and ensure that participants do not believe participation affects their clinical care.

In workplace analytics, employees may be formally free to refuse but practically pressured by managers. Researchers should use independent recruitment, avoid providing individual performance reports to supervisors, aggregate results, and explain whether participation affects employment.

In cybersecurity research, a university team discovering a vulnerability in a public service should document authorization, notify the organization through a secure channel, allow reasonable remediation time, and coordinate publication so that research transparency does not create an immediate attack opportunity.

In AI research, a doctoral candidate developing a recruitment model should inspect subgroup representation, test error rates across relevant groups, evaluate proxy variables, document limitations, and provide a human review path. Accuracy alone is not an adequate ethical assessment.

9. Examples

A researcher scrapes public comments from a support forum and publishes quotations. Although the comments are public, exact quotations may be searchable and re-identify authors. Ethical practice would paraphrase, remove unnecessary details, seek consent for sensitive material, and assess contextual expectations.

A university collects Wi-Fi location data to study campus movement. The study should use aggregation or privacy-preserving transformations, define retention limits, restrict access, and avoid using the dataset for disciplinary or unrelated monitoring.

A research group trains a facial-recognition model using images gathered from multiple countries. It must examine consent and licensing, demographic performance, biometric sensitivity, cross-border transfer rules, potential misuse, and whether the research benefit justifies creating the capability.

10. Technology and Digital Applications

Relevant technologies can strengthen governance when appropriately designed. Encryption protects data at rest and in transit, while pseudonymization separates identity from analytical records. Role-based or attribute-based access controls limit data use according to responsibilities. Multi-factor authentication reduces the risk of compromised credentials.

Audit logs and tamper-evident records support accountability by showing who accessed or changed data. Data-loss prevention tools can detect unauthorized transfers. Secure research environments or trusted research enclaves permit analysis without allowing unrestricted copying. Differential privacy adds carefully calibrated statistical noise to reduce disclosure risk in published outputs. Federated learning can allow models to be trained across distributed data without centralizing raw records, although model updates may still leak information and require protection.

Synthetic data may reduce exposure but can reproduce biases or leak characteristics of the source data. Explainability tools can help identify influential variables and support review, but an explanation is not automatically accurate or sufficient for contestability. Automated governance tools should therefore complement, not replace, human judgment and institutional oversight.

11. Strategic / Managerial Importance

Ethical governance is strategically important because trust affects participation, funding, adoption, partnerships, and institutional legitimacy. A privacy incident can create legal penalties, operational disruption, reputational damage, and long-term reluctance to participate in research. Conversely, strong governance can become a competitive advantage by demonstrating reliability to regulators, clients, and communities.

Managers should establish clear accountability rather than treating ethics as the sole responsibility of researchers or compliance staff. They should fund security, appoint data protection and security leaders, provide training, maintain incident-response capabilities, and reward responsible reporting of problems. Governance should be integrated with project management, procurement, enterprise risk management, and quality assurance.

At portfolio level, leaders should assess whether research capabilities align with institutional values and public obligations. High-risk projects require stronger independent review, staged deployment, monitoring, and exit criteria. Strategic decisions should consider not only whether a technology can be built, but whether it should be built, for whom, under what conditions, and with what safeguards.

12. Detailed Case Study

The following is a fictional illustrative case.

Background

Northbridge University partnered with a metropolitan transport authority to study passenger flows and improve accessibility. The project proposed combining Wi-Fi connection records, smart-card transactions, station cameras, and mobile-app data. A machine-learning model would predict congestion and identify stations requiring additional support.

Problem

The project team initially planned to retain raw location records for five years and provide dashboards to transport managers. The protocol described the data as anonymous because names were not included. Disability advocates raised concerns that travel patterns could reveal medical appointments or visits to support centers. Security staff also warned that the combined dataset could be re-identified.

Analysis

The project had legitimate public value, but its data minimization was weak. Combining several quasi-identifiers increased re-identification risk. Long retention created opportunities for function creep. The dashboard could also lead managers to treat predictions as facts, potentially directing resources away from less visible communities. Because the transport authority was a powerful service provider, consent could not simply be assumed from passengers’ use of the network.

Strategy / Solution

The university and authority established a joint governance committee with an independent community representative. The team redesigned the study to use aggregated station-time cells, removed unnecessary fields, and retained raw data only in a restricted secure environment for a short validation period. A privacy impact assessment and security threat model were completed. Access was role-based and logged, and outputs were reviewed for small-cell disclosure.

The team published a plain-language notice describing the study and created a public feedback channel. Researchers tested model performance across neighborhoods and accessibility-relevant contexts, documented uncertainty, and prohibited individual tracking or disciplinary use. The agreement specified permitted purposes, deletion dates, breach notification duties, publication review, and independent audit. A human review process was added before operational decisions were made.

Outcome

The revised project produced useful congestion estimates while substantially reducing individual-level exposure. Community concerns were incorporated into the design, and the authority adopted the controls for future analytics projects. The model was not deployed at stations where validation evidence was insufficient. The project took longer and required additional funding, but it avoided a high-risk database and gained broader institutional support.

Learning Points

1. Public benefit does not eliminate privacy obligations.

2. “Anonymous” should not be claimed without a realistic re-identification assessment.

3. Data minimization and purpose limitation should shape the research design from the beginning.

4. Community participation can identify harms missed by technical teams.

5. Governance agreements must address access, retention, permitted use, incidents, and accountability.

6. Responsible deployment includes monitoring and the possibility of refusing or withdrawing a model.

13. Advantages / Benefits

Ethically governed research improves participant protection, data quality, institutional credibility, and research sustainability. Clear consent and communication can improve recruitment and reduce later disputes. Strong security reduces the likelihood and impact of breaches. Fairness evaluation can reveal measurement errors and improve system performance for underserved groups. Transparent governance supports collaboration by clarifying ownership, responsibilities, and permitted uses. Responsible practices also improve the prospects of regulatory approval, commercialization, publication, and public adoption.

14. Limitations / Challenges

Ethical governance can increase cost, delay, and administrative workload. Some risks cannot be predicted, especially when data are combined or technologies are repurposed. Anonymization may be fragile, fairness measures may conflict, and consent may be difficult in large-scale observational research. Institutional review can become bureaucratic if reduced to documentation rather than substantive reflection. Cross-border projects face inconsistent laws, languages, enforcement practices, and cultural expectations. Excessive restriction may also prevent valuable research or exclude populations from studies. These challenges require proportionality, expertise, periodic reassessment, and dialogue rather than simplistic rules.

15. Ethical and Governance Considerations

Research governance should identify decision rights and escalation routes. A principal investigator is accountable for scientific and ethical conduct, but responsibility is shared with supervisors, data stewards, security personnel, sponsors, institutions, vendors, and publication partners. Contracts should specify data ownership, processing roles, breach duties, audit rights, subcontracting, intellectual property, and deletion.

Cross-border data governance requires attention to where data are collected, stored, accessed, analyzed, and transferred. Researchers should determine applicable privacy laws, sector rules, contractual obligations, localization requirements, and approved transfer mechanisms. A transfer that is lawful in one jurisdiction may be restricted in another. Data protection impact assessments, standard contractual provisions where applicable, adequacy arrangements, encryption, local processing, and access controls may reduce risk, but legal advice is often necessary.

Governance must also address power. Participants may not understand technical systems, and communities may have little influence over research decisions. Meaningful accountability includes accessible explanations, complaint channels, correction procedures, independent review, and remedies. Ethical oversight should consider environmental effects, labor conditions in data labeling, accessibility, cultural knowledge, and the possibility that research outputs will be weaponized.

16. Current and Emerging Trends

Privacy-enhancing computation, including federated learning, secure multiparty computation, homomorphic encryption, and trusted execution environments, is expanding the possibility of analysis without unrestricted disclosure of raw data. These methods are promising but technically complex and not risk-free.

Generative AI creates new concerns involving training-data provenance, confidential prompts, synthetic identities, hallucinated outputs, authorship, deepfakes, and automated decision-making. Research teams increasingly need model cards, data statements, red-team testing, provenance records, and post-deployment monitoring.

Regulation is moving toward risk-based governance of high-impact AI, stronger individual rights, breach notification, algorithmic accountability, and restrictions on sensitive biometric or surveillance applications. Researchers must monitor changing requirements rather than relying on a single compliance assessment.

Community-led and participatory governance is also becoming more important. Indigenous data governance, data trusts, public involvement, and collective privacy recognize that data can affect groups even when individual consent is obtained. Finally, reproducibility initiatives are encouraging controlled openness: sharing methods and code where safe while withholding sensitive data or exploit details.

17. Best Practices

1. Begin ethical analysis during research-question formation.

2. Use a documented risk and privacy impact assessment.

3. Collect the minimum data necessary for the stated purpose.

4. Use clear, accessible, and genuinely voluntary consent procedures.

5. Provide additional protections for vulnerable participants.

6. Treat public data as potentially sensitive when aggregated or inferred.

7. Separate identifiers, restrict access, encrypt sensitive information, and log use.

8. Establish retention and secure-destruction schedules.

9. Test algorithms across relevant groups and document limitations.

10. Provide human oversight, appeal, and correction mechanisms for high-impact systems.

11. Define intellectual-property, authorship, licensing, and disclosure rules early.

12. Obtain institutional review and report changes or incidents promptly.

13. Use responsible disclosure in cybersecurity research.

14. Include community and stakeholder perspectives, especially where power is unequal.

15. Reassess risks throughout the research lifecycle and after deployment.

16. Publish responsibly without enabling re-identification or misuse.

18. Future Scope

Future research will need to address privacy in increasingly sensor-rich environments, ethical implications of autonomous systems, collective and group privacy, quantum-era security, and governance of foundation models. New methods may enable useful analysis over encrypted or decentralized data, but technical safeguards will need to be combined with institutional accountability. Researchers should investigate how to measure social harms, evaluate long-term effects, design effective remedies, and include marginalized communities in governance.

Doctoral scholars have an important role in developing interdisciplinary methods that connect computer science with law, social science, philosophy, public policy, and affected communities. The future of responsible IT research will depend not only on more powerful controls, but also on better decisions about purpose, power, participation, and public value.

19. Chapter Summary

Research ethics, privacy, security, and governance are interdependent foundations of responsible IT research. Ethical research respects autonomy, minimizes harm, distributes burdens fairly, protects confidentiality, and maintains scientific integrity. Informed consent must be meaningful and ongoing, while vulnerable populations require additional safeguards. Surveillance and cybersecurity research demand careful attention to proportionality, authorization, and misuse. Data protection requires lifecycle controls, and intellectual property must be managed through clear ownership and licensing arrangements. Algorithmic fairness and responsible AI require evaluation beyond accuracy, including subgroup performance, explainability, accountability, and human oversight. Institutional review provides important scrutiny but does not replace continuing researcher responsibility. Finally, cross-border research requires careful consideration of jurisdiction, transfer mechanisms, security, cultural expectations, and remedies. Ethical governance is therefore a strategic capability that supports trustworthy innovation and sustainable public value.

20. Key Terms

1. Algorithmic fairness: The evaluation and design of automated systems to prevent unjustified discriminatory outcomes.

2. Anonymization: Processing intended to prevent data from being linked to an identifiable person, subject to residual re-identification risk.

3. Beneficence: The obligation to promote benefits and reduce foreseeable harm.

4. Confidentiality: The duty to protect information entrusted by participants or partners from unauthorized disclosure.

5. Consent: A voluntary and informed agreement to participate or permit specified data processing.

6. Data minimization: Limiting collection and use to information necessary for a defined purpose.

7. Data protection impact assessment: A structured evaluation of privacy risks and mitigating measures.

8. De-identification: Removing or transforming identifiers to reduce direct association with individuals.

9. Governance: Structures and processes for authority, oversight, accountability, and control.

10. Informed consent: Consent based on adequate understanding of a study, its risks, benefits, and data practices.

11. Institutional review board: An independent body that assesses the ethical acceptability of research.

12. Intellectual property: Legally protected creations such as software, inventions, designs, and written works.

13. Pseudonymization: Replacing identifying information with codes while retaining a separately protected linkage key.

14. Privacy by design: Embedding privacy protection into systems and processes from their inception.

15. Responsible AI: The development and use of AI with attention to fairness, safety, transparency, accountability, privacy, and human welfare.

16. Surveillance: Systematic observation, tracking, or monitoring of persons, activities, communications, or locations.

17. Vulnerable population: A group whose circumstances may limit autonomy or increase exposure to research harm.

18. Responsible disclosure: Coordinated reporting of a security vulnerability to enable remediation before public release.

21. Review Questions

Short Answer Questions

1. Distinguish privacy from confidentiality and explain why the distinction matters in IT research.

2. What are the three central ethical principles commonly associated with human-subject research?

3. Why does de-identification not guarantee anonymity?

4. Identify four controls that should appear in a research-data security plan.

5. What is the purpose of an institutional review board or research ethics committee?

Long Answer Questions

1. Explain how informed consent should be designed for an online study involving sensitive behavioral data.

2. Discuss the ethical risks and governance requirements of surveillance research.

3. Evaluate the relationship among algorithmic fairness, responsible AI, and human oversight.

4. Describe a complete lifecycle approach to data protection in a doctoral IT project.

5. Analyze the principal ethical and managerial challenges of cross-border research-data sharing.

Analytical / Application Questions

1. A university wishes to combine student learning-platform logs, library records, and building-access data to predict academic failure. Design an ethical governance framework addressing purpose, consent, minimization, access, fairness, retention, and appeal.

2. A research team discovers a critical vulnerability in software used by hospitals but wants to publish exploit code immediately. Apply ethical and security principles to recommend a responsible course of action.

3. An AI model used to allocate social-service resources has high overall accuracy but substantially higher error rates for a minority group. Analyze possible causes, identify additional evidence required, and propose a remediation and monitoring strategy.

22. Multiple Choice Questions with Answers

Question 1

Which action best demonstrates data minimization in an IT research project?

A. Collecting every available field in case it becomes useful later

B. Collecting only the variables necessary to answer the approved research question

C. Keeping raw data indefinitely after publication

D. Sharing identifiable data with all project partners

Correct Answer: B. Collecting only the variables necessary to answer the approved research question

Question 2

Why is a publicly accessible social-media post not automatically free of ethical privacy concerns?

A. Public data can never be used in research

B. Public posts are always protected by trade-secret law

C. Aggregation or quotation may violate contextual expectations and enable re-identification

D. Researchers must obtain a patent before analyzing public data

Correct Answer: C. Aggregation or quotation may violate contextual expectations and enable re-identification

Question 3

Which principle requires fair distribution of research burdens and benefits?

A. Justice

B. Availability

C. Purpose limitation

D. Authenticity

Correct Answer: A. Justice

Question 4

What is the primary purpose of responsible vulnerability disclosure?

A. To conceal all vulnerabilities permanently

B. To enable affected parties to remediate before details facilitate attacks

C. To publish exploit code before notifying the vendor

D. To transfer ownership of the vulnerable software to the researcher

Correct Answer: B. To enable affected parties to remediate before details facilitate attacks

Question 5

Which statement best describes informed consent?

A. A one-time signature that eliminates all future researcher duties

B. An ongoing process based on understandable information and voluntary agreement

C. Permission that can be obtained only from a project sponsor

D. A requirement applicable only to medical experiments

Correct Answer: B. An ongoing process based on understandable information and voluntary agreement

Question 6

A model has equal overall accuracy across groups but rejects qualified applicants from one group more often. What should researchers do first?

A. Conclude that the model is fair because overall accuracy is equal

B. Delete all subgroup information from the evaluation

C. Examine subgroup error rates, data representation, features, and decision thresholds

D. Deploy the model without human review

Correct Answer: C. Examine subgroup error rates, data representation, features, and decision thresholds

Question 7

Which control most directly supports accountability for access to sensitive research data?

A. Unrestricted administrator privileges

B. Audit logging linked to role-based access controls

C. Publicly posting the encryption key

D. Removing all retention limits

Correct Answer: B. Audit logging linked to role-based access controls

Question 8

Why may an employee recruitment study require additional safeguards?

A. Employees are never capable of giving consent

B. The employment relationship may create pressure to participate

C. Employee data cannot be anonymized

D. Workplace studies are automatically illegal

Correct Answer: B. The employment relationship may create pressure to participate

Question 9

What is a central concern in cross-border data governance?

A. Whether the research has a chapter number

B. Whether data transfers comply with applicable jurisdictions and approved safeguards

C. Whether all countries use identical research methods

D. Whether encryption makes all legal duties disappear

Correct Answer: B. Whether data transfers comply with applicable jurisdictions and approved safeguards

Question 10

Which statement best characterizes institutional review?

A. Approval removes the researcher’s responsibility for later risks

B. Review assesses ethical acceptability, but researchers must continue monitoring and reporting

C. Review is concerned only with publication formatting

D. Review applies only when a project receives commercial funding

Correct Answer: B. Review assesses ethical acceptability, but researchers must continue monitoring and reporting