E-Library Logo
Research Ethics & Computer Applications
Research Ethics & Computer Applications
Research Ethics & Computer Applications illustration

Research Ethics & Computer Applications

Program: Doctorate in Information Technology
Program Level: Doctorate
Language: English
Subject Syllabus

Subject Overview

An advanced doctoral syllabus integrating research ethics, responsible conduct, governance, and computer-assisted research. It covers ethical theory, research design, data stewardship, computational methods, reproducibility, AI, publication integrity, cybersecurity, digital transformation, and emerging governance requirements.

Learning Goal

Students will critically evaluate ethical issues, design governance-compliant studies, use computational research applications responsibly, manage research data securely, ensure reproducibility, and lead ethical decision-making in technology-intensive research environments.

Syllabus

1. Foundations of Research Ethics and Responsible Inquiry

Learning Objective: Examine research integrity, ethical reasoning, professional responsibility, research misconduct, questionable practices, and the distinctive obligations of doctoral researchers.

Category: foundation

2. Ethical Theories, Principles, and Decision Frameworks

Learning Objective: Apply deontology, consequentialism, virtue ethics, rights-based ethics, justice, care ethics, principlism, and structured ethical decision models to complex research cases.

Category: foundation

3. Research Governance, Regulation, and Institutional Oversight

Learning Objective: Critically evaluate ethics committees, institutional review boards, professional codes, international guidelines, legal requirements, risk classification, compliance, monitoring, and accountability.

Category: core

4. Human Participants, Consent, and Digital Research

Learning Objective: Design ethically defensible recruitment, informed and dynamic consent, deception, debriefing, compensation, vulnerability protection, online observation, social-media research, and human–computer interaction studies.

Category: core

5. Research Design, Risk–Benefit Analysis, and Ethical Protocols

Learning Objective: Integrate scientific validity, proportionality, stakeholder analysis, conflicts of interest, harm mitigation, inclusion, cultural sensitivity, and ethics-by-design into research protocols.

Category: core

6. Privacy, Confidentiality, and Cybersecurity

Learning Objective: Assess privacy risks and implement data minimization, anonymization, pseudonymization, encryption, access control, secure computing, incident response, and privacy-enhancing technologies.

Category: application

7. Research Data Governance and Lifecycle Management

Learning Objective: Develop data management plans covering collection, provenance, metadata, quality, storage, sharing, retention, deletion, repositories, FAIR principles, CARE principles, data sovereignty, and stewardship.

Category: core

8. Computer Applications for Scholarly Research

Learning Objective: Use literature databases, reference managers, systematic-review platforms, electronic laboratory notebooks, survey systems, qualitative analysis software, collaboration tools, and research workflow applications critically and efficiently.

Category: application

9. Computational Analysis and Research Analytics

Learning Objective: Apply statistical software, programming, databases, visualization, text mining, simulation, and high-performance or cloud computing while evaluating assumptions, bias, validity, uncertainty, and interpretability.

Category: application

10. Reproducibility, Open Science, and Research Software Engineering

Learning Objective: Create auditable research through version control, documented code, workflow automation, containers, testing, preregistration, registered reports, open methods, persistent identifiers, and reproducible computational environments.

Category: advanced

11. Artificial Intelligence and Machine Learning in Research

Learning Objective: Critically govern AI-assisted discovery, generative AI, automated analysis, algorithmic bias, explainability, validation, hallucination, disclosure, intellectual property, human oversight, and responsible model use.

Category: contemporary

12. Authorship, Publication Ethics, and Intellectual Property

Learning Objective: Address authorship criteria, contributorship, peer review, plagiarism, fabrication, falsification, image manipulation, duplicate publication, citation ethics, predatory publishing, copyright, licensing, patents, and retractions.

Category: core

13. Ethics of Large-Scale, Networked, and Emerging Technologies

Learning Objective: Evaluate ethical challenges involving big data, Internet of Things, biometrics, blockchain, digital twins, autonomous systems, surveillance, dual-use research, environmental impacts, and cross-border infrastructures.

Category: advanced

14. Strategic Leadership, Digital Transformation, and Future Governance

Learning Objective: Lead responsible research cultures through integrity training, governance maturity models, ethics audits, responsible innovation, stakeholder engagement, ESG considerations, AI regulation, horizon scanning, and anticipatory governance.

Category: strategic

Research Ethics & Computer Applications
Doctorate in Information Technology

Research Ethics & Computer Applications

Chapter 1
Foundations of Research Ethics and Responsible Inquiry

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

1. Foundations of Research Ethics and Responsible Inquiry

Introduction: Why Research Ethics Is a Foundation of Doctoral Work

Research is a social practice as well as an intellectual activity. It produces knowledge, but it also affects people, institutions, communities, environments, public policy, and technological systems. A doctoral researcher therefore does more than design a technically sound study. The researcher makes judgments about what questions may be asked, whose interests are represented, what risks are acceptable, how evidence is handled, and how findings are communicated.

Research ethics provides the principles and practices through which those judgments are made responsibly. It is not limited to obtaining approval from an ethics committee or completing an online training module. Ethics begins before data collection and continues through analysis, publication, preservation, reuse, and correction of the scholarly record. In information technology, ethical responsibility is especially significant because research may involve personal data, algorithmic systems, cybersecurity vulnerabilities, artificial intelligence, online communities, or technologies capable of operating at large scale.

A technically impressive study can still be ethically defective. A dataset may be statistically valuable but obtained without meaningful consent. An algorithm may achieve high predictive accuracy while reproducing discriminatory patterns. A researcher may not fabricate results yet still mislead readers through selective reporting, undisclosed conflicts of interest, or inappropriate authorship. Responsible inquiry requires attention to both the integrity of the research process and the consequences of its products.

At doctoral level, research ethics must be understood as a form of disciplined reasoning. Rules and codes are essential, but they cannot anticipate every situation. Researchers must interpret principles in context, identify competing values, justify decisions, and remain accountable to affected parties and the wider research community.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain the relationship between research ethics, research integrity, and responsible conduct of research.

2. Distinguish research misconduct from questionable research practices and honest error.

3. Apply major ethical principles and ethical reasoning frameworks to information technology research.

4. Analyse the professional responsibilities of doctoral researchers, supervisors, institutions, and collaborators.

5. Identify ethical risks associated with data, software, artificial intelligence, cybersecurity, and digital research environments.

6. Evaluate an ethically complex research situation and formulate a defensible response.

7. Recognize current challenges involving reproducibility, open science, automated systems, and responsible innovation.

The Ethical Character of Inquiry

Research ethics, integrity, and responsible conduct

Research ethics concerns the moral principles governing research involving people, data, institutions, animals, technology, and the environment. It asks whether a research activity is permissible, fair, respectful, and appropriately justified. Research integrity refers more specifically to honesty, rigor, transparency, reliability, and accountability in proposing, conducting, reviewing, and reporting research. Responsible conduct of research combines these dimensions: it requires respect for persons and communities as well as trustworthy production and communication of knowledge.

The concepts overlap but are not identical. A study may have strong methodological integrity but violate privacy. Conversely, a study may have obtained consent but use weak methods that waste participants’ contributions and produce unreliable conclusions. Ethical research must address both the treatment of those affected by research and the quality of the knowledge claimed by the researcher.

Integrity is therefore not merely a personal virtue. It is also an institutional and professional condition. Supervisors, research teams, universities, funders, publishers, professional associations, and regulators all influence whether responsible conduct is possible. Incentive systems that reward publication quantity, rapid results, or commercial novelty without valuing careful verification can create pressure toward questionable practices.

The social contract of research

Research operates on a form of social contract. Participants often provide information, time, labor, or access because they trust that researchers will use these contributions responsibly. Public and private organizations provide funding, infrastructure, and access because they expect credible results. Readers and other researchers rely on published claims to make further decisions. When researchers deceive, conceal relevant limitations, or misuse data, they damage not only a particular project but also confidence in scholarship.

This social contract is particularly important in computing. Software libraries, datasets, benchmarks, and models are frequently reused beyond the original project. A coding decision made in a research laboratory may later influence a health service, hiring platform, educational system, or security tool. The potential scale and persistence of digital outputs expand the researcher’s duty to anticipate foreseeable misuse and downstream effects.

Principles for Ethical Reasoning

No single principle resolves every ethical problem. The following principles provide a foundation for analysis, but they may conflict and must be interpreted together.

Respect for persons and autonomy

Respect for persons recognizes individuals as capable of making decisions about their participation and personal information. In research involving human participants, this normally requires informed consent. Consent should be based on understandable information about the purpose of the study, procedures, risks, benefits, data use, confidentiality, voluntary nature of participation, and withdrawal options.

Consent is not simply a signature. It is a continuing process of communication. In digital research, researchers must consider whether a person who posts information publicly expects that information to be collected, linked, analysed, or reproduced in a scholarly publication. Public availability does not automatically eliminate ethical obligations. Special care is required when participants have limited autonomy, are vulnerable to coercion, or may experience employment, educational, legal, or social consequences from participation.

Beneficence and non-maleficence

Beneficence concerns the promotion of benefits, while non-maleficence concerns avoiding or minimizing harm. Harm may be physical, psychological, social, economic, reputational, legal, or informational. A cybersecurity study, for example, may generate valuable knowledge while exposing a vulnerable system or revealing a security weakness. Ethical design requires risk assessment, safeguards, responsible disclosure, and a plan for responding to unexpected harm.

Risk-benefit analysis should be realistic rather than formalistic. Researchers should identify who bears the risks, who receives the benefits, whether risks are necessary for the research question, and whether a less harmful method could produce comparable knowledge. A technically convenient method is not ethically justified merely because it is inexpensive or efficient.

Justice and fairness

Justice requires fair distribution of the burdens and benefits of research. Participant selection should not exploit groups that are accessible, powerless, or unlikely to challenge the researcher. Nor should potentially beneficial research systematically exclude populations whose data are difficult to obtain.

In information technology, justice also applies to datasets and automated systems. If a dataset underrepresents certain communities, a model trained on it may perform poorly for those groups. Fairness cannot be reduced to a single mathematical metric because different definitions may conflict. Researchers should examine the social context of classification, the consequences of errors, the distribution of decision-making power, and the possibility that the system itself should not be deployed.

Fidelity, honesty, and accountability

Researchers owe duties of fidelity to participants, collaborators, institutions, funders, and readers. Honesty requires accurate representation of methods, data, contributions, uncertainties, and results. Accountability means that researchers can explain and defend their decisions and can correct the record when errors are discovered.

Transparency is an important instrument of accountability. Where appropriate, researchers should document protocols, analytical decisions, code, data provenance, limitations, conflicts of interest, and deviations from preregistered plans. Transparency does not mean that every dataset must be publicly released. Privacy, security, contractual obligations, and participant consent may require controlled access or non-disclosure. Ethical transparency is therefore calibrated transparency: enough information to permit evaluation without creating unjustifiable risk.

Ethical Reasoning Beyond Rule Following

A practical reasoning sequence

Ethical decision-making is strengthened by a structured process. A researcher can begin by asking:

1. What is the decision or proposed action, and who may be affected?

2. What facts are known, uncertain, or missing?

3. Which principles, policies, laws, professional standards, and agreements apply?

4. What options are available, including redesign, delay, consultation, or refusal?

5. What benefits, harms, rights, and responsibilities attach to each option?

6. Who has decision-making power, and whose interests may be overlooked?

7. Can the decision be explained publicly and defended to an independent reviewer?

8. What monitoring, mitigation, documentation, and correction mechanisms are needed?

This sequence prevents a narrow focus on whether an action is technically possible. It also encourages consultation with supervisors, ethics committees, data protection officers, security specialists, community representatives, or legal advisers when appropriate.

Deontological, consequentialist, and virtue perspectives

Deontological reasoning evaluates duties and rights. It may conclude that deception, unauthorized disclosure, or fabrication is wrong even if the researcher expects a beneficial result. Consequentialist reasoning evaluates likely outcomes, comparing benefits and harms. It is useful for risk assessment but can become dangerous if it treats the interests of a minority as expendable. Virtue ethics focuses on the character and habits of the researcher, asking what a person committed to honesty, intellectual humility, courage, fairness, and care would do.

These perspectives are complementary. A responsible researcher may reject fabrication because it violates a duty, recognize that fabricated results can cause serious harm, and understand that honesty is part of scholarly character. In difficult cases, ethical justification is strongest when it identifies the relevant duties, evaluates consequences, and considers what professional virtues require.

Procedural and relational approaches

Procedural ethics emphasizes formal review, consent documentation, data management, and compliance. These processes are necessary for accountability, but they may not capture changing relationships in fieldwork or digital communities. Relational ethics emphasizes trust, context, power, vulnerability, and ongoing responsibility. For example, a researcher studying an online support group may meet formal requirements yet still harm the community by quoting identifiable posts without considering members’ expectations.

Doctoral researchers should use both approaches. Procedures establish minimum safeguards; relational judgment addresses situations in which the written rule does not fully express the ethical issue.

Research Misconduct and Questionable Research Practices

Fabrication, falsification, and plagiarism

Research misconduct is commonly discussed through three central forms:

  • Fabrication is making up data, observations, participants, experiments, or results and reporting them as real.
  • Falsification is manipulating research materials, equipment, processes, images, code, data, or results so that the research record is misrepresented.
  • Plagiarism is presenting another person’s ideas, words, code, images, data, or creative work as one’s own without appropriate acknowledgment.

These acts are serious because they directly compromise the reliability of the scholarly record. Falsification in computing may include altering benchmark results, removing failed trials without disclosure, manipulating visualizations, or changing source code while claiming to have used a different version. Plagiarism includes unattributed copying of program code, dataset documentation, model architectures, or text. Intent and due process matter in institutional investigations, but researchers must not treat misconduct as a minor technical breach.

Honest error and responsible correction

Not every inaccurate result is misconduct. Research involves uncertainty, faulty instruments, programming bugs, misunderstood methods, and unexpected variation. An honest error becomes an ethical problem when the researcher refuses to correct it, conceals a material limitation, or knowingly continues to rely on a discredited result.

Responsible researchers preserve records, report deviations, respond to questions, issue corrections when necessary, and distinguish what is known from what is inferred. Retractions and corrections are mechanisms for protecting the research record, not necessarily evidence of personal failure.

Questionable research practices

Questionable research practices may not meet the formal threshold for misconduct but can still undermine knowledge. Examples include selective reporting of favorable outcomes, p-hacking, undisclosed changes to hypotheses, inappropriate exclusion of observations, honorary or ghost authorship, duplicate publication, inadequate record keeping, coercive citation, and failure to disclose conflicts of interest.

In computational research, additional concerns include data leakage between training and test sets, changing evaluation datasets until a desired result appears, reporting only the best random seed, comparing a new method with weak baselines, undocumented hyperparameter tuning, and releasing code that cannot reproduce the published claims. Each practice may appear small, but cumulative distortion can produce exaggerated conclusions.

The distinction between misconduct and questionable practice should not be used to excuse the latter. Ethical evaluation concerns the effect on trustworthiness, not only whether a formal label applies.

Doctoral Researchers as Responsible Professionals

Doctoral status confers authority and responsibility. A doctoral researcher is simultaneously a learner, investigator, collaborator, author, and emerging member of a profession. The researcher must develop independence while recognizing the limits of personal expertise.

Responsibilities to the research record

Doctoral researchers should maintain complete and dated records of research decisions, versions of software, data transformations, code dependencies, analytical scripts, approvals, consent materials, and deviations from plans. Reproducibility is not always fully achievable, particularly where data are confidential or systems are proprietary, but researchers should make the work as auditable as circumstances permit.

Researchers should also report negative, null, and ambiguous findings when they are relevant. A dissertation is not a marketing document. Its value lies in the quality and honesty of its reasoning, including recognition of limitations.

Responsibilities to participants and communities

Researchers must avoid treating participants as sources of data detached from their social identities. They should use accessible information sheets, minimize collection, protect confidentiality, and establish realistic expectations about future use. Community engagement may be necessary when research concerns collective identities, local knowledge, or populations historically subject to extractive research.

In digital studies, de-identification is not a guarantee of anonymity. Combining seemingly harmless attributes can permit re-identification. Researchers should assess linkage risks, limit access, remove unnecessary identifiers, and define retention and deletion policies.

Responsibilities within research teams

Authorship should reflect substantial intellectual or scholarly contribution and should be discussed early. Supervisors must not appropriate students’ work, and students should not claim contributions they did not make. Teams should agree on data ownership, publication procedures, intellectual property, code maintenance, dispute resolution, and responsibility for responding to errors.

A power imbalance can make it difficult for students or junior staff to challenge questionable decisions. Institutions should provide confidential reporting routes and protect good-faith whistleblowers from retaliation. Researchers also have a duty to raise concerns when silence would permit serious harm or deception.

Conflicts of interest

A conflict of interest exists when personal, financial, institutional, professional, or relational interests could reasonably be perceived to influence research judgment. A conflict is not automatically wrongdoing. The ethical requirement is disclosure and management. Possible controls include independent analysis, separation of roles, recusal, monitoring, preregistration, and transparent reporting.

Information Technology Research: Distinctive Ethical Questions

Data governance and privacy

IT research commonly involves logs, location records, social media content, biometric information, educational records, health information, or inferred attributes. Ethical data governance requires attention to purpose limitation, data minimization, access control, retention, provenance, and lawful as well as ethically legitimate use. Researchers should distinguish data that are technically accessible from data whose use is reasonably expected by the people concerned.

Anonymization, pseudonymization, encryption, and aggregation reduce risk but do not eliminate it. Security controls must address both accidental disclosure and insider misuse. Data management plans should specify who can access data, how access is logged, how backups are protected, and what happens at the end of the project.

Artificial intelligence and algorithmic research

AI research introduces concerns about training-data provenance, consent, copyright, representational harms, bias, explainability, environmental cost, and dual use. A model may be reproducible yet ethically unacceptable if it systematically harms a vulnerable group. Researchers should report dataset composition, known limitations, evaluation populations, uncertainty, and intended and prohibited uses.

Generative AI also affects the research process. It may assist with coding, translation, literature organization, or drafting, but researchers remain responsible for accuracy, attribution, confidentiality, and intellectual contribution. Sensitive unpublished manuscripts, identifiable data, credentials, and proprietary code should not be entered into external systems without authorization. AI-assisted outputs require verification because fluent language is not evidence of correctness.

Cybersecurity and dual-use research

Security research often involves a tension between discovering vulnerabilities and preventing exploitation. Ethical practice includes authorization, controlled testing, data minimization, secure storage of exploit details, coordination with affected parties, and responsible disclosure. Researchers should define scope before testing and avoid scanning or attacking systems without permission.

Dual-use research can support beneficial and harmful applications. The possibility of misuse does not automatically prohibit research, but it requires proportional risk assessment, access controls, staged release, monitoring, and careful communication. Claims about capabilities should be precise rather than sensational.

Open science and reproducibility

Open methods, code, materials, and data can improve scrutiny and accelerate discovery. However, openness must be balanced against privacy, security, contractual restrictions, and the rights of communities. A responsible open-science plan may use synthetic data, de-identified samples, secure enclaves, controlled repositories, executable documentation, or access committees rather than unrestricted release.

Reproducibility also depends on software environments, hardware, random seeds, dependency versions, and adequate documentation. Releasing code without explaining how data were cleaned or models were selected does not by itself make a study reproducible.

Applied Case: The Campus Safety Prediction Project

Background

The following is an illustrative case. A doctoral researcher, Mira, is developing a machine-learning system intended to predict locations where campus security incidents may occur. The university provides historical incident reports, emergency-call metadata, building access logs, and anonymized student movement data. A private security company funds part of the project and hopes to commercialize the system.

Situation and problem

The initial model shows high overall accuracy. However, the data contain far more reports from campuses and neighborhoods with heavier security presence. The model therefore recommends increased patrols in those areas. Mira discovers that the movement data were collected under a broad institutional privacy notice that did not clearly explain research reuse. The company asks her to omit subgroup performance results because they may delay deployment. Her supervisor argues that the data are already anonymized and that the project has received institutional approval.

Analysis

Several ethical issues interact. First, the model may learn patterns of surveillance and reporting rather than underlying safety risks. Increased patrols could generate more recorded incidents in the same areas, reinforcing the model’s assumptions. Second, high aggregate accuracy may conceal unequal error rates. Third, the original notice may not constitute meaningful consent for the new research purpose. Fourth, commercial funding creates a potential conflict of interest. Finally, public deployment could affect students and communities who had no opportunity to understand or challenge the system.

Formal approval is important but not conclusive. The ethical question is not simply whether the data are legally accessible or whether an algorithm produces a useful prediction. It includes proportionality, fairness, legitimacy of data reuse, contestability, and foreseeable consequences.

Responsible approach

Mira should pause deployment and document the concerns. She should consult the ethics committee, privacy experts, affected community representatives, and an independent statistician. The team should conduct subgroup evaluations, examine data provenance and reporting bias, test alternative models, and consider whether the intended target can be measured validly. The university should clarify the funding relationship and require disclosure of the sponsor’s role.

Possible safeguards include using aggregated rather than individual movement data, excluding unnecessary attributes, limiting outputs to resource planning rather than individual suspicion, publishing limitations, creating an appeal and review mechanism, and establishing an independent monitoring process. If meaningful consent or a defensible public-interest basis for reuse cannot be established, the dataset may need to be narrowed or the project redesigned.

Outcome

In this illustrative case, the team reports that predictive performance falls substantially when evaluated across different campus groups and time periods. The university decides not to deploy the original model. Instead, it funds a smaller study on emergency-response travel times using aggregated data and a participatory design process. The company withdraws from the project but permits publication of the methodological findings.

Learning points

The case demonstrates that ethical responsibility includes questioning the research question, not only protecting the dataset. Aggregate accuracy is not sufficient evidence of fairness. Institutional approval does not transfer responsibility away from the researcher. Commercial sponsorship must be disclosed and managed. A decision to redesign or discontinue a project can be an ethical success rather than a research failure.

Common Failure Modes and Institutional Safeguards

Ethical problems often arise through ordinary organizational pressures rather than dramatic fraud. Common warning signs include rushed approvals, unclear ownership of data, undocumented code changes, excessive dependence on a supervisor, unrealistic publication targets, incentives based solely on positive results, and the assumption that a public dataset is risk-free.

Researchers can reduce these risks by creating a data management plan, agreeing on authorship and roles at the beginning, using version control, maintaining an audit trail, preregistering hypotheses where appropriate, separating exploratory from confirmatory analysis, conducting internal replication, and inviting critical review from people outside the immediate project.

Institutions also have obligations. They should provide accessible ethics review, training tailored to disciplines, secure research infrastructure, fair investigation procedures, conflict-of-interest management, mentorship, whistleblower protection, and mechanisms for correcting the scholarly record. Ethics committees should avoid becoming purely bureaucratic checkpoints; they should support proportionate, context-sensitive reasoning.

Current Developments and Emerging Concerns

Several developments are reshaping research ethics. Large language models and automated analysis systems make it easier to generate text, code, synthetic data, and research hypotheses, but they complicate attribution, verification, and accountability. Data-intensive research increasingly relies on infrastructures operated by commercial platforms, raising questions about access, dependency, and long-term preservation. Open and collaborative research expands participation while creating new challenges concerning consent, moderation, intellectual property, and governance.

There is also growing attention to research justice, which asks who defines research priorities, who benefits from innovation, and whose knowledge is treated as authoritative. Responsible innovation encourages researchers to anticipate social consequences, reflect on alternatives, include affected stakeholders, and remain responsive as evidence changes. These approaches do not replace established principles; they extend them to systems whose effects may be distributed, adaptive, and difficult to reverse.

Best-Practice Principles for Doctoral Inquiry

A doctoral researcher should cultivate the following habits:

  • Treat ethics as a continuing part of research design, not a one-time approval event.
  • Collect only data necessary for a justified purpose and protect it throughout its life cycle.
  • Keep accurate, secure, and reviewable records of methods, code, decisions, and changes.
  • Report uncertainty, negative findings, limitations, conflicts, and deviations honestly.
  • Discuss authorship, ownership, access, and responsibilities before disputes arise.
  • Test claims across relevant populations and conditions rather than relying on a single favorable metric.
  • Seek independent advice when power, privacy, security, or dual-use risks are substantial.
  • Prefer the least harmful method capable of answering the research question.
  • Correct the record promptly when an error or misleading claim is discovered.
  • Ask not only whether a study can be conducted, but whether it ought to be conducted in its proposed form.

Chapter Summary

Research ethics is the disciplined examination of how research should be designed, conducted, reported, and used. Research integrity emphasizes honesty, rigor, transparency, reliability, and accountability, while responsible conduct also addresses respect for persons, non-maleficence, beneficence, justice, and the social consequences of knowledge. Ethical reasoning requires more than rule compliance: it involves identifying affected parties, examining duties and consequences, considering power and context, and selecting proportionate safeguards.

Research misconduct includes fabrication, falsification, and plagiarism. Questionable practices such as selective reporting, p-hacking, inadequate documentation, inappropriate authorship, and data leakage may also damage the research record even when they do not meet a formal misconduct definition. Doctoral researchers have distinctive obligations to participants, collaborators, institutions, disciplines, and future users of their work.

In information technology, privacy, data governance, artificial intelligence, cybersecurity, dual use, open science, and reproducibility create distinctive ethical challenges. Digital systems can scale harms and preserve them over time, so responsible researchers must evaluate downstream effects and design for accountability. Ethical research is therefore not an obstacle added to technical work; it is part of what makes research credible, socially legitimate, and professionally valuable.

Key Terms

Research ethics: Moral principles and practices governing the design, conduct, reporting, and use of research.

Research integrity: Honesty, rigor, transparency, reliability, and accountability in scholarly work.

Responsible conduct of research: Ethical and professional behavior across the entire research life cycle.

Informed consent: Voluntary agreement based on adequate understanding of research information and risks.

Beneficence: The obligation to promote or maximize legitimate benefits.

Non-maleficence: The obligation to avoid or minimize foreseeable harm.

Justice: Fair distribution of research burdens, benefits, opportunities, and risks.

Autonomy: A person’s capacity and right to make informed decisions without undue pressure.

Fabrication: Making up data, observations, participants, or results.

Falsification: Manipulating research materials, processes, data, or results to misrepresent the record.

Plagiarism: Presenting another person’s words, ideas, code, data, or creative work as one’s own.

Questionable research practice: A conduct that may fall short of formal misconduct but undermines research reliability or fairness.

Conflict of interest: An interest that could influence, or appear to influence, research judgment.

Data provenance: Documented information about the origin, ownership, transformation, and use of data.

Reproducibility: The ability to obtain consistent findings using the same data, methods, and documented procedures.

Responsible disclosure: A process for reporting vulnerabilities while reducing the risk of exploitation.

Dual-use research: Research that can support beneficial purposes but may also enable harmful applications.

Research misconduct: Serious violation of research standards, especially fabrication, falsification, or plagiarism.

Calibrated transparency: Providing enough information for evaluation while protecting privacy, security, and legitimate confidentiality.

Research justice: Attention to who defines research priorities, bears research burdens, and receives its benefits.

Review Questions

Short Answer Questions

1. How do research ethics and research integrity differ, and why must both be addressed?

2. Define fabrication, falsification, and plagiarism.

3. Why is informed consent considered an ongoing process rather than merely a signed form?

4. What is a questionable research practice? Give two examples relevant to computing.

5. Why does public availability of digital information not automatically make its research use ethically unproblematic?

Long Answer Questions

1. Explain the principles of autonomy, beneficence, non-maleficence, justice, and accountability, using information technology examples.

2. Compare deontological, consequentialist, virtue-ethical, and relational approaches to research ethics.

3. Discuss the distinctive ethical responsibilities of a doctoral researcher within a supervisory research team.

4. Analyse the ethical challenges of artificial intelligence research, including data provenance, fairness, transparency, and dual use.

5. Explain how open science can improve research integrity while also creating privacy and security risks.

Analytical / Application Questions

1. A researcher removes several unsuccessful experimental runs from a machine-learning evaluation because they are described as “technical anomalies,” but does not report the exclusions. Analyse whether this is misconduct, a questionable practice, or an honest methodological decision. What documentation and disclosure would be required?

2. You discover that a publicly available dataset contains indirectly identifiable records about a vulnerable community. Design an ethically defensible plan for deciding whether and how the dataset may be used.

3. A technology sponsor asks a doctoral researcher to publish only the subgroup in which a predictive model performs best. Apply the ethical reasoning sequence from this chapter and recommend a course of action.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes research integrity from research ethics?

A. Research integrity concerns only legal compliance, whereas research ethics concerns only publication.

B. Research integrity emphasizes trustworthy scholarly practice, while research ethics also addresses the treatment and interests of those affected by research.

C. Research integrity applies only to quantitative studies, whereas research ethics applies only to qualitative studies.

D. Research integrity is required only after data collection, while research ethics ends after approval.

Correct Answer: B. Research integrity emphasizes trustworthy scholarly practice, while research ethics also addresses the treatment and interests of those affected by research.

Question 2

A researcher reports only the most favorable random seed from many model runs without disclosing the selection process. This is best classified as:

A. A questionable research practice that may distort the evidence.

B. Fabrication because every reported result is necessarily invented.

C. Informed consent because the researcher chose a result voluntarily.

D. Responsible disclosure because the result is publicly reported.

Correct Answer: A. A questionable research practice that may distort the evidence.

Question 3

Why is institutional ethics approval not sufficient to transfer all ethical responsibility away from a doctoral researcher?

A. Approval guarantees that every future use of data is ethical.

B. Approval replaces the need for professional judgment during analysis and publication.

C. Approval reviews a proposed activity, while researchers remain responsible for changing risks, honest reporting, and unforeseen consequences.

D. Approval is relevant only to funding and has no connection with research conduct.

Correct Answer: C. Approval reviews a proposed activity, while researchers remain responsible for changing risks, honest reporting, and unforeseen consequences.

Question 4

Which action most directly reflects the principle of justice in an AI research project?

A. Maximizing overall accuracy without examining subgroup performance.

B. Selecting participants solely because they are easiest to access.

C. Examining whether research burdens and system errors are unfairly distributed across affected groups.

D. Keeping the model proprietary so that no one can criticize it.

Correct Answer: C. Examining whether research burdens and system errors are unfairly distributed across affected groups.

Question 5

A cybersecurity researcher discovers a vulnerability in a company’s system. Which response is most consistent with responsible disclosure?

A. Immediately publishing exploit code without contacting anyone.

B. Testing unrelated systems to determine whether the vulnerability is widespread.

C. Defining authorized scope, protecting exploit details, and coordinating notification with the affected organization.

D. Suppressing all evidence permanently, regardless of public risk.

Correct Answer: C. Defining authorized scope, protecting exploit details, and coordinating notification with the affected organization.

Question 6

Which statement about anonymization is most accurate?

A. Anonymization always makes research use ethically risk-free.

B. Anonymization may reduce risk, but combinations of attributes can still permit re-identification.

C. Anonymization eliminates the need for data access controls.

D. Anonymization means that consent is never relevant.

Correct Answer: B. Anonymization may reduce risk, but combinations of attributes can still permit re-identification.

Question 7

A researcher discovers that a published conclusion depends on a programming error. What is the most responsible first response?

A. Delete the underlying records so the error cannot be investigated.

B. Continue citing the conclusion until another researcher notices the problem.

C. Document the error, assess its effect, inform relevant parties, and correct the research record where necessary.

D. Reclassify the error as fabrication automatically.

Correct Answer: C. Document the error, assess its effect, inform relevant parties, and correct the research record where necessary.

Question 8

Which scenario illustrates a conflict of interest rather than automatically proving misconduct?

A. A researcher receives funding from a company whose technology is being evaluated and discloses and manages that relationship.

B. A researcher invents participants who never existed.

C. A researcher copies another author’s code without attribution.

D. A researcher alters observations to obtain a desired result.

Correct Answer: A. A researcher receives funding from a company whose technology is being evaluated and discloses and manages that relationship.

Question 9

Why may high aggregate accuracy be ethically insufficient for a predictive system?

A. Accuracy is never relevant to ethical evaluation.

B. Aggregate accuracy can conceal unequal error rates or harmful effects on particular groups.

C. High accuracy proves that the data were collected with valid consent.

D. Aggregate accuracy automatically demonstrates fairness.

Correct Answer: B. Aggregate accuracy can conceal unequal error rates or harmful effects on particular groups.

Question 10

Which practice best supports computational reproducibility?

A. Releasing only a final graph without code or methodological records.

B. Changing evaluation data until the desired result appears.

C. Maintaining versioned code, documenting data transformations and dependencies, and reporting deviations.

D. Keeping all analytical decisions undocumented to preserve flexibility.

Correct Answer: C. Maintaining versioned code, documenting data transformations and dependencies, and reporting deviations.

Research Ethics & Computer Applications
Chapter 1 of 14

Research Ethics & Computer Applications

Chapter 2
Ethical Theories, Principles, and Decision Frameworks

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

2. Ethical Theories, Principles, and Decision Frameworks

Introduction and Context

Research in information technology is never merely technical. Decisions about data collection, algorithm design, cybersecurity, artificial intelligence, digital platforms, and human–computer interaction affect privacy, autonomy, safety, equality, and access to opportunities. A technically valid research method may nevertheless be ethically unacceptable if it exposes participants to unreasonable risks, conceals important information, reproduces discrimination, or treats people only as sources of data.

Research ethics therefore requires more than compliance with institutional forms or legal rules. Researchers must be able to reason about difficult situations in which values conflict, evidence is incomplete, and every available option has disadvantages. Ethical theories provide different ways of asking what ought to be done. Principles and decision frameworks translate those theoretical insights into practical judgments, while professional standards and governance mechanisms establish accountability.

This chapter develops a pluralistic approach to ethical reasoning. It examines deontology, consequentialism, virtue ethics, rights-based ethics, justice, care ethics, and principlism. It then shows how these perspectives can be combined in structured decision-making for information technology research.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain the purpose and assumptions of major ethical theories used in research.

2. Distinguish duties, consequences, virtues, rights, justice, care, and principles as forms of ethical reasoning.

3. Apply principlism and structured decision models to complex technology research cases.

4. Identify conflicts among ethical values and justify defensible resolutions.

5. Evaluate the limitations of single-theory approaches.

6. Integrate ethical reasoning with research governance, data protection, professional responsibility, and responsible innovation.

Ethics as Practical Reasoning in Research

Ethics concerns the justified evaluation of conduct, institutions, and decisions. In research, ethical reasoning addresses questions such as: Is consent valid when participants do not understand an automated system? Is it acceptable to collect public online data without contacting users? When should a study be stopped because risks are emerging? Who should benefit from a dataset or algorithm developed with public resources?

These questions differ from empirical questions. Empirical research may establish how accurate a facial-recognition model is; ethical reasoning asks whether deploying it in a particular population is permissible. Law can also differ from ethics. A practice may be legal but unfair, invasive, or inconsistent with professional responsibility. Conversely, ethical duties may require researchers to exceed minimum legal requirements.

Ethical analysis normally involves four activities. First, the researcher identifies affected stakeholders, including people who are not direct participants. Second, the researcher clarifies relevant facts, uncertainties, and assumptions. Third, competing values and obligations are made explicit. Finally, the researcher compares possible actions and provides reasons that can be examined by others. Ethical judgment is therefore not simply personal opinion; it is reasoned, transparent, and open to criticism.

Major Ethical Theories

Deontology: Duties, Rules, and Respect for Persons

Deontological ethics evaluates actions primarily by whether they conform to duties or moral rules, rather than by their outcomes. In a research setting, duties may include telling the truth, obtaining voluntary informed consent, protecting confidentiality, avoiding deception unless strongly justified, and honoring commitments made to participants.

A central deontological idea is that persons must be treated as ends in themselves, not merely as instruments for producing knowledge. A researcher cannot justify coercive recruitment simply by claiming that the resulting discovery could benefit society. Similarly, secretly changing an experimental condition may violate a participant’s autonomy even if the study would produce valuable findings.

Deontology is especially useful where certain boundaries should not be crossed. It protects individuals against being sacrificed for aggregate benefits. Its difficulty lies in situations where duties conflict. For example, a researcher may owe confidentiality to participants but also have a duty to prevent serious and imminent harm. A defensible response requires interpreting the scope of each duty, considering prior disclosures, and following applicable governance procedures rather than applying a rule mechanically.

Consequentialism: Outcomes, Welfare, and Risk

Consequentialism judges actions by their expected consequences. Utilitarian approaches seek the greatest overall benefit or the least overall harm, while more moderate forms ask whether risks are proportionate to anticipated value. In information technology research, consequentialist reasoning may compare the social benefits of an intrusion-detection system with risks arising from monitoring employees, or the benefits of a medical prediction model with the possibility of false positives and unequal performance.

Consequentialist analysis requires attention to probability, magnitude, distribution, reversibility, and uncertainty. A low-probability risk can still be ethically important if its consequences are catastrophic. Likewise, average performance may conceal serious harms to a minority group. Researchers should consider not only immediate outcomes but also downstream uses, function creep, dependency, environmental costs, and institutional effects.

The weakness of consequentialism is that aggregate benefit can be used to rationalize violations of individual rights. It may also be difficult to quantify dignity, trust, privacy, or cultural harm. For this reason, expected benefits should not automatically override non-negotiable protections.

Virtue Ethics: Character and Professional Judgment

Virtue ethics focuses on the character and practical wisdom of the moral agent. It asks not only “What rule applies?” or “What outcome is best?” but also “What would a good researcher do in these circumstances?” Relevant virtues include honesty, intellectual humility, courage, fairness, compassion, responsibility, temperance, and respectfulness.

Virtue is visible in practices such as reporting inconvenient results, acknowledging uncertainty, resisting pressure to publish prematurely, consulting affected communities, and correcting an error publicly. A virtuous researcher does not treat ethical review as a bureaucratic obstacle but as part of responsible scholarship.

Virtue ethics is valuable when rules are incomplete or novel technologies create situations not anticipated by existing policy. Its limitation is that people may disagree about which traits count as virtues or may invoke professional character without identifying concrete protections. Virtue should therefore support, not replace, institutional safeguards and explicit analysis.

Rights-Based Ethics: Claims, Autonomy, and Entitlements

Rights-based ethics asks whether a decision respects legitimate claims held by individuals or groups. Research may implicate rights to privacy, bodily integrity, autonomy, freedom from discrimination, intellectual control, due process, and access to explanation or remedy. Rights can impose duties on researchers and institutions even where violating them would appear efficient.

For example, a dataset may be technically accessible but still contain information that individuals reasonably expect to remain private. A participant’s right to withdraw may be meaningful only if withdrawal procedures are practical and previously collected data are handled transparently. In artificial intelligence research, the right to challenge an automated decision may require human review, an explanation, and a route for correction.

Rights are not always absolute. They may conflict with one another or be limited under carefully justified conditions. Ethical analysis should specify whose right is involved, what duty corresponds to it, whether the right is legally recognized or morally asserted, and what remedy is available when it is violated.

Justice: Fairness in Distribution, Procedure, and Recognition

Justice concerns fair treatment and the distribution of benefits, burdens, opportunities, and risks. In research, distributive justice asks whether vulnerable populations bear disproportionate risks while others receive the benefits. Procedural justice asks whether decisions are made through fair, transparent, and inclusive processes. Recognitional justice asks whether the identities, experiences, and knowledge of affected communities are taken seriously.

Sampling is an important justice issue. Excluding a group from research may deny it future benefits, while including it primarily because it is accessible or less able to refuse may constitute exploitation. Algorithmic research raises related questions about unequal error rates, representational gaps, access to remedies, and the distribution of computational resources.

Justice does not always mean identical treatment. Fairness may require additional support, accessibility measures, or targeted inclusion to correct structural disadvantage. Researchers should examine both individual-level effects and institutional patterns.

Care Ethics: Relationships, Dependency, and Responsiveness

Care ethics emphasizes relationships, vulnerability, dependency, empathy, and responsibilities that arise from concrete contexts. It challenges the idea that ethical decisions can be made entirely through abstract rules applied to interchangeable individuals.

Care is particularly relevant in qualitative research, participatory design, research with children or dependent adults, and studies involving communities with histories of surveillance or exploitation. A caring researcher attends to distress, power differences, communication barriers, and the consequences of withdrawing from a study. Care may require changing interview procedures, providing accessible information, or continuing support after formal data collection ends.

Care ethics does not mean that researchers should become informal therapists or abandon boundaries. Excessive personal involvement can create dependency or unequal treatment. Ethical care must remain compatible with role clarity, confidentiality, fairness, and professional competence.

Principlism and the Translation of Theory into Research Practice

Principlism is an approach that uses several mid-level principles rather than one supreme moral theory. In biomedical and social research, four widely used principles are respect for autonomy, beneficence, non-maleficence, and justice.

Respect for autonomy requires meaningful voluntary choice. It involves understandable information, adequate opportunity for questions, freedom from coercion, and continuing consent where circumstances change. Autonomy is not satisfied by obtaining a signature from a participant who cannot understand the study.

Beneficence requires promoting legitimate benefits, including knowledge that may improve practice or policy. Benefits should be plausible and proportionate rather than exaggerated in recruitment materials.

Non-maleficence requires avoiding or reducing harm. Harm includes physical injury but also privacy loss, stigma, discrimination, psychological distress, economic loss, reputational damage, and security exposure.

Justice requires fair selection of participants and fair distribution of burdens and benefits. It also requires attention to accessibility, representation, and the effects of research outputs.

Principles are not self-executing. Researchers must specify how they apply, identify conflicts, and justify which consideration has priority. For instance, autonomy may support a participant’s choice to accept a risk, while non-maleficence may limit risks that no consent can ethically authorize. Principlism is therefore best understood as a disciplined balancing approach, not as a checklist.

A Structured Ethical Decision Framework

A practical decision model can combine the strengths of several theories. The following sequence is suitable for research proposals, data governance reviews, incident response, and design decisions.

1. Define the decision and its scope

State the decision in precise terms. “Should we use social-media data?” is too broad. A better formulation is: “Should the research team collect publicly visible posts from a specified population, retain identifiers for twelve months, and use them to train a classifier?” Clarify what is optional, what is already committed, and what decision must be made now.

2. Establish the factual context

Identify the data sources, participants, technologies, purposes, stakeholders, foreseeable uses, security controls, legal requirements, and uncertainties. Distinguish known facts from assumptions. Consult technical experts, community representatives, data-protection officers, and domain specialists where necessary.

3. Map stakeholders and power relationships

Include direct participants, non-participants whose data may be captured, research staff, institutions, funders, downstream users, communities, and the public. Analyze who can refuse, who bears risk, who controls resources, and who can seek remedy.

4. Identify ethical values and duties

Ask the main theory-specific questions:

  • What duties or promises apply?
  • What outcomes are likely, and who receives benefits or harms?
  • Which rights and legitimate expectations are engaged?
  • Is the distribution of burdens fair?
  • What would honesty, courage, and responsibility require?
  • What relationships and vulnerabilities call for care?
  • How do autonomy, beneficence, non-maleficence, and justice apply?

5. Develop alternatives

Ethical analysis improves when researchers compare genuine alternatives rather than choosing between the preferred plan and doing nothing. Alternatives may include data minimization, synthetic or aggregate data, stronger access controls, delayed release, community governance, independent auditing, or abandoning the study.

6. Evaluate and justify options

Assess each option against duties, consequences, rights, justice, care, and professional standards. Consider severity, likelihood, reversibility, uncertainty, and the possibility of mitigating harm. Record disagreements rather than concealing them.

7. Decide, document, and communicate

The decision should identify reasons, conditions, responsibilities, review dates, and escalation routes. Participants and affected communities should receive information appropriate to their role. Transparency does not require disclosing security-sensitive details, but secrecy must not be used to avoid accountability.

8. Monitor and revise

Ethical approval is not the end of ethical responsibility. Monitor complaints, adverse events, model performance, data breaches, participation patterns, and unexpected uses. A responsible decision includes criteria for pausing, modifying, or terminating the research.

Applied Case: Predictive Analytics in a University Support System

Background

This illustrative case concerns a doctoral research team developing a machine-learning model to identify students who may need academic support. The proposed model would use learning-management-system activity, assessment submissions, attendance records, and demographic information. The university intends to use predictions to invite students to voluntary support services.

Situation and Problem

The model performs well overall but produces more false positives for students from a particular linguistic minority. Administrators propose adding additional personal data and withholding the model’s risk score from students to prevent anxiety. Some researchers argue that the model’s aggregate accuracy justifies deployment because early support could improve retention.

Ethical Analysis

From a consequentialist perspective, early assistance may generate substantial benefits, but the analysis must include stigma, unnecessary intervention, self-fulfilling labeling, and unequal error rates. The relevant outcome is not only predictive accuracy but whether students actually receive beneficial and respectful support.

A deontological analysis emphasizes truthful communication and respect for students as autonomous persons. Concealing the existence and purpose of monitoring may violate duties of transparency, even if administrators believe secrecy improves participation. Students should not be treated merely as data points whose behavior is optimized.

A rights-based analysis raises questions about privacy, access to explanation, correction of inaccurate records, and the ability to contest an automated classification. Justice requires examining whether minority students bear greater surveillance or receive less appropriate support. It also requires asking whether students who are not predicted to be at risk are wrongly denied assistance.

Care ethics directs attention to the lived experience of students, including language barriers, disability, financial stress, and distrust of institutional systems. Consultation with affected students may reveal harms that performance metrics do not capture. Virtue ethics calls on the research team to demonstrate humility, fairness, and courage by reporting subgroup weaknesses rather than presenting only the overall accuracy.

Approach and Proposed Solution

The team should not deploy the model in its initial form as an autonomous decision system. A defensible approach would include:

1. Removing unnecessary variables and assessing whether demographic attributes are needed for auditing rather than prediction.

2. Conducting subgroup performance and impact assessments before deployment.

3. Using the model only to offer voluntary, non-punitive support, not to impose sanctions or restrict opportunities.

4. Informing students in accessible language about the data used, the purpose of the system, and available alternatives.

5. Providing human review, correction mechanisms, and a clear route for complaints.

6. Testing whether interventions are culturally and linguistically appropriate.

7. Establishing retention limits, access controls, independent oversight, and a process for suspending the system when harms emerge.

Outcome

In this illustrative case, the university postpones operational deployment, conducts participatory evaluation with affected students, and redesigns the support process so that model outputs trigger invitations rather than labels. The research report presents subgroup limitations and explains why aggregate accuracy was insufficient for ethical approval.

Learning Points

The case demonstrates that ethical research cannot be reduced to model performance. Fairness involves distribution, process, recognition, and remedy. Consent, transparency, privacy, and care remain important even when the intended intervention is beneficial. A structured framework makes hidden assumptions visible and supports proportionate safeguards.

Challenges and Limitations of Ethical Frameworks

No ethical theory resolves every case automatically. Deontology may generate conflicting duties; consequentialism may depend on uncertain predictions; virtue ethics may be subjective; rights can conflict; justice may require contested distributive judgments; and care can become partial or paternalistic. Principlism may appear to offer balance while leaving the actual weighting of principles unexplained.

A common mistake is ethical tokenism: mentioning values without changing the research design. Another is equating consent with ethical acceptability. Consent may be compromised by dependency, poor comprehension, limited alternatives, or excessive inducement. Researchers may also over-rely on legal compliance, technical metrics, institutional approval, or the claim that data are anonymous. Re-identification, inference, linkage, and future use can create risks even when direct identifiers have been removed.

Ethical reasoning is also vulnerable to institutional conflicts. Funders may pressure researchers to accelerate deployment; supervisors may discourage criticism; commercial partners may restrict publication; and researchers may have incentives tied to positive results. Governance should therefore include independent review, conflict-of-interest disclosure, auditability, secure documentation, and protection for responsible dissent.

Governance, Professional Practice, and Digital Technologies

Ethical decision-making should be embedded throughout the research lifecycle: question formulation, funding, design, recruitment, data collection, analysis, publication, deployment, and post-study monitoring. Technical controls such as encryption, access logging, differential privacy, data minimization, model cards, documentation, and reproducible workflows can support ethical commitments, but technology cannot determine what is fair or permissible by itself.

Artificial intelligence intensifies the need for ethical judgment because systems may be opaque, adaptive, distributed across organizations, and difficult to withdraw once deployed. Researchers should distinguish research prototypes from operational systems, identify downstream users, test for disparate impacts, document limitations, and avoid claims that exceed the evidence. Human oversight must be meaningful rather than merely symbolic.

Current developments include participatory and community-based governance, algorithmic impact assessments, privacy-enhancing technologies, responsible research and innovation, open science with controlled access where necessary, and greater attention to environmental sustainability. These developments do not eliminate ethical disagreement; they expand the range of stakeholders and evidence considered in decision-making.

Best Practices for Doctoral Researchers

A doctoral researcher should maintain an ethics log that records assumptions, stakeholder concerns, alternatives considered, decisions, and changes over time. Ethical claims should be linked to evidence, not broad assertions. Research teams should discuss difficult cases before problems become crises and should include people with relevant technical, legal, cultural, and lived expertise.

Good practice also includes data minimization, proportionality, accessible communication, secure handling, fair participant selection, preregistered or documented analytical decisions where suitable, transparent reporting of limitations, and post-study responsibility. When uncertainty is substantial, researchers should prefer reversible, low-risk steps and establish explicit stopping conditions. Ethical quality is strengthened when the people most affected can influence the design rather than merely respond to a finished proposal.

Chapter Summary

Ethical theories provide complementary lenses for research decisions. Deontology emphasizes duties and respect for persons; consequentialism evaluates benefits and harms; virtue ethics focuses on researcher character and practical wisdom; rights-based ethics protects legitimate claims; justice examines fair distribution, procedure, and recognition; and care ethics highlights relationships, vulnerability, and responsiveness. Principlism organizes practical analysis around autonomy, beneficence, non-maleficence, and justice.

A structured decision framework moves from defining the issue and establishing facts to identifying stakeholders, mapping values, developing alternatives, evaluating consequences and duties, documenting a decision, and monitoring outcomes. No single theory is sufficient for complex information technology research. Strong ethical practice is pluralistic, transparent, evidence-informed, participatory, and connected to governance throughout the research lifecycle.

Key Terms

Deontology: Ethical reasoning that evaluates conduct according to duties, rules, and obligations.

Consequentialism: An approach that judges actions by their expected outcomes.

Virtue ethics: Ethical theory concerned with moral character, habits, and practical wisdom.

Rights-based ethics: Reasoning that protects legitimate claims and entitlements of individuals or groups.

Justice: Fair treatment and fair distribution of benefits, burdens, opportunities, and risks.

Care ethics: An approach emphasizing relationships, dependency, vulnerability, and responsiveness.

Principlism: Use of several mid-level ethical principles to guide practical judgment.

Autonomy: A person’s capacity and opportunity to make informed, voluntary choices.

Beneficence: The obligation to promote legitimate benefits.

Non-maleficence: The obligation to avoid or reduce harm.

Informed consent: Voluntary agreement based on adequate, understandable information.

Distributive justice: Fair allocation of benefits, burdens, and opportunities.

Procedural justice: Fairness and transparency in decision-making processes.

Recognitional justice: Respect for identities, experiences, and knowledge of affected groups.

Proportionality: Requiring that expected benefits justify the seriousness and likelihood of risks.

Stakeholder: A person, group, institution, or community affected by a research decision.

Ethical pluralism: The view that several moral values or theories may be relevant and irreducible.

Data minimization: Collecting and retaining only data necessary for a legitimate purpose.

Remedy: A process or action used to correct, compensate for, or prevent ethical harm.

Ethics log: A documented record of ethical assumptions, decisions, concerns, and revisions.

Review Questions

Short Answer Questions

1. What distinguishes deontological reasoning from consequentialist reasoning?

2. Why is aggregate accuracy insufficient for evaluating the ethics of an algorithm?

3. Define autonomy, beneficence, non-maleficence, and justice.

4. What is the difference between distributive and procedural justice?

5. Why should ethical review continue after a study receives approval?

Long Answer Questions

1. Compare the contributions and limitations of deontology, consequentialism, and virtue ethics in information technology research.

2. Explain how rights-based ethics and justice can be applied to research involving personal data.

3. Discuss the role of care ethics in research with vulnerable or historically over-surveilled communities.

4. Explain why principlism should not be treated as a simple checklist.

5. Describe the stages of the structured ethical decision framework and show how they support accountability.

Analytical / Application Questions

1. A researcher proposes collecting publicly visible posts to infer users’ mental-health status without notifying them. Analyze the proposal using at least four ethical perspectives and recommend safeguards.

2. An AI hiring model has higher overall validity than human screening but disadvantages applicants with disabilities. Should it be deployed? Develop a reasoned decision using consequences, rights, justice, and professional duties.

3. A cybersecurity study discovers a vulnerability in a widely used public system. Construct an ethical decision plan addressing disclosure, possible harm, stakeholder duties, and monitoring.

22. Multiple Choice Questions with Answers

Question 1

A researcher refuses to disclose a participant’s identity because confidentiality was explicitly promised, even though disclosure would make publication easier. Which ethical perspective most directly supports this reasoning?

A. Consequentialism

B. Deontology

C. Virtue ethics

D. Care ethics

Correct Answer: B. Deontology

Question 2

Why should an algorithm be evaluated using subgroup error rates rather than only overall accuracy?

A. Overall accuracy is never a technical measure

B. Subgroup analysis identifies possible unequal burdens and harms

C. Subgroup analysis eliminates the need for consent

D. Accuracy is relevant only to commercial systems

Correct Answer: B. Subgroup analysis identifies possible unequal burdens and harms

Question 3

Which action best expresses respect for autonomy in a research study?

A. Obtaining a signature without explaining technical risks

B. Allowing voluntary participation after understandable information and questions

C. Offering participation only to people dependent on the researcher

D. Withholding all information to prevent biased responses

Correct Answer: B. Allowing voluntary participation after understandable information and questions

Question 4

A justice-based analysis of a research project primarily asks whether:

A. The researcher has displayed personal courage

B. The research produces the largest possible dataset

C. Benefits, burdens, opportunities, and procedures are fairly distributed

D. The study follows the fastest available method

Correct Answer: C. Benefits, burdens, opportunities, and procedures are fairly distributed

Question 5

Which statement best describes principlism?

A. It applies only one absolute moral rule

B. It uses several mid-level principles whose application must be justified

C. It replaces ethical reasoning with legal compliance

D. It evaluates only the financial consequences of research

Correct Answer: B. It uses several mid-level principles whose application must be justified

Question 6

In the university predictive-support case, the most ethically defensible use of the initial model was to:

A. Automatically deny services to students predicted not to be at risk

B. Use predictions for punitive disciplinary decisions

C. Offer voluntary, non-punitive support with human review and correction

D. Conceal all monitoring so students cannot change their behavior

Correct Answer: C. Offer voluntary, non-punitive support with human review and correction

Question 7

Which step should occur first in the structured ethical decision framework?

A. Monitor post-deployment outcomes

B. Define the decision and its scope precisely

C. Select the most accurate model

D. Publish the final results

Correct Answer: B. Define the decision and its scope precisely

Question 8

Care ethics would most likely lead a research team to emphasize:

A. Abstract rules applied identically in every context

B. Aggregate utility without regard to relationships

C. Vulnerability, power differences, and responsiveness to affected people

D. The researcher’s publication count

Correct Answer: C. Vulnerability, power differences, and responsiveness to affected people

Question 9

Why can legal compliance be insufficient for ethical research?

A. Law never applies to information technology research

B. Legal rules always prohibit beneficial research

C. A practice may be legal but still invasive, unfair, or harmful

D. Ethics concerns only private organizations

Correct Answer: C. A practice may be legal but still invasive, unfair, or harmful

Question 10

Which practice best supports responsible AI research?

A. Reporting only average performance

B. Removing all human oversight after deployment

C. Documenting limitations, testing impacts, enabling correction, and monitoring outcomes

D. Using as much personal data as technically available

Correct Answer: C. Documenting limitations, testing impacts, enabling correction, and monitoring outcomes

Research Ethics & Computer Applications
Chapter 2 of 14

Research Ethics & Computer Applications

Chapter 3
Research Governance, Regulation, and Institutional Oversight

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

3. Research Governance, Regulation, and Institutional Oversight

Introduction and Context

Research involving information technology is conducted within a network of responsibilities. A researcher may design an algorithm, collect personal data, test a cybersecurity system, analyse online behaviour, or deploy artificial intelligence in a public service. Each activity can affect individuals, communities, organisations, infrastructure, and the public interest. Technical competence alone is therefore insufficient. Research must also be governed through ethical review, legal compliance, professional standards, institutional procedures, and continuing accountability.

Research governance refers to the systems through which research is authorised, evaluated, monitored, documented, and held accountable. It includes institutional policies, ethics committees, information-security controls, data-protection requirements, contractual obligations, funding conditions, and professional expectations. Governance is broader than obtaining approval at the beginning of a project. It extends across the research lifecycle: conception, funding, recruitment, data collection, analysis, publication, archiving, sharing, and disposal.

For doctoral researchers, governance should not be understood as administrative obstruction. Proper oversight improves research quality by identifying hidden assumptions, foreseeable harms, conflicts of interest, weak consent procedures, insecure data practices, and unjustified claims. At the same time, oversight systems are not beyond criticism. Committees may apply standards inconsistently, rely on outdated categories, or focus on documentary compliance rather than substantive ethical reasoning. The central challenge is to combine institutional control with informed professional judgment.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain the purposes and limits of research governance and institutional oversight.

2. Distinguish the roles of research ethics committees, institutional review boards, data-protection officers, regulators, funders, and professional bodies.

3. Apply major ethical principles and international guidelines to information-technology research.

4. Classify research risk and design proportionate review, consent, security, and monitoring arrangements.

5. Critically evaluate legal, professional, and organisational compliance obligations.

6. Analyse failures of oversight and propose accountable governance responses.

7. Assess emerging challenges involving artificial intelligence, platform research, cybersecurity, and automated decision systems.

The Architecture of Research Governance

Research governance operates through several overlapping layers. The first is individual responsibility. Researchers are responsible for honesty, competence, careful record keeping, respect for participants, and disclosure of relevant conflicts. The second is project-level governance, including a protocol, risk assessment, data-management plan, consent materials, security controls, and monitoring arrangements. The third is institutional governance, which provides review committees, policies, training, reporting channels, audit mechanisms, and disciplinary procedures. The fourth is external governance, including legislation, regulatory agencies, funders, professional associations, courts, and international standards.

These layers should reinforce one another, but they do not always coincide. A project may be legally permissible yet ethically unacceptable; it may satisfy an institutional form while creating substantial privacy risks; or it may be ethically defensible but prohibited by a contractual or sector-specific rule. Compliance is therefore a threshold, not the whole meaning of responsible research. Ethical judgment asks not only whether an activity is allowed, but also whether it is justified, necessary, proportionate, transparent, and fair.

Governance also depends on role clarity. The principal investigator usually has operational responsibility for the project. The institution has a duty to provide competent oversight and resources. A sponsor may impose additional conditions but should not compromise independent judgment. A research ethics committee evaluates the ethical acceptability of a proposal, but it does not replace the investigator’s continuing responsibility. Technical staff, data stewards, supervisors, and collaborators likewise have defined duties. Accountability becomes weak when everyone assumes that someone else is responsible.

Ethics Committees and Institutional Review Boards

A research ethics committee (REC), institutional review board (IRB), or human research ethics committee is an independent or semi-independent body established to protect research participants and promote ethically acceptable research. Names and legal powers vary across jurisdictions, but typical functions include reviewing protocols, assessing risks and benefits, examining recruitment and consent, evaluating privacy and confidentiality, considering the inclusion of vulnerable groups, and requiring modifications or safeguards.

An effective committee should possess appropriate expertise, independence, diversity, and procedural legitimacy. Information-technology research may require knowledge of software engineering, cybersecurity, data protection, human–computer interaction, behavioural science, statistics, accessibility, and the social context of the research population. Technical expertise is particularly important where risk is embedded in system architecture rather than in physical intervention. For example, a seemingly harmless data-collection tool may permit re-identification, infer sensitive characteristics, or expose an insecure endpoint.

Review normally occurs through one of several pathways. Exempt or non-review determination may apply to activities that do not involve human participants or that fall within a clearly defined low-risk category, but exemption is generally determined by the authorised institution rather than assumed by the researcher. Expedited or delegated review may be used for minimal-risk studies or minor amendments. Full committee review is appropriate where risks are more than minimal, populations are vulnerable, deception is significant, sensitive data are involved, or the research could have substantial social consequences.

The committee’s decision may be approval, conditional approval, a request for modification, deferral pending further information, or rejection. Approval is usually tied to the submitted protocol. Changing the sample, data source, consent process, software functionality, risk profile, or analysis plan may require an amendment. Serious unexpected problems, breaches, adverse events, and deviations from the approved protocol should be reported through institutional procedures.

Oversight can fail in two opposite ways. Under-regulation leaves participants and the public exposed. Over-regulation can discourage valuable low-risk research, delay time-sensitive work, or apply biomedical assumptions inappropriately to digital studies. Proportionate review seeks a defensible relationship between the intensity of oversight and the magnitude and likelihood of harm.

Ethical Principles in Digital Research

Although different codes use different language, several principles recur.

Respect for persons and autonomy requires recognising individuals as decision-makers rather than merely as data sources. Informed consent should communicate what participation involves, what data are collected, foreseeable risks, intended uses, withdrawal arrangements, and relevant third-party access. In digital settings, a long online notice is not necessarily informed consent. Comprehension, accessibility, timing, voluntariness, and the possibility of refusing particular data uses are important.

Beneficence and non-maleficence require researchers to pursue valuable knowledge while reducing avoidable harm. Harm may be physical, psychological, economic, social, reputational, legal, informational, or discriminatory. A cybersecurity experiment that exposes a live system, for example, may create operational or public-safety risks even if no person is directly interviewed.

Justice concerns the fair distribution of research burdens and benefits. Researchers should avoid exploiting populations that are easy to access, such as students, employees, prisoners, patients, or economically dependent users. Justice also requires attention to digital exclusion, unequal error rates, accessibility, and the possibility that communities provide data while receiving no meaningful benefit.

Privacy and confidentiality are related but distinct. Privacy concerns a person’s control over access to themselves, their information, or their activities. Confidentiality concerns the researcher’s duty to protect information entrusted to the project. Data that are publicly accessible are not automatically ethically unrestricted. Context, reasonable expectations, sensitivity, identifiability, and potential harm remain relevant.

Integrity and accountability require accurate representation of methods, data, authorship, limitations, funding, and conflicts of interest. Selective reporting, undisclosed changes to algorithms, fabricated data, and exaggerated performance claims undermine both science and public trust.

International Guidelines, Professional Codes, and Law

International guidance provides common ethical language, but it does not create a single universal legal regime. Major traditions in research ethics emphasise voluntary participation, risk minimisation, independent review, fair selection, privacy, and special protection for vulnerable persons. The Belmont principles—respect for persons, beneficence, and justice—remain influential in human-subject research. The Declaration of Helsinki is especially associated with medical research involving human participants, while the Menlo Report adapted ethical principles to information and communication technology research by emphasising respect for persons, beneficence, justice, and respect for law and public interest.

Professional codes translate broad values into occupational duties. Codes associated with computing and engineering commonly stress avoiding harm, being honest about system limitations, respecting privacy, maintaining competence, protecting confidentiality, and accepting responsibility for consequences. A code is not a substitute for law or institutional review. It is a framework for professional judgment, especially where formal rules are incomplete.

Legal requirements differ by jurisdiction and sector. Relevant areas may include data-protection and privacy law, intellectual-property law, copyright, employment law, consumer protection, anti-discrimination law, cybersecurity and computer-misuse legislation, health-information regulation, export controls, and rules governing cross-border data transfers. A university researcher may also be bound by grant terms, data-sharing agreements, cloud-service contracts, national security restrictions, or a partner organisation’s policies.

A practical distinction is useful:

  • Law establishes enforceable duties and prohibitions.
  • Regulation provides sectoral or administrative requirements and enforcement mechanisms.
  • Institutional policy defines the organisation’s internal procedures and conditions of authorisation.
  • Professional codes express standards of responsible practice.
  • Ethical reasoning evaluates whether an action is justified, even when no rule directly addresses it.

Researchers should seek jurisdiction-specific advice rather than assume that a general ethical principle answers a legal question. They should also avoid treating consent as a universal legal solution. Consent may be invalid where there is coercion, an imbalance of power, inadequate information, or a purpose inconsistent with the original collection context.

Risk Classification and Proportionate Review

Risk assessment is a structured judgment about possible harms, their likelihood, their severity, who may be affected, and the effectiveness of proposed controls. In information-technology research, risk can arise from the participants, the data, the method, the technology, the environment, or the consequences of publication.

A useful classification distinguishes:

  • Minimal risk, where foreseeable harm is no greater than that ordinarily encountered in daily life or routine professional activity.
  • Moderate risk, where sensitive data, deception, professional consequences, intrusive monitoring, or meaningful privacy risks require additional safeguards.
  • High or more-than-minimal risk, where research may cause serious physical, psychological, economic, legal, social, security, or community harm.
  • Systemic or public-interest risk, where effects extend beyond participants to institutions, populations, critical infrastructure, democratic processes, or the environment.

Risk is not determined solely by the research question. A study of a low-sensitivity topic may become high risk if it uses identifiable location data, covert observation, an insecure platform, or a vulnerable population. Conversely, a study addressing a sensitive issue may be responsibly conducted with strong minimisation and security controls.

A proportionate risk process should ask:

1. What could go wrong, and who could be affected?

2. How likely and severe is each harm?

3. Is the research question important enough to justify the residual risk?

4. Can the project use less data, fewer participants, safer testing environments, or less intrusive methods?

5. What technical, procedural, and contractual safeguards will reduce risk?

6. Who will monitor the controls, and what will trigger suspension or redesign?

Risk assessment should be revisited when the system, population, data source, threat environment, or intended use changes. Static forms are inadequate for adaptive software, machine-learning models, and security research in live environments.

Consent, Data Governance, and Security Controls

Consent is a process rather than a signature. Digital research may require layered information: a brief explanation at the point of decision, accessible additional detail, and a durable record of what was agreed. Consent should identify secondary uses, automated analysis, data linkage, retention, publication, international transfers, and withdrawal limitations. In some projects, broad consent for future research may be defensible; in others, the sensitivity or unpredictability of future use requires re-consent or additional governance.

Data governance begins with data minimisation: collecting only what is necessary for a justified purpose. It also includes purpose specification, accuracy, retention limits, access control, encryption, pseudonymisation or anonymisation where feasible, secure deletion, audit logs, incident response, and controlled sharing. Pseudonymised data remain potentially identifiable and should not automatically be treated as anonymous.

Technical safeguards should be matched to the threat model. Measures may include role-based access, multi-factor authentication, secure coding, vulnerability testing, network segmentation, key management, version control, backup protection, privacy-preserving analytics, and independent security review. Researchers should plan for disclosure rather than assume that a breach cannot occur.

Artificial intelligence introduces additional governance questions. Training data may contain personal information, copyrighted material, biased representation, or data obtained without meaningful permission. Models may infer sensitive attributes even when those attributes were not explicitly collected. Automated decisions can obscure responsibility and make errors difficult to contest. Documentation should therefore address data provenance, model purpose, performance across relevant groups, uncertainty, human oversight, monitoring for drift, and procedures for correction or withdrawal.

Monitoring, Compliance, and Accountability

Ethical approval is the beginning of oversight, not its endpoint. Monitoring may include scheduled progress reports, data and safety reviews, protocol audits, access-log reviews, security testing, participant feedback, adverse-event reporting, and review of complaints. The appropriate intensity depends on risk and may increase when the project uses live systems, sensitive data, or rapidly changing models.

Compliance has at least three dimensions. Procedural compliance concerns whether required approvals, training, records, and reports exist. Substantive compliance concerns whether the research actually respects the approved ethical and legal requirements. Cultural compliance concerns whether the organisation encourages people to report concerns, challenge unsafe decisions, and learn from mistakes. An institution may possess excellent policies yet have poor ethical performance if researchers fear retaliation or regard oversight as paperwork.

Accountability requires traceability. A defensible project should be able to show who approved the protocol, who accessed data, which model or software version was used, what deviations occurred, how incidents were handled, and why significant decisions were made. Documentation should be sufficiently detailed for independent review without creating unnecessary privacy or security exposure.

Whistleblowing and protected reporting channels are important where supervisors, sponsors, or institutional interests may conflict with participant welfare. Investigations should be fair, independent, timely, and proportionate. Accountability should distinguish honest error from negligence, concealment, misconduct, and deliberate circumvention of safeguards.

Illustrative Case: The CivicShield Vulnerability Study

Background

CivicShield, a fictional doctoral project, develops methods for detecting vulnerabilities in municipal online-service portals. The researcher proposes scanning several live public systems and demonstrating exploitable weaknesses to improve cybersecurity practice.

Situation and Problem

The initial protocol describes the systems as “publicly available” and proposes automated testing without individual consent. The researcher argues that the study creates public benefit and will not collect names. However, scanning could overload services, trigger defensive actions, expose personal records, or reveal exploitable weaknesses before responsible disclosure. The project also involves a commercial security partner that expects rapid publication of results.

Analysis

The absence of interviews does not make the project ethically neutral. It involves live infrastructure, possible third-party data, public safety, and legal restrictions on unauthorised access. The risk is systemic as well as individual. Publication may increase harm if technical details are released before vulnerabilities are fixed. The partner’s commercial interests create a potential conflict with independent reporting.

Approach and Strategy

The revised governance plan includes the following measures:

1. Obtain written authorisation from system owners and define permitted testing boundaries.

2. Use a controlled test environment wherever possible and limit live testing to low-impact methods.

3. Establish rate limits, emergency stop procedures, monitoring, and incident contacts.

4. Collect no content data and immediately delete any inadvertently accessed information.

5. Obtain institutional ethics and legal review, with specialist cybersecurity expertise.

6. Create a responsible-disclosure protocol with timelines for notifying affected organisations.

7. Separate the partner’s commercial review from the researcher’s authority to report findings.

8. Document tool versions, test windows, access permissions, deviations, and remediation status.

Outcome

The project is approved conditionally as a higher-risk technical study. One proposed target is excluded because the owner cannot provide adequate authorisation. The researcher publishes aggregated findings after remediation and explains methodological limitations without releasing unnecessary exploit details.

Learning Points

The case demonstrates that public accessibility is not equivalent to unrestricted ethical permission. Cybersecurity research requires explicit authority, technical containment, legal advice, responsible disclosure, and continuing monitoring. It also shows that public benefit does not automatically outweigh foreseeable harm and that publication decisions are part of research governance.

Common Failures and Critical Limitations

Researchers commonly begin data collection before approval, treat an online consent form as sufficient without testing comprehension, assume de-identification is permanent, omit secondary data uses, or fail to amend a protocol after changing the software. Other failures include recruiting students through implicit pressure, relying on a vendor’s assurance without independent security testing, ignoring disabled users, and publishing a model’s average accuracy without subgroup analysis.

Institutional oversight also has limitations. Committees may lack technical expertise, underestimate collective harms, or evaluate a project as a static document. Review processes can be slow for interdisciplinary work and may produce inconsistent decisions across institutions. International collaborations create ambiguity about which law, committee, or data-transfer rule applies. Automated tools for compliance may increase consistency but cannot determine whether a research question is socially justified.

These limitations support improvement rather than abandonment of oversight. Institutions should invest in specialist reviewers, proportionate pathways, continuing education, clear amendment procedures, data-protection and cybersecurity collaboration, participant and community engagement, and post-approval auditing. Researchers should treat review as a dialogue about design quality rather than a one-time bureaucratic hurdle.

Emerging Directions in Research Governance

Several developments are reshaping oversight. Algorithmic research increasingly requires lifecycle governance, including pre-deployment testing, monitoring after deployment, impact assessment, and mechanisms for contesting automated decisions. Synthetic data may reduce exposure but can preserve bias, leakage, or re-identification risk. Platform research raises questions about terms of service, user expectations, scraping, and the difference between public visibility and ethical permission.

Participatory and community-based governance gives affected groups a stronger role in defining acceptable uses, benefits, data stewardship, and publication boundaries. This is especially important where research concerns Indigenous data, marginalised communities, or populations historically harmed by surveillance. Open science can improve reproducibility, but open access to datasets, code, or exploit methods must be balanced against privacy and security risks.

A mature governance model is therefore adaptive, risk-based, technically informed, legally aware, and socially accountable. It recognises that ethical responsibility continues after publication and may extend to downstream uses that the original research team did not fully control.

Best-Practice Framework for Doctoral Researchers

Before beginning a project, the researcher should map all affected parties, identify applicable law and institutional policy, classify risks, and consult relevant specialists. The protocol should explain necessity, proportionality, recruitment, consent, data flows, security, retention, publication, incident response, and accountability.

During the project, researchers should maintain version-controlled records, review deviations, monitor access and risk indicators, communicate with participants and partners, and report problems promptly. They should avoid collecting data merely because technology makes collection possible.

Before dissemination, researchers should verify that claims are supported, privacy and security risks have been reassessed, conflicts are disclosed, and publication does not create disproportionate harm. After completion, data should be archived, shared, or destroyed according to the approved plan, and lessons from incidents or participant feedback should inform future work.

Chapter Summary

Research governance coordinates ethical, legal, professional, technical, and institutional responsibilities throughout the research lifecycle. Ethics committees and institutional review boards provide independent scrutiny, but approval does not transfer responsibility away from the researcher. International guidelines and professional codes offer principles such as autonomy, beneficence, non-maleficence, justice, privacy, integrity, and accountability; law and institutional policy create enforceable or organisational obligations. Risk classification should be proportionate, dynamic, and sensitive to systemic effects. Consent, data minimisation, security, monitoring, documentation, incident response, and responsible publication are central controls. Digital and AI research require additional attention to inference, bias, model drift, data provenance, live-system risks, and downstream use. Effective oversight is not merely procedural compliance: it is a continuing culture of justified, transparent, and accountable decision-making.

Key Terms

Research governance: The systems used to authorise, regulate, monitor, and evaluate research.

Research ethics committee: A body that independently reviews the ethical acceptability of research involving people or their data.

Institutional review board: An institutional committee responsible for reviewing human-subject research and protecting participants.

Proportionate review: Matching the intensity of oversight to the likelihood and severity of foreseeable risk.

Minimal risk: Risk no greater than that ordinarily encountered in everyday life or routine activity.

Informed consent: A voluntary decision made after understandable information about participation has been provided.

Data minimisation: Collecting and retaining only data necessary for a legitimate research purpose.

Pseudonymisation: Replacing direct identifiers while retaining a controlled possibility of re-identification.

Confidentiality: The duty to protect information entrusted to the researcher.

Privacy: Appropriate control over access to persons, activities, and information.

Beneficence: The obligation to promote potential benefits and reduce avoidable harm.

Justice: Fair distribution of research burdens, benefits, opportunities, and risks.

Protocol deviation: A departure from an approved research plan.

Adverse event: An undesirable occurrence associated with research participation or activity.

Conflict of interest: A situation in which secondary interests could improperly influence research judgment.

Responsible disclosure: A process for reporting vulnerabilities while reducing exploitation risks.

Research integrity: Honest, accurate, transparent, and accountable conduct of research.

Data provenance: Documented information about the origin, transformation, and use of data.

Algorithmic accountability: Processes for explaining, monitoring, challenging, and assigning responsibility for algorithmic decisions.

Review Questions

Short Answer Questions

1. What is the difference between research governance and research ethics?

2. Why is institutional ethics approval not a transfer of responsibility from the researcher?

3. Distinguish privacy from confidentiality.

4. What is meant by proportionate review?

5. Why can publicly accessible data still raise ethical concerns?

Long Answer Questions

1. Explain the roles and limitations of ethics committees and institutional review boards in information-technology research.

2. Discuss how international guidelines, professional codes, institutional policies, and law interact in governing research.

3. Analyse the ethical and technical requirements for conducting research involving sensitive digital data.

4. Explain how monitoring, documentation, incident reporting, and audit contribute to research accountability.

5. Discuss the governance challenges created by artificial intelligence research, including data provenance, bias, explainability, and downstream use.

Analytical / Application Questions

1. A doctoral student plans to scrape publicly visible social-media posts and use machine learning to infer users’ mental-health conditions. Classify the principal risks and propose an appropriate governance plan.

2. A cybersecurity researcher discovers a serious vulnerability in a university partner’s live system while testing an approved tool. What immediate and subsequent actions should be taken, and why?

3. An approved research project changes its cloud provider, adds automated profiling, and begins sharing pseudonymised data with an overseas company. Determine which governance questions must be reconsidered before the changes proceed.

22. Multiple Choice Questions with Answers

Question 1

Which statement best describes the relationship between ethics approval and researcher responsibility?

A. Approval transfers responsibility for participant protection to the ethics committee.

B. Approval confirms that every future use of the data is automatically acceptable.

C. Approval authorises the submitted protocol, while the researcher retains continuing responsibility for ethical conduct.

D. Approval is unnecessary when a project has significant public benefit.

Correct Answer: C. Approval authorises the submitted protocol, while the researcher retains continuing responsibility for ethical conduct.

Question 2

A study uses publicly available location data to infer sensitive characteristics of individuals. Which conclusion is most appropriate?

A. The data are ethically unrestricted because they were publicly accessible.

B. Privacy and harm concerns remain relevant despite public accessibility.

C. No review is required because the researcher will not contact individuals.

D. The study is automatically minimal risk because names are excluded.

Correct Answer: B. Privacy and harm concerns remain relevant despite public accessibility.

Question 3

Which situation most strongly supports full committee review?

A. Analysis of fully anonymised historical statistics with no individual-level information.

B. A low-risk usability test using ordinary interface preferences.

C. A study involving vulnerable participants, sensitive data, and substantial deception.

D. A minor correction to the spelling of a project title.

Correct Answer: C. A study involving vulnerable participants, sensitive data, and substantial deception.

Question 4

What is the primary purpose of data minimisation?

A. To collect as much information as possible for future research.

B. To ensure that only data necessary for a justified purpose are collected and retained.

C. To eliminate the need for access controls.

D. To make all pseudonymised data anonymous.

Correct Answer: B. To ensure that only data necessary for a justified purpose are collected and retained.

Question 5

In the CivicShield case, why was explicit authorisation from system owners necessary?

A. Because public systems cannot be studied under any circumstances.

B. Because technical research is never subject to legal requirements.

C. Because live-system testing may create operational, security, and legal risks.

D. Because publication is prohibited for all cybersecurity research.

Correct Answer: C. Because live-system testing may create operational, security, and legal risks.

Question 6

Which example best illustrates systemic research risk?

A. A participant finds a questionnaire slightly inconvenient.

B. A software test could expose vulnerabilities across critical public infrastructure.

C. A researcher spends extra time documenting a data set.

D. A committee requests a clearer definition of a term.

Correct Answer: B. A software test could expose vulnerabilities across critical public infrastructure.

Question 7

Why is pseudonymisation not equivalent to anonymisation?

A. Pseudonymised data can never be used for research.

B. Pseudonymised data may still permit re-identification under some conditions.

C. Pseudonymisation requires publishing identifiers openly.

D. Anonymisation always preserves direct identifiers.

Correct Answer: B. Pseudonymised data may still permit re-identification under some conditions.

Question 8

Which action represents substantive rather than merely procedural compliance?

A. Submitting a form without changing the project design.

B. Displaying an approval number on a website.

C. Actually implementing approved access controls and reporting a security deviation.

D. Completing a mandatory training module while ignoring project risks.

Correct Answer: C. Actually implementing approved access controls and reporting a security deviation.

Question 9

What is a central governance concern in AI research?

A. Models are always objective if they use large data sets.

B. Model accuracy eliminates the need for human oversight.

C. Data provenance, subgroup performance, uncertainty, and downstream use require evaluation.

D. AI systems cannot create privacy risks if they do not store names.

Correct Answer: C. Data provenance, subgroup performance, uncertainty, and downstream use require evaluation.

Question 10

A researcher changes an approved study by adding automated profiling and sharing data overseas. What is the most appropriate response?

A. Proceed because the original approval covers all technical changes.

B. Ignore the change if the data remain pseudonymised.

C. Reassess ethical, legal, security, and data-transfer requirements and seek amendment or further review.

D. Delete the original protocol and continue informally.

Correct Answer: C. Reassess ethical, legal, security, and data-transfer requirements and seek amendment or further review.

Research Ethics & Computer Applications
Chapter 3 of 14

Research Ethics & Computer Applications

Chapter 4
Human Participants, Consent, and Digital Research

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

4. Human Participants, Consent, and Digital Research

Introduction and Context

Research involving human participants occupies a distinctive position in information technology. A study may appear technically modest—observing online interaction, testing an interface, analysing digital traces, or interviewing software users—yet it can expose identities, preferences, vulnerabilities, social relationships, and behavioural patterns. The ethical difficulty is not limited to medical or psychological experimentation. Whenever researchers collect information from, about, or in interaction with people, questions arise concerning autonomy, privacy, risk, fairness, accountability, and the legitimate use of data.

Digital research complicates these questions because the boundaries between public and private information are unstable. A message posted in an open forum may be technically accessible to anyone but still be experienced by its author as part of a bounded community. A dataset may be anonymised at collection and later become identifiable when linked with other sources. A consent form may be signed once, while the research project evolves through secondary analysis, algorithmic processing, and data sharing. Human–computer interaction studies introduce additional concerns: participants may be deceived by experimental interfaces, harmed by stressful tasks, or influenced by researchers who control access to technology, employment, education, or services.

Ethically defensible research therefore requires more than obtaining a signature. It requires a continuing relationship of explanation, choice, protection, and accountability. This chapter examines how doctoral researchers can design recruitment, informed and dynamic consent, deception, debriefing, compensation, safeguards for vulnerable participants, online observation, social-media research, and human–computer interaction studies. It also considers governance, data protection, emerging technologies, and the relationship between formal approval and genuine ethical practice.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain autonomy, informed consent, privacy, confidentiality, anonymity, vulnerability, and minimal risk in digital research.

2. Design recruitment procedures that are fair, transparent, and resistant to undue influence.

3. Develop proportionate consent and dynamic-consent processes for changing digital studies and secondary data use.

4. Evaluate the ethical acceptability of deception, online observation, social-media research, and HCI experiments.

5. Identify risks to vulnerable participants and construct appropriate safeguards.

6. Distinguish compensation from coercive inducement and design ethically defensible payment schemes.

7. Apply ethical review, data governance, debriefing, and incident-response practices to research projects.

8. Critically assess how artificial intelligence, automated profiling, and re-identification affect participant protection.

From Human Subjects to Data Relationships

The phrase “human participant” includes people who provide information, perform tasks, interact with a system, contribute biological or behavioural data, or are represented in records analysed by researchers. In digital research, the relevant person may not be the person who directly interacts with the investigator. For example, a study of a social-media platform may affect both recruited users and individuals mentioned in their posts. A machine-learning project may use historical service records concerning people who never agreed to research use.

Four ethical ideas provide a foundation. Respect for persons requires recognition of individuals as autonomous agents and protection for those whose autonomy is limited. Beneficence requires researchers to seek valuable knowledge while reducing foreseeable harm. Justice concerns the fair distribution of research burdens and benefits. Respect for privacy and confidentiality requires careful control over what is collected, who can access it, how it is used, and whether people can be identified.

These principles must be interpreted rather than applied mechanically. A study may involve no physical intervention but still create serious informational or reputational harm. Conversely, a study involving a minor inconvenience may be ethically acceptable if the social value is substantial, risks are low, and protections are strong. Ethical review is therefore a process of reasoned proportionality: the more intrusive, uncertain, or consequential the research, the stronger the justification and safeguards required.

Privacy is not identical to secrecy. Privacy concerns a person’s ability to control access to themselves, their information, or their social space. Confidentiality concerns the researcher’s obligation to protect information entrusted to the research team. Anonymity means that identity is not known or cannot reasonably be linked to the data; pseudonymity replaces direct identifiers with codes but does not eliminate the possibility of re-identification. Digital datasets are often pseudonymous rather than anonymous.

Recruitment as an Ethical Design Problem

Recruitment determines who enters a study, who is excluded, and how potential participants understand the invitation. A defensible recruitment plan specifies the population, inclusion and exclusion criteria, recruitment channels, initial contact, screening procedures, and safeguards against pressure. Selection should be scientifically justified rather than based merely on convenience, availability, or the researcher’s ease of access.

Researchers should avoid exploiting institutional relationships. A lecturer recruiting current students, a manager recruiting employees, or a clinician recruiting patients may unintentionally create perceived obligation. Where such recruitment is necessary, an independent recruiter, anonymous expression of interest, or separation between participation and institutional services can reduce pressure. Potential participants should be told clearly that refusal will not affect grades, employment, healthcare, immigration status, benefits, or access to technology.

Recruitment materials should state the purpose in accurate but accessible language, the activities involved, expected duration, foreseeable risks, eligibility requirements, compensation, contact details, and the voluntary nature of participation. Researchers should not conceal material information merely to increase enrolment. Targeted recruitment can be appropriate when a population is underrepresented, but researchers should avoid framing a group as deficient, abnormal, or merely useful for data extraction.

Digital recruitment creates additional risks. Online advertisements may use behavioural targeting that identifies people with sensitive interests. Automated screening can exclude people through biased classifications. Snowball recruitment may expose a participant’s association with a sensitive study to their acquaintances. Recruitment through online communities should respect community norms and, where appropriate, involve moderators without treating moderator permission as a substitute for individual consent.

Informed, Ongoing, and Dynamic Consent

Informed consent is a communication process through which a competent person voluntarily agrees to participate after receiving relevant information and having a reasonable opportunity to ask questions. A signature or electronic click is evidence of the process, not its entire substance. Information should normally include the study purpose, procedures, duration, risks, benefits, alternatives where relevant, privacy arrangements, compensation, data retention, future use, withdrawal procedures, contacts for questions or complaints, and the limits of confidentiality.

Consent must be understandable. Technical vocabulary, excessive legal language, and long forms can undermine comprehension. Layered consent is often useful: a brief explanation presents essential facts, while expandable sections provide detail about data flows, security, secondary use, and governance. Comprehension checks may be appropriate for high-risk studies. Participants should know which activities are required, which are optional, whether recordings are made, and whether their data may be combined with external sources.

Consent is voluntary only when refusal is realistically possible. Undue influence may arise from excessive payment, authority relationships, dependency, urgent financial need, or misleading claims. Consent can also be invalid if participants lack decision-making capacity, if information is materially incomplete, or if withdrawal is presented as practically impossible without justification.

Digital studies often require dynamic consent, a continuing process through which participants can review and modify choices as data uses evolve. A participant might separately consent to the primary study, audio recording, data linkage, future research, controlled data sharing, commercial use, or receipt of incidental findings. A secure portal can display current permissions, notify participants of material changes, and record decisions. Dynamic consent is not automatically superior: frequent requests may cause fatigue, and digital interfaces may privilege technically confident participants. It should therefore be proportionate, accessible, and supported by non-digital alternatives.

Withdrawal requires careful explanation. Participants should know whether they can withdraw their identifiable data, whether already anonymised or aggregated results can be removed, and what happens to data already shared with collaborators. Researchers should avoid promising deletion where technical or legal constraints make it impossible. A transparent limitation is ethically preferable to an attractive but inaccurate guarantee.

Deception, Debriefing, and the Integrity of Experimental Research

Deception occurs when researchers deliberately provide false information or withhold information that might influence participation or behaviour. In HCI and behavioural research, deception may be used to prevent demand characteristics—for example, to avoid telling participants that a system is measuring error concealment or trust calibration. Deception is ethically controversial because it interferes with autonomous decision-making and may damage trust.

A proportionate justification should address four questions: Is the research question important? Is deception scientifically necessary rather than merely convenient? Is there a non-deceptive alternative? Are the risks low and reversible? Deception should not conceal risks that a reasonable person would consider important, nor should it be used to expose participants to humiliation, discrimination, or significant psychological distress.

Debriefing should occur as soon as scientifically feasible. It should explain what was concealed, why deception was used, what data were collected, how risks were managed, and how participants may raise concerns or request withdrawal where possible. A meaningful debrief is a dialogue, not a scripted apology. Researchers should assess whether the explanation has caused distress, correct false beliefs, provide support information when needed, and report any unexpected adverse reactions. In some studies, delayed debriefing may be necessary to preserve validity, but the delay requires explicit justification and oversight.

Compensation, Vulnerability, and Fair Participation

Compensation recognizes time, inconvenience, travel, effort, and expenses. It should normally be calibrated to the burden of participation rather than to the risk of the study. Payment must not be so high that people accept risks they would otherwise reject, particularly where participants are economically disadvantaged. Pro-rata payment is often fairer than paying only upon completion, because it does not pressure participants to continue after discomfort or to conceal problems.

Vulnerability is contextual and multidimensional. It may involve age, cognitive or communicative disability, illness, institutional dependency, poverty, language barriers, legal insecurity, social marginalisation, or limited digital literacy. A person should not be labelled permanently vulnerable; vulnerability may arise from the study setting itself. For example, an online platform’s terms may be incomprehensible to a person with limited literacy, while a workplace hierarchy may constrain an otherwise autonomous employee.

Protection should be specific rather than paternalistic. Possible measures include adapted information sheets, interpreters, accessible interfaces, legally authorised representatives where appropriate, assent from minors alongside permission from a responsible adult, independent advocates, additional comprehension checks, private participation spaces, and stopping rules. Researchers should include vulnerable groups when their exclusion would produce unjust knowledge gaps, but inclusion must be accompanied by credible safeguards.

Online Observation and Social-Media Research

The ethical status of online material cannot be determined solely by whether it is publicly accessible. Researchers should consider the reasonable expectations of the community, the sensitivity of the content, the likelihood of harm from exposure, the size and accessibility of the forum, the vulnerability of authors, and whether quotations can be searched to identify individuals. A public post about political preferences may still be sensitive if reproduced in a searchable publication.

Ethically responsible online observation begins with a clear distinction between observation, interaction, intervention, and data extraction. Passive observation of a genuinely open, non-sensitive environment may sometimes present low risk. Entering a restricted group, collecting posts at scale, contacting users, or manipulating visibility changes the ethical profile. Community or moderator permission may be valuable, but it does not necessarily replace individual consent, especially when data are sensitive or identifiable.

Researchers should minimise collection, avoid unnecessary usernames and images, paraphrase quotations where exact wording creates searchability, remove metadata, and consider whether direct publication is justified. Scraping technically accessible data may violate platform rules, user expectations, or privacy interests even when it is not technically difficult. Terms of service are not a complete ethical framework, but they are relevant to responsible governance.

Social-media research also raises issues of consent by association. A participant may post a photograph or conversation involving other people who have not agreed to research use. Researchers should consider whether third parties can be identified and whether their interests require redaction, paraphrase, or exclusion. Automated sentiment analysis and language models can infer health, political, or psychological attributes that users never explicitly disclosed. Inference is a form of data processing with ethical consequences; it should not be treated as harmless because the output is probabilistic.

Human–Computer Interaction Studies

HCI research ranges from usability testing and accessibility evaluation to persuasive interfaces, biometric authentication, immersive environments, recommender systems, and adaptive AI. Ethical review should examine both the participant’s direct experience and the system’s possible downstream effects.

A usability test may involve screen recording, keystroke logging, eye tracking, facial analysis, or collection of interaction histories. Each instrument should have a stated purpose, retention period, access control, and deletion or anonymisation plan. Participants should not be surprised by sensors or recordings. If an interface displays personalised or emotionally manipulative content, researchers should assess whether the intervention creates distress, loss of agency, or unfair treatment.

HCI studies involving children, older adults, people with disabilities, or individuals with low digital literacy require accessible design and realistic testing conditions. Accessibility is not only an outcome variable; it is an ethical requirement of the research process. Interfaces used for consent, withdrawal, and debriefing should support assistive technologies and alternative communication methods.

Researchers should also distinguish laboratory performance from real-world impact. A prototype that improves task completion may increase surveillance or shift decision-making power to an opaque algorithm. Ethical HCI therefore includes questions of contestability, explainability, accessibility, inclusion, environmental burden, and institutional accountability—not merely efficiency or user satisfaction.

A Framework for Ethical Decision-Making

A useful doctoral-level approach is to evaluate a project through six connected questions:

1. Purpose: What knowledge or social value justifies involving people?

2. Necessity: Is human participation, identifiable data, deception, or intrusive measurement genuinely necessary?

3. Risk: What physical, psychological, social, economic, legal, privacy, and group-level harms are foreseeable?

4. Agency: Can people understand the study, refuse freely, withdraw meaningfully, and influence data-use choices?

5. Justice: Who bears the burdens, who benefits, and who is excluded from the knowledge produced?

6. Accountability: Who monitors the study, responds to incidents, controls data, and answers complaints?

This framework should be applied iteratively. Risks may change after recruitment, when a new dataset is linked, when a model is retrained, or when findings are prepared for publication. A data protection impact assessment, threat model, protocol for adverse events, and version-controlled consent record can support the process. Formal approval by an institutional review board or research ethics committee is necessary in many settings, but approval does not transfer moral responsibility from the research team.

Case Study: An Illustrative Study of an AI Well-Being Assistant

Background

A university research group develops an AI chatbot intended to help postgraduate students identify academic stress and locate support services. The proposed study recruits students through university email and social-media advertisements. Participants will use the chatbot for four weeks. The system records conversations, generates stress scores, and adapts its prompts. The research team proposes a single electronic consent form and offers a large completion payment.

Situation and Ethical Problems

Several risks are immediately visible. Students may believe participation affects academic support or that the chatbot is a clinical service. Conversations may contain highly sensitive information. The model may produce inaccurate or harmful advice. Continuous adaptation means that the initial consent form may not adequately explain later uses. Recruitment through faculty staff may create pressure. The large payment may be particularly influential for financially constrained students. Finally, stress scores could be re-identified and used by the university in ways participants did not expect.

Analysis and Approach

The team redesigns recruitment so that an independent research office sends invitations and participation has no relationship to academic assessment or support eligibility. The payment is divided into modest instalments for completed sessions, with compensation for partial participation and expenses. The information sheet states clearly that the chatbot is experimental, is not an emergency or clinical service, and should not replace professional help.

Consent is layered and dynamic. Participants separately choose whether to permit conversation recording, model improvement, linkage with demographic information, and future secondary research. A dashboard allows them to review permissions and request deletion of identifiable records. The study collects only information necessary for the research question, separates contact details from conversation data, limits access, and establishes a short retention period for raw data.

The protocol includes crisis-response procedures, prominent links to human support, a stop function, safety testing before deployment, and human review of serious incidents. The team conducts accessibility testing and offers a non-chatbot comparison activity. The ethics committee requires a pilot with close monitoring before full recruitment.

Outcome

The revised study produces less data than originally planned but generates more defensible evidence. Several pilot participants report that the chatbot’s confident tone made it appear clinically authoritative, leading the team to revise language and interface cues. The dynamic-consent process reveals that many participants want model-improvement use but not identifiable quotation in publications. These preferences shape the data-management plan and publication strategy.

Learning Points

The case illustrates that ethical design can improve scientific quality. Clear boundaries reduce expectancy effects, safety procedures protect participants, and data minimisation reduces confounding privacy risks. It also shows that consent, interface design, payment, recruitment, and governance cannot be treated as separate administrative tasks. In adaptive AI research, ethical review must continue throughout the system lifecycle.

Governance, Data Protection, and Emerging Technologies

Research teams should assign responsibility for data stewardship, access approval, security monitoring, breach response, retention, deletion, and communication with participants. Technical controls may include encryption in transit and at rest, role-based access, multifactor authentication, audit logs, environment separation, secure backups, and controlled data enclaves. These controls reduce risk but do not make ethically unjustified collection acceptable.

Anonymisation should be tested against realistic linkage threats, including publicly available information, distinctive writing styles, timestamps, geolocation, and model-based inference. Small groups and rare attributes are especially difficult to protect. Differential privacy, federated analysis, synthetic data, and secure multiparty computation may reduce exposure, but each introduces trade-offs in utility, transparency, cost, and interpretability.

Generative AI creates new consent questions. Researchers should determine whether participant data are used for training, prompting, evaluation, retrieval, or fine-tuning; whether external providers retain inputs; and whether generated outputs can reproduce identifiable material. Participants should not be promised that a model can forget information unless the technical and organisational process genuinely supports that claim. Automated transcription and coding also require checks for bias, hallucination, accent discrimination, and inappropriate disclosure.

Current ethical practice increasingly emphasises data sovereignty, community governance, algorithmic impact assessment, participatory design, and researcher reflexivity. These developments challenge the assumption that individual consent alone resolves group-level harms. A dataset may affect a community’s representation, cultural identity, or political standing even when every directly identifiable individual has consented.

Common Failures and Best Practices

Frequent failures include treating a click-through form as sufficient consent, collecting more data “just in case,” describing public data as automatically ethical to use, using payment to conceal burdens, recruiting subordinates without safeguards, publishing searchable quotations, failing to plan for withdrawal, and assuming that anonymisation is permanent. Another failure is ethical compartmentalisation: researchers leave privacy to the security team, accessibility to the interface designer, and participant welfare to the ethics committee.

Strong practice begins early in study design. Researchers should map data flows, conduct a risk assessment, consult relevant communities, pilot consent materials, justify every data field, test the study with representative users, document decisions, monitor adverse events, and revise the protocol when assumptions change. They should maintain a plain-language participant record, provide accessible contact routes, report deviations honestly, and disseminate findings without exposing individuals or stigmatising groups.

Chapter Summary

Ethical digital research treats participants as persons and communities rather than as sources of data. Recruitment must be fair and free from undue influence. Informed consent is a continuing process involving comprehension, voluntariness, realistic withdrawal, and transparent data use; dynamic consent can support evolving projects but must remain accessible and proportionate. Deception requires necessity, low risk, careful justification, and meaningful debriefing. Compensation should recognise burden without becoming coercive, while vulnerability requires contextual safeguards rather than exclusion by default.

Online observation and social-media research demand attention to expectations, community boundaries, identifiability, third-party interests, and the difference between technical accessibility and ethical permission. HCI studies must examine recording, accessibility, manipulation, algorithmic effects, and downstream consequences. Data minimisation, security, accountability, impact assessment, and lifecycle oversight are essential, particularly in AI research. Ethical approval is a foundation, not a substitute for continuing judgement.

Key Terms

Autonomy: The capacity and right of a person to make voluntary, informed decisions.

Beneficence: The ethical obligation to promote benefits and reduce foreseeable harm.

Confidentiality: The duty to protect information entrusted to the research team.

Dynamic consent: An ongoing consent process allowing participants to review and modify data-use choices.

Anonymity: A condition in which participant identity cannot reasonably be linked to the data.

Pseudonymity: Use of codes or substitutes for direct identifiers while retaining possible re-identification.

Informed consent: Voluntary agreement based on relevant, understandable information.

Deception: Deliberate withholding or distortion of information in a research study.

Debriefing: Post-study explanation of procedures, deception, risks, and participant options.

Undue influence: Excessive pressure or incentives that impair genuinely voluntary choice.

Vulnerability: A contextual condition that limits autonomy or increases exposure to harm.

Compensation: Payment or reimbursement recognising participation time, effort, inconvenience, or expenses.

Privacy: Appropriate control over access to a person, activity, or information.

Data minimisation: Collection and retention of only the data necessary for a justified purpose.

Re-identification: Linking supposedly de-identified data to an identifiable person.

Human–computer interaction: Study and design of interactions between people and computational systems.

Social-media research: Systematic study of content, behaviour, or interaction on social platforms.

Ethics review: Formal assessment of a proposed study’s ethical acceptability and safeguards.

Review Questions

Short Answer Questions

1. Distinguish privacy, confidentiality, anonymity, and pseudonymity.

2. Why is a signed consent form not by itself sufficient to establish informed consent?

3. What is dynamic consent, and why might it be useful in digital research?

4. Identify two safeguards for recruiting participants who occupy a subordinate institutional position.

5. Why is publicly accessible online information not automatically ethically unrestricted research data?

Long Answer Questions

1. Explain how autonomy, beneficence, justice, and privacy interact in the design of a digital research study.

2. Discuss the ethical conditions under which deception may be justified and analyse the role of debriefing.

3. Design a consent and data-governance plan for an HCI study involving screen recordings, eye tracking, and adaptive AI.

4. Analyse the ethical risks of social-media scraping, including community expectations, third-party information, and re-identification.

5. Explain how researchers can protect vulnerable participants without unjustifiably excluding them from research.

Analytical / Application Questions

1. A researcher wants to quote verbatim posts from a small private online group after obtaining moderator permission. Evaluate whether individual consent, paraphrasing, or exclusion of quotations is most defensible, and justify your decision.

2. An experimental chatbot withholds its true research purpose to measure trust. Construct a decision analysis addressing necessity, risk, alternatives, debriefing, and withdrawal.

3. A university plans to link student wellbeing-chat records with academic performance data for machine-learning research. Identify the ethical problems and propose a proportionate redesign.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes confidentiality from anonymity?

A. Confidentiality means data are deleted immediately, while anonymity means data are encrypted.

B. Confidentiality concerns protecting entrusted information, while anonymity means identity cannot reasonably be linked to data.

C. Confidentiality applies only to medical research, while anonymity applies only to online research.

D. Confidentiality requires public disclosure, while anonymity requires moderator approval.

Correct Answer: B. Confidentiality concerns protecting entrusted information, while anonymity means identity cannot reasonably be linked to data.

Question 2

What is the strongest ethical reason to use dynamic consent in an evolving digital study?

A. It eliminates the need for ethics review.

B. It allows researchers to collect unlimited data without further explanation.

C. It enables participants to review and modify choices as data uses change.

D. It guarantees that all participants will understand technical systems.

Correct Answer: C. It enables participants to review and modify choices as data uses change.

Question 3

A lecturer wishes to recruit current students for a study. Which safeguard most directly reduces undue influence?

A. Offer a very large completion payment.

B. Recruit through an independent office and separate participation from grading.

C. Tell students that participation is expected but technically voluntary.

D. Allow the lecturer to know who declined.

Correct Answer: B. Recruit through an independent office and separate participation from grading.

Question 4

Which condition is most important when evaluating proposed deception?

A. Whether deception makes recruitment faster.

B. Whether participants are unlikely to notice it.

C. Whether it is scientifically necessary and no lower-risk alternative exists.

D. Whether the study uses an online platform.

Correct Answer: C. Whether it is scientifically necessary and no lower-risk alternative exists.

Question 5

Why may a verbatim quotation from a public social-media post still create privacy risk?

A. Public posts cannot be analysed scientifically.

B. Search engines may enable identification of the author or community.

C. Researchers are prohibited from studying written language.

D. A quotation automatically becomes anonymous when published.

Correct Answer: B. Search engines may enable identification of the author or community.

Question 6

Which payment arrangement is generally most protective when participants may experience discomfort during a study?

A. Payment only if the participant completes every procedure.

B. A penalty for withdrawing before completion.

C. Pro-rata payment for completed participation, with reasonable expense reimbursement.

D. Payment determined by the participant’s personal income.

Correct Answer: C. Pro-rata payment for completed participation, with reasonable expense reimbursement.

Question 7

Which action best reflects data minimisation?

A. Collecting all potentially useful identifiers for future convenience.

B. Retaining raw recordings indefinitely in case another project needs them.

C. Collecting and retaining only data necessary for the justified research purpose.

D. Publishing the full dataset so participants can verify it.

Correct Answer: C. Collecting and retaining only data necessary for the justified research purpose.

Question 8

In the illustrative AI well-being assistant case, why was the system’s clinical status made explicit?

A. To increase the chatbot’s authority.

B. To prevent participants from mistaking an experimental system for professional care.

C. To avoid providing any support information.

D. To justify collecting more sensitive conversations.

Correct Answer: B. To prevent participants from mistaking an experimental system for professional care.

Question 9

Which statement about vulnerability is most ethically defensible?

A. Vulnerable groups should always be excluded from digital research.

B. Vulnerability is fixed and applies identically in every research setting.

C. Vulnerability is contextual and should prompt specific safeguards rather than automatic exclusion.

D. Vulnerability is relevant only when participants are minors.

Correct Answer: C. Vulnerability is contextual and should prompt specific safeguards rather than automatic exclusion.

Question 10

Why is pseudonymisation insufficient as a complete privacy guarantee?

A. Pseudonymous data cannot be used for research.

B. Codes may be linked with other information to re-identify individuals.

C. Pseudonymisation requires publishing names.

D. Pseudonymous data are always more identifiable than direct identifiers.

Correct Answer: B. Codes may be linked with other information to re-identify individuals.

Research Ethics & Computer Applications
Chapter 4 of 14

Research Ethics & Computer Applications

Chapter 5
Research Design, Risk–Benefit Analysis, and Ethical Protocols

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

5. Research Design, Risk–Benefit Analysis, and Ethical Protocols

Introduction and Context

Ethical research is not created by adding a consent form to an otherwise completed study. Ethics is embedded in the way a research problem is framed, the evidence is produced, participants are selected, technologies are configured, and findings are communicated. Research design and research ethics are therefore mutually dependent. A methodologically weak study may expose people, communities, institutions, or environments to burdens without producing reliable knowledge. Conversely, a scientifically valuable study may still be unethical if it distributes risks unfairly, excludes relevant groups, conceals conflicts of interest, or treats data subjects merely as sources of information.

This relationship is especially important in information technology research. Studies involving artificial intelligence, cybersecurity, digital health, learning analytics, biometric systems, online communities, human–computer interaction, and large-scale data frequently involve indirect observation, automated decision-making, re-identification risks, and complex power relationships. Researchers may not physically intervene in participants’ lives, yet their work can influence employment, access to services, reputation, privacy, safety, and democratic participation.

An ethical protocol is consequently more than an administrative submission to a research ethics committee. It is a reasoned account of how a study will generate valid knowledge while respecting persons, promoting welfare, distributing burdens fairly, protecting information, and remaining accountable to affected stakeholders. This chapter develops an integrated approach to scientific validity, proportionality, stakeholder analysis, conflicts of interest, harm mitigation, inclusion, cultural sensitivity, and ethics-by-design.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain why scientific validity is an ethical requirement.

2. Distinguish risks, burdens, benefits, uncertainties, and vulnerabilities in research.

3. Apply proportionality and stakeholder analysis to research planning.

4. Identify and manage financial, professional, institutional, and intellectual conflicts of interest.

5. Design protocols that incorporate inclusion, accessibility, cultural sensitivity, privacy, and security.

6. Evaluate ethical issues in automated, data-intensive, and AI-enabled research.

7. Construct a defensible risk–benefit assessment and mitigation plan.

8. Critically assess ethical protocols and recognize their limitations.

Scientific Validity as an Ethical Obligation

Scientific validity concerns whether a study can answer its stated question using appropriate concepts, methods, evidence, and analysis. It includes a coherent research question, suitable design, credible sampling, reliable measurement, appropriate analysis, transparent reporting, and a realistic implementation plan. Validity is not only a methodological virtue. It is an ethical condition because participants assume burdens—such as time, inconvenience, exposure of information, or possible distress—in the expectation that their contribution may produce useful knowledge.

A study that is incapable of producing interpretable findings cannot justify those burdens. For example, an intervention study with an inadequate comparison group may expose participants to experimental conditions while making it impossible to determine whether the intervention worked. A machine-learning study based on biased or unusable data may generate apparently precise outputs that are not fit for deployment. A survey with a leading instrument may waste participants’ time and produce misleading conclusions that affect policy.

Scientific validity should be assessed at several levels:

  • Conceptual validity: Do the constructs being studied correspond to the research question?
  • Design validity: Can the chosen design support the proposed inference?
  • Measurement validity: Are variables measured accurately and consistently?
  • Statistical or computational validity: Are the analytical procedures appropriate, reproducible, and sufficiently powered?
  • Ecological and contextual validity: Do the findings have meaning in the setting and population under study?
  • Reporting validity: Are limitations, missing data, uncertainty, and deviations disclosed honestly?

At doctoral level, researchers must also distinguish exploratory, descriptive, predictive, and causal claims. A predictive model may identify correlations without establishing causes. A technically high-performing system may perform poorly for underrepresented groups. A statistically significant result may have little practical or social importance. Ethical review should therefore examine not only whether a method is technically competent, but also whether the proposed claims are proportionate to the evidence.

From Risk–Benefit Assessment to Proportionality

Risk is the possibility that a research activity will produce harm, together with the seriousness and likelihood of that harm. Harm may be physical, psychological, social, economic, legal, reputational, informational, cultural, or environmental. In IT research, informational and inferential harms are particularly important. A dataset may reveal sensitive characteristics even when direct identifiers have been removed; a model may infer health status, political preference, or vulnerability from apparently ordinary behavioral data.

Benefits may accrue directly to participants, to a participating organization, to a community, to future users, or to society. Researchers should distinguish anticipated benefits from speculative promises. Access to a study intervention is not necessarily a benefit if its effectiveness is unknown. Nor should a researcher describe publication, academic recognition, or commercial gain as a participant benefit unless this is relevant and transparently presented.

A useful risk–benefit assessment asks:

1. What could go wrong, and who could be affected?

2. How severe would each harm be?

3. How probable is it, given the design and context?

4. How long might the harm last, and can it be reversed?

5. Who receives the benefits, and who bears the burdens?

6. Could the same knowledge be obtained with less risk?

7. What uncertainties remain, and how will they be monitored?

Proportionality is the principle that the expected value and social importance of a study must justify its residual risks and burdens. Proportionality does not mean that risk must be eliminated; many valuable studies involve some uncertainty. It means that risks should be reasonable in relation to the importance of the question, the quality of the design, the availability of safeguards, and the distribution of benefits and burdens.

A practical assessment can classify risk as minimal, moderate, substantial, or high, but labels alone are insufficient. “Minimal risk” is context-dependent. A data breach involving an ordinary preference may be inconvenient, whereas disclosure of immigration status, medical information, or political activity may have severe consequences. The assessment should document both severity and likelihood, rather than relying on a single aggregate score.

Risk management follows a hierarchy:

1. Avoidance: Remove unnecessary data collection or eliminate a hazardous procedure.

2. Substitution: Use a less intrusive measure, simulated environment, or synthetic data.

3. Reduction: Minimize sample exposure, collect fewer identifiers, or shorten participation.

4. Protection: Apply access controls, encryption, monitoring, training, and support.

5. Response: Establish procedures for adverse events, complaints, breaches, withdrawal, and incident reporting.

6. Review: Reassess risk when the protocol, technology, population, or context changes.

Residual risk is the risk remaining after safeguards have been applied. Ethical approval should concern residual risk, not merely the risk of the original design.

Stakeholders, Power, and the Distribution of Burden

Stakeholder analysis extends ethical review beyond enrolled participants. Stakeholders may include direct participants, non-participant data subjects, families, communities, employees, students, service users, researchers, institutions, funders, technology vendors, regulators, future users, and groups affected by deployment. In digital research, a person can be affected without ever consenting to participate. For example, a workplace monitoring study may use employee records that influence colleagues who are not included in interviews; a public social-media dataset may contain information about bystanders; an algorithm evaluated in one hospital may later affect patients outside the study.

Stakeholder analysis should identify interests, vulnerabilities, decision-making power, exposure to harm, and capacity to benefit. A simple matrix can classify stakeholders according to influence and impact, but researchers should avoid assuming that powerful institutions represent less powerful groups. Consultation with a university, company, or community leader does not automatically constitute consent from individuals.

Power relationships can distort voluntariness. Employees may feel unable to refuse a manager’s invitation. Students may believe that participation affects grades. Patients may fear that refusal will affect care. Researchers should separate recruitment from authority where possible, use neutral communication, make non-participation genuinely consequence-free, and provide private channels for questions and withdrawal.

Justice requires attention to the distribution of research benefits and burdens. Convenience sampling can repeatedly place burdens on accessible or disadvantaged groups while the benefits flow to institutions, commercial partners, or affluent users. Inclusion does not mean enrolling every possible population. It means providing a defensible reason for inclusion and exclusion, ensuring that exclusion is not caused by avoidable barriers, and adapting procedures to accessibility, language, technology access, and cultural context.

Inclusion, Cultural Sensitivity, and Respectful Engagement

Inclusive design begins before recruitment. Researchers should examine whether eligibility criteria unnecessarily exclude people with disabilities, limited digital access, minority-language backgrounds, older age, or different cultural practices. Instruments should be tested for linguistic and cultural appropriateness rather than translated mechanically. Accessibility may require screen-reader compatibility, captions, alternative input methods, flexible scheduling, low-bandwidth options, or assistance that does not compromise privacy.

Cultural sensitivity is more than politeness. It concerns the validity and ethical meaning of research in a particular social context. Concepts such as privacy, family authority, individual consent, data ownership, and acceptable disclosure may vary across communities. Researchers must avoid both cultural imposition and cultural romanticization. Community consultation can reveal risks invisible to an external research team, but consultation does not replace individual consent when individual participation is involved.

Some communities may possess collective interests in data, knowledge, images, language, or cultural practices. Researchers should clarify who may authorize access, how findings will be returned, whether secondary use is acceptable, and whether commercial exploitation is contested. Community engagement should be continuous where feasible, including during interpretation and dissemination. Reciprocity may involve accessible findings, training, infrastructure, compensation, or opportunities for community review, but it should not become a form of inducement that undermines voluntary participation.

Compensation must reimburse time and expenses fairly without becoming so large that it pressures economically vulnerable participants. Researchers should distinguish compensation from benefits and disclose payment schedules, tax implications where relevant, and whether partial participation receives partial payment.

Ethical Protocols as Living Documents

An ethical protocol translates ethical commitments into operational decisions. It should describe:

  • the research question, rationale, design, and anticipated contribution;
  • participant groups, recruitment channels, inclusion and exclusion criteria;
  • consent procedures, comprehension checks, withdrawal arrangements, and compensation;
  • data categories, collection methods, ownership, access, retention, deletion, and sharing;
  • foreseeable risks, benefits, vulnerabilities, and mitigation measures;
  • privacy, confidentiality, cybersecurity, and breach-response arrangements;
  • conflicts of interest and independence of analysis;
  • procedures for adverse events, complaints, incidental findings, and protocol deviations;
  • responsibilities of investigators, partners, vendors, and data processors;
  • dissemination, authorship, intellectual property, and return of results.

Consent should be a process rather than a single signature. Meaningful consent requires understandable information, adequate time, freedom from undue influence, and an opportunity to ask questions. Digital consent interfaces should not conceal important information in lengthy legal text or use manipulative defaults. For longitudinal or adaptive studies, researchers may need re-consent when the purpose, data uses, risk level, or technology changes materially.

Privacy and confidentiality are related but distinct. Privacy concerns the person’s control over access to themselves and their information; confidentiality concerns the researcher’s duty to protect information entrusted to them. De-identification reduces risk but does not guarantee anonymity. Re-identification may occur through linkage, rare attributes, timestamps, facial images, location traces, or model outputs. Data minimization, pseudonymization, separation of identifiers, role-based access, encryption, secure deletion, logging, and controlled sharing are therefore parts of the ethical design, not merely technical enhancements.

Conflicts of Interest and Research Independence

A conflict of interest exists when a secondary interest could unduly influence professional judgment or create a reasonable perception of compromised independence. Conflicts may be financial, institutional, personal, relational, professional, ideological, or intellectual. Examples include equity in a company whose product is being evaluated, funding from a vendor, a supervisor assessing a subordinate’s performance, or a researcher seeking confirmation of a favored theory.

A conflict is not necessarily misconduct. The ethical requirement is recognition, disclosure, assessment, and management. Management may involve independent recruitment, blinded analysis, separation of sponsor and investigator decisions, independent data monitoring, preregistration, audit trails, independent statistical review, publication guarantees, or recusal from particular decisions. Disclosure alone is inadequate when the conflict is substantial and controllable safeguards are available.

Contracts deserve careful scrutiny. Sponsors should not have unrestricted control over data interpretation, adverse-event reporting, or publication. Researchers should identify who owns data, who can access source code, whether negative results will be reported, and what happens if the sponsor disputes the findings. Institutional prestige and career incentives can also threaten independence, even when no money is involved.

Ethics-by-Design in Computer Applications Research

Ethics-by-design integrates ethical analysis into system architecture, workflow, and evaluation from the beginning. It is analogous to security-by-design and privacy-by-design, but it also addresses fairness, explainability, accessibility, contestability, sustainability, and human oversight.

For an AI or automated decision system, an ethics-by-design process may include:

1. Defining the legitimate purpose and prohibited uses.

2. Mapping affected stakeholders, including non-users and vulnerable groups.

3. Assessing data provenance, consent, representativeness, and quality.

4. Selecting performance and fairness measures appropriate to the context.

5. Minimizing collection and retaining only necessary data.

6. Designing human review, appeal, correction, and override mechanisms.

7. Testing under realistic conditions and across relevant subgroups.

8. Documenting assumptions, limitations, model changes, and uncertainty.

9. Monitoring drift, disparate impact, misuse, and unexpected consequences.

10. Establishing clear accountability when the system fails.

No single fairness metric resolves every ethical problem. Equal error rates, demographic parity, calibration, and individual fairness can conflict, especially when base rates differ. Metric selection must therefore be justified in relation to the decision’s purpose, stakes, and affected communities. Technical fairness is also insufficient if the underlying decision should not be automated or if people lack meaningful opportunity to challenge it.

Generative AI introduces additional concerns: fabricated outputs, leakage of confidential material, opaque training data, automated profiling, authorship ambiguity, and overreliance by researchers or participants. Protocols should specify whether AI tools may be used, what data may be entered, how outputs will be verified, and how human responsibility will be maintained. AI should not be treated as an ethical reviewer capable of replacing contextual judgment.

An Integrated Protocol Development Process

A robust protocol can be developed through the following sequence.

First, formulate the knowledge claim. State what the study will establish, what it will not establish, and why the question matters. This prevents inflated claims from justifying intrusive methods.

Second, map the research system. Identify participants, data subjects, institutions, technologies, vendors, decision-makers, and downstream users. Trace data flows from collection to deletion or publication.

Third, identify vulnerabilities and power. Ask who can refuse freely, who may be exposed indirectly, whose language or access needs are overlooked, and who controls resources or outcomes.

Fourth, compare design alternatives. Consider whether the study can use less data, a smaller sample, synthetic data, simulation, aggregation, staged deployment, or secondary data with stronger protections.

Fifth, assess risks and benefits. Record severity, probability, duration, reversibility, affected stakeholders, uncertainty, and mitigation. Separate direct benefits from societal or speculative benefits.

Sixth, build safeguards into procedures and systems. Assign responsibility for each safeguard and define how compliance will be checked.

Seventh, plan consent, communication, and remedy. Participants should know what will happen, how to withdraw, whom to contact, and what support is available if harm occurs.

Eighth, establish monitoring and stopping rules. Define conditions for pausing recruitment, modifying the protocol, reporting incidents, or terminating the study.

Ninth, obtain independent review. Ethical review should occur before implementation and whenever material changes occur. Independence is particularly important where investigators, institutions, or funders have strong interests in continuation.

Tenth, report responsibly. Publish methods, limitations, exclusions, missingness, adverse events, conflicts, and relevant negative findings. Responsible dissemination prevents technically correct results from being misleading in practice.

Illustrative Case Study: Predictive Analytics in Student Support

Background

A university proposes an early-warning system that uses learning-management-system activity, assessment results, attendance records, and demographic information to predict which students may discontinue their studies. Advisers will receive risk scores and may contact students with offers of academic and financial support. The project is presented as a way to improve retention and allocate scarce support resources.

Situation and Ethical Problem

The research team wants to train a model using five years of historical data. Students were not originally told that their activity would be used for predictive profiling. Some demographic variables improve predictive performance, but their use may reproduce historical inequality. Students may also feel stigmatized if contacted because a system classifies them as “at risk.” The university’s technology partner requests access to identifiable data and hopes to commercialize a similar product.

Analysis

The study has potential social benefit, but its validity and ethical acceptability are uncertain. Historical withdrawal patterns may reflect institutional barriers rather than individual deficiencies. A high-performing model may therefore predict disadvantage without identifying a fair or effective intervention. False positives could burden students with unwanted attention, while false negatives could leave vulnerable students unsupported.

Stakeholders include students, advisers, instructors, the university, the vendor, future cohorts, and groups historically underserved by the institution. Students have limited ability to avoid data generation if learning systems are compulsory. The vendor’s commercial interest is a conflict requiring disclosure and strict data governance.

The research team should determine whether all proposed variables are necessary, whether consent or another legitimate governance basis is appropriate, and whether students can meaningfully object. It should examine subgroup performance, missing data, proxy discrimination, and the consequences of intervention. Advisers must not treat a score as a fact, and students should have access to understandable explanations and a route to challenge inaccurate information.

Approach and Safeguards

The team redesigns the project in stages. First, it conducts a retrospective feasibility analysis using de-identified and aggregated data. It excludes highly intrusive features, such as private message content and precise location traces. It evaluates subgroup error rates and consults student representatives, disability services, advisers, and data-protection specialists.

A prospective pilot then uses a limited set of validated indicators. Risk scores are visible only to trained advisers, are treated as prompts for supportive conversation rather than automated decisions, and cannot affect grades, discipline, or eligibility for services. Students receive clear information about the pilot, available support, data use, retention, and complaint procedures. The vendor receives only the minimum data necessary under a contract prohibiting unrelated use, re-identification, and commercialization.

The protocol includes independent evaluation, a stopping rule for evidence of disparate harm, regular model review, secure access logs, deletion schedules, and a commitment to publish limitations and negative results. Support is offered universally through accessible channels so that students are not required to accept a label in order to obtain help.

Outcome

The pilot demonstrates that the model’s overall accuracy is moderate and that performance differs across student groups. The university decides not to automate eligibility decisions. Instead, it uses the findings to improve general advising capacity and address structural barriers identified through consultation. The predictive model remains a limited research tool rather than a gatekeeping mechanism.

Learning Points

The case illustrates that predictive accuracy does not establish ethical acceptability. Scientific validity requires examining what the model predicts and whether the predicted outcome is actionable. Proportionality favors staged evaluation and data minimization. Inclusion requires subgroup analysis and participation by affected communities. Ethics-by-design requires human judgment, contestability, governance, and the possibility of not deploying a technically feasible system.

Challenges, Limitations, and Common Errors

Ethical protocols can become bureaucratic documents detached from actual practice. A carefully written plan may fail if researchers misunderstand the technology, if staff are inadequately trained, or if incentives reward rapid recruitment and positive results. Risk assessments may also underestimate harms that are indirect, cumulative, delayed, or distributed across populations.

Common errors include treating anonymization as absolute, obtaining broad consent without meaningful explanation, using vulnerable groups because they are easy to access, confusing institutional permission with participant consent, promising confidentiality that cannot be guaranteed, ignoring non-participant data subjects, and disclosing conflicts only after publication. Another error is applying generic ethical checklists without examining the social meaning of the particular technology.

Ethical review also has limitations. Committees may lack specialized expertise in machine learning, cybersecurity, disability, Indigenous data governance, or local cultural practice. Review takes place under uncertainty, while digital systems may evolve after approval. Continuous governance, community engagement, technical auditing, and post-deployment monitoring are therefore necessary complements to initial review.

Researchers should resist ethical overconfidence. A safeguard can reduce one risk while creating another: identity verification may improve data quality but increase surveillance; model transparency may reveal sensitive information; extensive data retention may support reproducibility but expand breach exposure. Ethical judgment requires examining trade-offs rather than declaring a design simply “ethical.”

Current Developments and Professional Practice

Contemporary research governance increasingly emphasizes data stewardship, algorithmic impact assessment, reproducibility, responsible innovation, and participatory approaches. Researchers are expected to document datasets and models, justify secondary use, evaluate distributional effects, and monitor systems beyond the point of publication. Open science can strengthen accountability, but open release must be balanced against privacy, security, intellectual property, and the risk of enabling misuse.

Doctoral researchers should cultivate an ethics vocabulary that extends beyond compliance. They should be able to explain why a design is valid, whose interests it serves, what uncertainty remains, and how affected people can influence or challenge the work. Supervisors and institutions should create environments in which researchers can report ethical concerns without retaliation and can pause a project when conditions change.

Best Practices for Researchers

  • Link every participant burden to a clearly justified knowledge claim.
  • Prefer the least intrusive design capable of answering the question.
  • Analyze direct, indirect, cumulative, and downstream harms.
  • Involve affected stakeholders before finalizing the protocol.
  • Treat consent as ongoing and understandable.
  • Minimize data and specify retention, access, deletion, and breach procedures.
  • Test technologies across relevant populations and document uncertainty.
  • Disclose and actively manage conflicts of interest.
  • Provide accessible recruitment, participation, feedback, and complaint processes.
  • Build human oversight, correction, appeal, and stopping mechanisms into automated systems.
  • Reassess ethics when methods, data, partners, populations, or uses change.
  • Report limitations, negative results, exclusions, and incidents honestly.

Chapter Summary

Ethical research design integrates scientific validity with respect for persons, welfare, justice, accountability, and social responsibility. A study must be capable of producing meaningful knowledge before its risks can be justified. Risk–benefit assessment should consider severity, probability, duration, reversibility, uncertainty, and the distribution of burdens and benefits. Proportionality supports the least intrusive design that can answer an important question.

Stakeholder analysis reveals power relationships and identifies people affected indirectly by data or technology. Inclusion and cultural sensitivity improve both fairness and validity when they shape recruitment, measurement, interpretation, and dissemination. Conflicts of interest require disclosure and active management, not merely a statement in a publication. Ethical protocols should operate as living documents with monitoring, incident response, and independent review.

In computer applications research, ethics-by-design incorporates privacy, security, fairness, accessibility, explainability, human oversight, contestability, and accountability into system development. AI and predictive systems must be evaluated not only for accuracy but also for purpose, distributional effects, actionability, and the consequences of error. Ethical research is therefore a continuing practice of justified design, critical reflection, stakeholder engagement, and responsible governance.

Key Terms

Scientific validity: The extent to which a study can reliably answer its stated research question.

Risk: The possibility and significance of harm resulting from research activity.

Benefit: A valuable outcome reasonably expected from research for participants or society.

Proportionality: The requirement that justified benefits and knowledge outweigh residual risks and burdens.

Residual risk: Risk remaining after safeguards have been implemented.

Stakeholder: A person, group, institution, or entity affected by or able to influence research.

Vulnerability: A condition that may limit autonomy or increase exposure to harm.

Justice: Fair distribution of research burdens, benefits, opportunities, and protections.

Informed consent: Voluntary agreement based on understandable and sufficient information.

Privacy: A person’s interest in controlling access to themselves and their information.

Confidentiality: The duty to protect information entrusted to the researcher.

Data minimization: Collection and retention of only the data necessary for a justified purpose.

Conflict of interest: A secondary interest that may improperly influence professional judgment.

Ethics-by-design: Incorporating ethical requirements into system and research design from the outset.

Contestability: The capacity of affected persons to question, challenge, or appeal a decision.

De-identification: Modification of data to reduce links to identifiable individuals.

Adverse event: An unexpected or harmful occurrence associated with research participation.

Protocol deviation: A departure from an approved research procedure.

Stakeholder engagement: Structured involvement of affected or interested parties in research decisions.

Algorithmic impact assessment: A systematic examination of the effects and risks of an automated system.

Review Questions

Short Answer Questions

1. Why is scientific validity considered an ethical requirement?

2. Distinguish privacy from confidentiality.

3. What is meant by residual risk?

4. Identify two ways in which power relationships can affect voluntary consent.

5. Why is disclosure alone insufficient for managing a serious conflict of interest?

Long Answer Questions

1. Explain proportionality in research ethics and describe how it should guide the selection of research methods.

2. Discuss how stakeholder analysis can reveal harms that are not visible when researchers focus only on enrolled participants.

3. Examine the relationship between inclusion, cultural sensitivity, and scientific validity.

4. Describe the contents of a strong ethical protocol for an IT research project involving personal data.

5. Explain how ethics-by-design should shape the development and evaluation of an AI-based decision system.

Analytical / Application Questions

1. A researcher proposes to analyze publicly available social-media posts to infer users’ mental-health status. Apply stakeholder analysis and risk–benefit reasoning to determine what safeguards are required.

2. A company funding a cybersecurity study asks to review results before publication and suppress findings that may damage its reputation. Identify the conflict-of-interest issues and propose governance measures.

3. An automated university admissions tool has high overall accuracy but substantially higher false-negative rates for applicants with disabilities. Analyze whether deployment is ethically defensible and recommend a revised protocol.

22. Multiple Choice Questions with Answers

Question 1

Why is scientific validity an ethical requirement in research?

A. It guarantees that every participant receives a direct benefit.

B. It ensures that participant burdens are connected to a credible prospect of producing useful knowledge.

C. It eliminates all possible research risks.

D. It permits researchers to avoid independent ethical review.

Correct Answer: B. It ensures that participant burdens are connected to a credible prospect of producing useful knowledge.

Question 2

Which action best represents data minimization?

A. Collecting every available variable for possible future analysis.

B. Retaining identifiable records indefinitely for reproducibility.

C. Collecting and retaining only data necessary for the justified research purpose.

D. Sharing raw data publicly before analysis.

Correct Answer: C. Collecting and retaining only data necessary for the justified research purpose.

Question 3

A residual risk is best defined as:

A. A risk that exists only before consent is obtained.

B. A risk remaining after safeguards have been applied.

C. A risk created only by financial sponsors.

D. A risk that cannot affect non-participants.

Correct Answer: B. A risk remaining after safeguards have been applied.

Question 4

Which situation most clearly creates a power-related concern about consent?

A. A researcher invites volunteers through a public advertisement.

B. A university lecturer recruits students and implies that participation may influence grades.

C. A community organization distributes a neutral study notice.

D. A participant contacts a researcher independently.

Correct Answer: B. A university lecturer recruits students and implies that participation may influence grades.

Question 5

Which is the strongest response to a substantial conflict of interest?

A. Mentioning it only in an unpublished internal document.

B. Assuming professional integrity makes safeguards unnecessary.

C. Disclosing it and introducing measures such as independent analysis or recusal.

D. Allowing the sponsor to control publication decisions.

Correct Answer: C. Disclosing it and introducing measures such as independent analysis or recusal.

Question 6

Why does de-identification not guarantee anonymity?

A. De-identified data cannot be analyzed.

B. Identifiers may be reconstructed through linkage or rare attributes.

C. Encryption automatically reverses de-identification.

D. Anonymity applies only to paper records.

Correct Answer: B. Identifiers may be reconstructed through linkage or rare attributes.

Question 7

In the illustrative student-support case, why was high predictive accuracy insufficient to justify automated decisions?

A. Accuracy is never relevant to ethical evaluation.

B. The model could predict disadvantage without identifying fair or effective interventions and could distribute errors unequally.

C. Students are never permitted to receive support based on research.

D. Predictive models cannot be used with historical data.

Correct Answer: B. The model could predict disadvantage without identifying fair or effective interventions and could distribute errors unequally.

Question 8

Which feature is most consistent with ethics-by-design for an automated decision system?

A. Removing all human review to improve efficiency.

B. Using one fairness metric without considering the decision context.

C. Providing monitoring, explanation, appeal, correction, and human override mechanisms.

D. Expanding data collection whenever performance decreases.

Correct Answer: C. Providing monitoring, explanation, appeal, correction, and human override mechanisms.

Question 9

What is the most ethically appropriate reason to compare less intrusive research designs?

A. To avoid producing any scientifically significant result.

B. To select the design capable of answering the question while reducing unnecessary risk.

C. To ensure that the research requires no participant consent.

D. To transfer all responsibility to the technology vendor.

Correct Answer: B. To select the design capable of answering the question while reducing unnecessary risk.

Question 10

Which statement best describes an ethical protocol?

A. A one-time administrative form that remains unchanged after approval.

B. A living operational plan covering design, consent, data governance, risks, monitoring, and response procedures.

C. A contract that protects only the research sponsor.

D. A technical description that excludes social and cultural issues.

Correct Answer: B. A living operational plan covering design, consent, data governance, risks, monitoring, and response procedures.

Research Ethics & Computer Applications
Chapter 5 of 14

Research Ethics & Computer Applications

Chapter 6
Privacy, Confidentiality, and Cybersecurity

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

6. Privacy, Confidentiality, and Cybersecurity

Introduction and Context

Digital research and computer applications depend on the collection, processing, transmission, and storage of information. The same technologies that enable large-scale scientific discovery, personalized services, remote collaboration, and automated decision-making also create conditions in which individuals may be identified, monitored, manipulated, or harmed. Privacy, confidentiality, and cybersecurity are therefore not separate technical concerns. They are interconnected dimensions of responsible information practice.

Privacy concerns the legitimate interests of individuals and groups in controlling information about themselves and in being free from unjustified observation or interference. Confidentiality concerns the obligation to prevent information entrusted to an organization or researcher from being disclosed to unauthorized parties. Cybersecurity concerns the protection of information systems, networks, devices, and data against compromise of confidentiality, integrity, and availability. A system may be technically secure but ethically objectionable if it collects excessive data. Conversely, a research project may have an ethically sound purpose but still fail if weak access controls expose participants' records.

At doctoral level, these issues require more than compliance with a checklist. Researchers and information technology professionals must analyze competing interests, anticipate adversarial behavior, understand the limits of technical safeguards, and justify decisions through principles of proportionality, accountability, fairness, and respect for persons. This chapter develops an integrated approach to privacy risk assessment and protection across the information life cycle.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Distinguish privacy, confidentiality, security, anonymity, pseudonymity, and related concepts.

2. Assess privacy and cybersecurity risks across the data life cycle.

3. Apply data minimization, purpose limitation, anonymization, pseudonymization, encryption, and access control.

4. Design secure computing and incident-response practices for research and organizational environments.

5. Evaluate privacy-enhancing technologies and their limitations.

6. Analyze ethical, legal, governance, and professional responsibilities associated with personal and sensitive data.

7. Critically assess emerging challenges involving artificial intelligence, re-identification, surveillance, and large-scale data integration.

Privacy, Confidentiality, and Security as Related but Distinct Ideas

Privacy is a normative and social concept. It includes control over personal information, appropriate freedom from surveillance, and the ability to make decisions without unjustified intrusion. Privacy is contextual: information shared with a physician, research team, employer, or social platform may be appropriate in one relationship but inappropriate when reused for another purpose. Privacy is not equivalent to secrecy; a person may willingly disclose information in a particular context while still expecting limits on its use.

Confidentiality is a duty arising from a relationship of trust. A participant may provide medical data to a researcher on the understanding that it will not be revealed in identifiable form. An employee may disclose information to an internal auditor subject to professional confidentiality. Confidentiality can be breached even when data were collected lawfully and the system was not externally hacked.

Cybersecurity is the set of organizational, technical, and human measures used to protect systems and information. The familiar confidentiality-integrity-availability model is useful. Confidentiality limits access to authorized persons; integrity protects accuracy, completeness, and resistance to unauthorized alteration; and availability ensures that legitimate users can obtain information and services when needed. Modern security analysis also considers authenticity, accountability, resilience, safety, and privacy.

Anonymity means that a person cannot reasonably be identified from the information available to the relevant party. Pseudonymity replaces direct identifiers with a code or pseudonym, but a separately held key or additional information can reconnect the record to an individual. Thus pseudonymized data remain potentially personal data and require protection. De-identification is a broad term for reducing identifiability; it does not necessarily guarantee anonymity.

The Data Life Cycle and Risk Surface

Privacy and security should be considered from the moment a project is conceived rather than after a database has been built. A typical life cycle includes collection, transmission, storage, use, sharing, retention, archival, and destruction. Each stage creates different risks.

During collection, risks include excessive data fields, deceptive interfaces, invalid consent, covert observation, and collection of sensitive information without adequate justification. During transmission, interception, endpoint compromise, misdirected email, and insecure application programming interfaces may expose data. Storage risks include weak authentication, unpatched systems, poorly configured cloud services, insider misuse, ransomware, and inadequate backups. During use, linkage with other datasets, algorithmic profiling, secondary use, and unauthorized inference may violate expectations even where direct identifiers are absent. Retention creates continuing exposure and may conflict with the principle that data should not be kept longer than necessary. Destruction is also a security process: deleted files may remain recoverable on drives, backups, or cloud replicas.

A useful risk assessment identifies assets, threats, vulnerabilities, impacts, and controls. An asset may be a participant dataset, encryption key, server, identity record, or research result. A threat is a potential source of harm, such as an external attacker, malicious insider, accidental disclosure, or flawed algorithm. A vulnerability is a weakness that permits the threat to operate. Risk is not merely the presence of a threat; it reflects the likelihood and consequences of exploitation. Impact analysis should include financial loss, discrimination, physical danger, reputational damage, legal consequences, loss of autonomy, and harm to scientific validity.

Principles for Responsible Data Governance

Data minimization requires collecting and retaining only the information necessary for a defined and legitimate purpose. It is not simply a matter of reducing storage costs. Fewer data elements reduce attack surface, limit opportunities for misuse, and make ethical justification more credible. Researchers should ask whether a variable is essential, whether it can be collected at a lower level of precision, and whether a temporary or local computation can replace centralized storage.

Purpose limitation requires that data be used consistently with the purposes communicated and justified at collection. A dataset gathered for health research should not automatically be repurposed for employment screening or law-enforcement profiling. Secondary use may sometimes be justified, but it requires careful assessment of compatibility, consent or another lawful basis, risk, and governance controls.

Transparency involves explaining what data are collected, why they are needed, who will access them, how long they will be retained, and what rights or choices individuals have. Transparency is not satisfied by a long unreadable notice. Meaningful communication must be understandable to the population concerned and should disclose material risks, including automated analysis and data sharing.

Accountability means that an organization can demonstrate responsible practice rather than merely assert it. Accountability includes documented decisions, assigned responsibilities, audit trails, impact assessments, staff training, vendor oversight, and mechanisms for complaints and remediation. Privacy by design extends this approach by embedding protective defaults and controls into systems before deployment. Privacy by default means that the least intrusive reasonable setting is used unless a person deliberately chooses otherwise.

Anonymization and Pseudonymization

Removing names is rarely sufficient to anonymize a dataset. Quasi-identifiers such as date of birth, geographic area, occupation, and rare medical conditions can be combined with external datasets to re-identify individuals. Re-identification risk increases as datasets become more detailed and as public or commercially available auxiliary data expand.

Pseudonymization is often more practical for longitudinal research because investigators need to link multiple observations belonging to the same participant. A robust arrangement separates identifying information from research data, stores the linkage key under stronger controls, restricts the number of people who can access it, and records every use. The pseudonym should not be derived from an easily guessed attribute such as a national identification number.

Anonymization is a risk-reduction process, not a label that can be assigned simply because identifiers were removed. Techniques include aggregation, suppression, generalization, perturbation, and controlled release. Differential privacy provides a mathematical framework for limiting how much the output of an analysis changes when one person's record is added or removed. It introduces calibrated statistical noise and offers a formal privacy budget. However, it can reduce accuracy, especially for small subgroups, and requires expertise in selecting privacy parameters.

Synthetic data can reduce direct exposure by generating artificial records with statistical properties similar to an original dataset. Synthetic data are not automatically anonymous: models may memorize unusual records, and generated data may enable inference about real individuals. They must therefore be evaluated for disclosure risk, utility, representativeness, and bias.

Encryption, Authentication, and Access Control

Encryption transforms readable information into ciphertext using a cryptographic key. Encryption in transit protects data moving across networks, while encryption at rest protects stored information. End-to-end encryption can prevent intermediaries from reading content, but it does not eliminate risks at endpoints, metadata exposure, compromised keys, or unauthorized users. Effective encryption depends as much on key management, rotation, backup, recovery, and revocation as on the algorithm itself.

Authentication establishes who or what is requesting access. Passwords alone are vulnerable to reuse, guessing, phishing, and credential theft. Multi-factor authentication combines two or more categories, such as knowledge, possession, and inherence. Authorization determines what an authenticated subject may do. Least privilege grants only the access necessary for a defined task and for the shortest reasonable period. Role-based access control assigns permissions to job roles; attribute-based access control can consider context such as location, device security, data sensitivity, and time.

Access controls should be supported by segregation of duties, periodic access reviews, privileged-account management, logging, and rapid removal of departing users. A researcher who needs statistical outputs does not necessarily need access to names or contact details. A system administrator may maintain infrastructure without being authorized to inspect research content. Such separation reduces both accidental and intentional misuse.

Secure Computing and Operational Practice

Secure computing is a continuous condition rather than a one-time installation. Systems require secure configuration, timely patching, vulnerability management, endpoint protection, network segmentation, secure software development, and tested backups. Software should be designed with threat modeling, input validation, secure dependency management, code review, and security testing. Development and production environments should be separated, and real personal data should not be copied into development systems unless strictly justified and protected.

Cloud computing does not transfer responsibility entirely to the provider. Organizations must understand the shared-responsibility model, configure storage correctly, assess subcontractors, control administrative access, review data locations, and verify deletion and backup practices. Mobile devices and remote work introduce additional risks, including loss, insecure networks, screen exposure, and unauthorized local copies.

Logs are valuable for detecting misuse and reconstructing incidents, but they may themselves contain personal information. Logging should be proportionate, protected from alteration, retained for a defined period, and reviewed by authorized personnel. Security monitoring should not become unrestricted employee surveillance.

Incident Response and Recovery

No control system eliminates all incidents. A mature incident-response capability prepares for detection, analysis, containment, eradication, recovery, and learning. Preparation includes assigning an incident team, maintaining contact procedures, defining severity levels, preserving forensic capability, and rehearsing scenarios. Detection may arise from automated alerts, user reports, unusual access patterns, or external notification.

Containment limits ongoing damage, but decisions must preserve evidence where possible. Eradication removes malicious code, compromised accounts, and exploited weaknesses. Recovery restores reliable operations using verified systems and backups. Communication should be accurate, timely, and coordinated with legal, regulatory, institutional, and ethical obligations. Affected individuals may need practical guidance, not merely a formal statement.

Post-incident review should examine technical causes, organizational decisions, training, vendor performance, and governance failures. Blaming one employee for a systemic weakness prevents learning. Metrics such as time to detect, time to contain, percentage of critical systems patched, and completion of access reviews can support improvement, but metrics must not encourage concealment or superficial compliance.

Privacy-Enhancing Technologies

Privacy-enhancing technologies (PETs) seek to enable useful computation while reducing unnecessary disclosure. Examples include encryption, secure multiparty computation, homomorphic encryption, trusted execution environments, differential privacy, private information retrieval, federated learning, and zero-knowledge proofs.

Federated learning allows models to be trained across distributed devices or institutions while keeping raw data local. Nevertheless, model updates may leak information, and a central coordinator may infer properties of participants. Secure aggregation, differential privacy, and robust governance can reduce these risks. Homomorphic encryption permits computation on encrypted data but may impose substantial computational cost. Secure multiparty computation allows parties to calculate a result without revealing their inputs, although communication and implementation complexity can be significant. Zero-knowledge proofs allow a party to demonstrate that a statement is true without disclosing the underlying information.

PETs are not ethical substitutes for purpose limitation, minimization, or accountability. A technically sophisticated system can still produce discriminatory decisions, collect unnecessary data, or operate without meaningful consent. PET selection should therefore consider the threat model, usability, performance, residual risk, and the interests of affected communities.

Research Ethics, Governance, and Regulation

Research involving personal data requires an ethically defensible relationship between scientific value and participant risk. Consent should be informed, voluntary, and sufficiently specific, while recognizing that broad consent and secondary research may create difficult trade-offs. Vulnerable populations may face heightened risks if data reveal health status, political activity, location, identity, or social relationships. Institutional review boards or research ethics committees should examine data flows, security controls, retention, sharing, international transfers, and plans for incident response.

Governance should assign data ownership or stewardship, define a data classification scheme, approve access, document retention schedules, and establish procedures for responding to data-subject requests or complaints. Organizations must also consider applicable privacy and cybersecurity laws, contractual duties, sector-specific requirements, and professional codes. Legal compliance is a baseline, not a complete ethical analysis. A practice may be lawful yet unreasonable, discriminatory, or inconsistent with participant expectations.

Algorithmic systems require special scrutiny. Models may infer sensitive attributes that were never explicitly collected, reproduce historical bias, or make privacy-preserving data appear harmless while enabling harmful classification. Documentation should describe data provenance, intended use, limitations, access conditions, and known risks. Independent review, impact assessment, contestability, and human oversight are particularly important when decisions affect rights or opportunities.

Illustrative Case Study: A University Health-Data Platform

Background

A fictional university medical research center creates a platform combining hospital records, wearable-device data, and survey responses to study early indicators of cardiovascular disease. Researchers want longitudinal records so that changes can be analyzed over several years. A technology vendor hosts the platform in a public cloud.

Situation and Problem

The initial design stores names, full dates of birth, precise locations, device identifiers, and raw sensor streams in one database. Twenty-five researchers have broad access because the project team expects that future studies may require different variables. A graduate assistant accidentally uploads a database extract to a public code repository. The file does not contain names, but it includes rare diagnoses, timestamps, and postal codes. The center must determine the extent of exposure and redesign the platform without preventing legitimate research.

Analysis

The data are pseudonymized at best, not anonymous. Rare diagnoses and detailed temporal and geographic information may enable re-identification. Broad access violates least privilege and increases insider risk. The public repository incident creates confidentiality and potentially legal reporting concerns. The project also lacks a clear separation between operational identifiers and analytical data, a documented retention schedule, and a tested incident-response procedure.

Approach and Strategy

The center first preserves evidence, removes public copies where possible, rotates credentials and access tokens, and investigates repository history and downloads. It informs institutional leadership, the ethics committee, and relevant authorities according to applicable requirements. Potentially affected participants receive a clear explanation of the incident and protective steps.

For redesign, direct identifiers are moved to a separately governed identity service. A random study code is used for analytical records, and the linkage key is accessible only to a designated data custodian. Researchers receive role-based access to approved data views rather than the full database. Location is generalized, dates are transformed where precise timing is not essential, and raw sensor streams are retained only for a defined scientific purpose. Encryption is applied in transit and at rest, with keys managed separately. Multi-factor authentication, access logging, quarterly reviews, secure development practices, and monitored cloud configurations are introduced.

The center also establishes a data-access committee, requires project-specific approval, performs privacy-impact assessments for new studies, and uses synthetic or de-identified extracts for teaching and software development. For collaborative analysis with external hospitals, it investigates federated learning and secure aggregation rather than exchanging raw records.

Outcome

The platform becomes more resistant to unauthorized disclosure while preserving longitudinal research capability. Some analyses become less precise because geographic and temporal details are generalized. The center accepts this trade-off as proportionate to the reduction in participant risk and documents circumstances in which more detailed access may be justified under enhanced controls.

Learning Points

The case demonstrates that removing names does not guarantee anonymity, and that privacy protection must combine technical, organizational, and ethical measures. It also shows why incident response, data minimization, access governance, and research utility must be designed together rather than treated as competing afterthoughts.

Challenges, Limitations, and Common Mistakes

A common mistake is treating compliance documentation as evidence of actual protection. Policies have little value when access permissions are excessive, systems are unpatched, or staff are not trained. Another mistake is assuming that encryption solves every privacy problem; authorized users, compromised endpoints, metadata, and inference attacks remain relevant.

Organizations may also over-collect data because future uses are uncertain. This creates a “data hoarding” culture in which retention becomes indefinite and accountability becomes difficult. Excessive de-identification can create a different problem if it makes data unusable or disproportionately reduces representation of small populations. Conversely, claims of anonymization may be overstated when linkage risks are ignored.

Security controls can produce inequity. Multi-factor authentication, identity verification, or automated fraud detection may disadvantage people with limited connectivity, disabilities, unstable housing, or nonstandard identities. Privacy decisions should therefore include usability and equity assessments. Finally, complex PETs can create false confidence if their assumptions, parameters, and failure modes are not understood by operators.

Current Developments and Emerging Directions

Large language models and other generative systems create new privacy risks because prompts, training data, embeddings, and model outputs may contain or reveal personal information. Organizations need rules for entering confidential data into external systems, controls for retention and vendor access, and testing for memorization and unintended disclosure.

The growth of data spaces, edge computing, connected devices, and biometric systems is expanding the number of environments in which information is processed. Processing data near its source may reduce central collection but can make device security and governance more difficult. Quantum computing also motivates research into post-quantum cryptography because long-lived confidential data may be vulnerable to future decryption of intercepted traffic.

Privacy engineering is increasingly becoming a multidisciplinary field combining systems engineering, law, human-computer interaction, security, statistics, and ethics. Its central challenge is not to eliminate all risk, which is impossible, but to make residual risk visible, proportionate, governable, and subject to meaningful human judgment.

Best-Practice Decision Framework

When designing or reviewing a system, the following sequence provides a disciplined starting point:

1. Define the purpose, affected populations, decision authority, and acceptable outcomes.

2. Map the data life cycle, including collection points, transfers, users, vendors, copies, and deletion.

3. Classify data according to sensitivity, identifiability, integrity requirements, and potential harm.

4. Minimize fields, precision, retention, and access before selecting technical controls.

5. Conduct threat modeling and privacy-impact assessment, including misuse and re-identification scenarios.

6. Apply layered controls: pseudonymization, encryption, authentication, least privilege, logging, backup, monitoring, and secure development.

7. Test controls through audits, penetration testing, access reviews, exercises, and adversarial evaluation.

8. Establish incident-response, notification, correction, and remediation procedures.

9. Reassess the system when its purpose, data sources, technology, vendors, or social context changes.

This framework emphasizes that responsible protection is a continuing governance process. It integrates technical design with ethical justification and organizational accountability.

Chapter Summary

Privacy, confidentiality, and cybersecurity overlap but address different responsibilities: individual control and contextual appropriateness, protection of entrusted information, and preservation of confidentiality, integrity, and availability. Effective protection begins with life-cycle risk assessment and is supported by data minimization, purpose limitation, transparency, accountability, and privacy by design. Anonymization is difficult to guarantee, while pseudonymization supports controlled linkage but does not remove privacy obligations. Encryption, multi-factor authentication, least privilege, secure development, monitoring, and tested incident response provide layered protection. Privacy-enhancing technologies can reduce disclosure while enabling analysis, but they introduce trade-offs and do not replace governance. Ethical and professional practice requires proportionate decisions, attention to vulnerable groups, oversight of vendors and algorithms, and continuous reassessment as technologies and threats evolve.

Key Terms

Privacy: The legitimate interest in controlling personal information and avoiding unjustified intrusion.

Confidentiality: The duty to prevent entrusted information from being disclosed to unauthorized parties.

Cybersecurity: The protection of systems, networks, devices, and data from harmful compromise.

Data minimization: Collection and retention of only the data necessary for a defined purpose.

Purpose limitation: Restricting data use to specified and compatible purposes.

Anonymity: A condition in which an individual cannot reasonably be identified from available information.

Pseudonymization: Replacing direct identifiers with codes while retaining a possibility of re-identification.

Re-identification: Linking de-identified data to a specific individual.

Encryption: Cryptographic transformation of readable information into protected ciphertext.

Authentication: Verification of the identity of a user, device, or system.

Authorization: Determination of what an authenticated subject may access or do.

Least privilege: Granting only the minimum access necessary for a task.

Access control: Technical and organizational mechanisms governing information access.

Incident response: The organized process of detecting, containing, investigating, and recovering from incidents.

Differential privacy: A formal method that limits the influence of one person's data on an analytical output.

Federated learning: Distributed model training in which raw data remain at local sites or devices.

Threat modeling: Systematic identification of assets, threats, vulnerabilities, and mitigations.

Privacy by design: Integrating privacy protections into system architecture and development from the outset.

Data controller or steward: The party responsible for decisions about data purposes, governance, and protection.

Residual risk: Risk remaining after safeguards have been implemented.

Review Questions

Short Answer Questions

1. Distinguish privacy from confidentiality.

2. Why does pseudonymization not make data anonymous?

3. What are the three dimensions of the confidentiality-integrity-availability model?

4. Define data minimization and explain one security benefit.

5. What is the purpose of multi-factor authentication?

Long Answer Questions

1. Explain the major privacy and security risks arising at different stages of the data life cycle.

2. Compare anonymization, pseudonymization, synthetic data, and differential privacy.

3. Discuss how least privilege, role-based access control, logging, and encryption work together.

4. Describe the stages of an effective incident-response process and explain the importance of post-incident learning.

5. Evaluate the ethical and governance issues involved in using artificial intelligence with sensitive personal data.

Analytical / Application Questions

1. A research team removes names from a dataset but retains precise dates, postal codes, rare diagnoses, and occupation. Analyze the re-identification risk and propose a revised data-protection design.

2. A university wants to use federated learning across hospitals. Identify the privacy, security, governance, and utility trade-offs that should be assessed before deployment.

3. An employee accidentally sends a pseudonymized participant file to an external mailing list. Develop an incident-response plan and explain how the organization should determine whether notification and remediation are necessary.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes pseudonymization from anonymization?

A. Pseudonymization always prevents re-identification, whereas anonymization does not.

B. Pseudonymization replaces identifiers but may permit re-identification through additional information.

C. Anonymization requires encrypting every record, whereas pseudonymization does not.

D. There is no meaningful difference between the two concepts.

Correct Answer: B. Pseudonymization replaces identifiers but may permit re-identification through additional information.

Question 2

A researcher needs to link a participant's observations over five years but does not need to know the participant's name. Which design is most appropriate?

A. Store names and all research variables in one unrestricted table.

B. Delete all identifiers and prohibit longitudinal linkage.

C. Use a study code, separate the linkage key, and restrict access to the key.

D. Use the participant's national identification number as the study code.

Correct Answer: C. Use a study code, separate the linkage key, and restrict access to the key.

Question 3

Which control most directly implements the principle of least privilege?

A. Giving every researcher administrator access for convenience.

B. Allowing researchers to access only the approved data views required for their projects.

C. Retaining all data indefinitely in case it becomes useful.

D. Publishing system logs publicly for transparency.

Correct Answer: B. Allowing researchers to access only the approved data views required for their projects.

Question 4

Why is removal of names insufficient to guarantee anonymity?

A. Names are not considered personal information.

B. Encryption automatically restores removed names.

C. Quasi-identifiers may be combined with external information to identify individuals.

D. Anonymity requires that data be stored only on paper.

Correct Answer: C. Quasi-identifiers may be combined with external information to identify individuals.

Question 5

Which activity belongs primarily to the containment stage of incident response?

A. Limiting ongoing access to a compromised account or system.

B. Writing the original research protocol.

C. Designing a new statistical model.

D. Deleting all evidence of the incident.

Correct Answer: A. Limiting ongoing access to a compromised account or system.

Question 6

What is a principal benefit of differential privacy?

A. It guarantees that all published results are perfectly accurate.

B. It limits how much an output is affected by the inclusion or exclusion of one person's record.

C. It eliminates the need for access controls.

D. It permits unrestricted publication of raw records.

Correct Answer: B. It limits how much an output is affected by the inclusion or exclusion of one person's record.

Question 7

A cloud provider hosts a university's sensitive dataset. Which statement is most accurate?

A. The university has no remaining responsibility for security.

B. Cloud hosting makes encryption unnecessary.

C. The university must still configure access, assess vendors, and manage its responsibilities under the shared-responsibility model.

D. Only physical security matters in cloud environments.

Correct Answer: C. The university must still configure access, assess vendors, and manage its responsibilities under the shared-responsibility model.

Question 8

A system collects exact location data although regional location would support the research objective. Which principle suggests changing the design?

A. Data minimization.

B. Availability.

C. Nonrepudiation.

D. Redundancy.

Correct Answer: A. Data minimization.

Question 9

Why might federated learning still create privacy risks?

A. It always transfers all raw data to a central server.

B. Model updates or gradients may reveal information about local training data.

C. It prevents any statistical analysis from being performed.

D. It eliminates the need for authentication.

Correct Answer: B. Model updates or gradients may reveal information about local training data.

Question 10

Which approach best reflects responsible privacy governance?

A. Treating legal compliance as sufficient regardless of participant expectations.

B. Using the most detailed data possible for every future purpose.

C. Combining technical controls with purpose limitation, accountability, impact assessment, and periodic reassessment.

D. Relying exclusively on employee confidentiality promises.

Correct Answer: C. Combining technical controls with purpose limitation, accountability, impact assessment, and periodic reassessment.

Research Ethics & Computer Applications
Chapter 6 of 14

Research Ethics & Computer Applications

Chapter 7
Research Data Governance and Lifecycle Management

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

7. Research Data Governance and Lifecycle Management

Introduction and Context

Research data are not merely inputs to analysis. They are evidence, intellectual assets, records of scholarly activity, and, in many projects, representations of people, communities, environments, or institutional operations. Their value and risk change over time. A dataset that is exploratory during data collection may become legally sensitive when linked with identifiers, scientifically valuable when deposited in a repository, and a liability when retained without purpose or protection. For this reason, responsible research requires governance across the entire data lifecycle.

Research data governance concerns the authority, rules, responsibilities, and controls used to make decisions about data. Lifecycle management concerns the movement of data from planning and collection through processing, analysis, sharing, preservation, reuse, and eventual deletion or continued retention. Together, they connect research ethics with information management, cybersecurity, records management, reproducibility, and institutional accountability.

At doctoral level, data governance should be understood critically rather than as a checklist. A data management plan may satisfy a funder yet fail to address Indigenous data sovereignty, algorithmic bias, metadata quality, or the practical realities of long-term preservation. Conversely, strict controls may protect confidentiality while unnecessarily preventing legitimate scientific reuse. Good governance therefore involves justified, proportionate, and revisable decisions.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain research data governance and the principal stages of a data lifecycle.

2. Design a defensible data management plan covering provenance, metadata, quality, security, sharing, retention, and deletion.

3. Apply FAIR and CARE principles while recognising their different purposes and possible tensions.

4. Evaluate data sovereignty, stewardship, access rights, and ethical responsibilities.

5. Select appropriate repositories, controls, and technologies for different types of research data.

6. Critically assess risks, limitations, and emerging issues in research data management.

Data Governance as an Ethical and Institutional Responsibility

Data governance is the system through which an organisation determines who may collect, access, modify, share, retain, or destroy data, under what conditions, and with what accountability. It includes policies, roles, standards, workflows, technical safeguards, documentation, and oversight. Governance is broader than security. Security protects confidentiality, integrity, and availability; governance determines why data should exist, who is entitled to use it, and what constitutes legitimate use.

Research governance must distinguish several related concepts. Data ownership refers to legal or institutional claims over data, but ownership alone does not settle ethical questions. Data control concerns the power to make operational decisions. Data stewardship is the responsible care of data on behalf of participants, communities, institutions, and future users. Custodianship commonly refers to maintaining and protecting data without necessarily claiming ownership. These distinctions are especially important where participants, universities, sponsors, governments, and Indigenous communities hold different interests.

A lifecycle perspective prevents a common error: treating ethics approval as the end of ethical reasoning. Consent obtained at collection may not automatically authorise future linkage, artificial-intelligence training, public release, or transfer to another jurisdiction. Governance must therefore include change management, continuing review, incident response, and mechanisms for correcting records or withdrawing data where feasible.

The Research Data Lifecycle

A lifecycle is a conceptual model rather than a single universal sequence. A practical research lifecycle contains the following connected stages:

Planning and classification. Before collection, researchers identify data types, sensitivity, expected volume, legal and ethical constraints, ownership or control arrangements, anticipated users, costs, and preservation needs. Classification may distinguish public, internal, confidential, personal, sensitive, or highly restricted data. Classification should be based on consequences of misuse, not merely on the researcher's intuition.

Collection or creation. Researchers define instruments, sampling procedures, consent conditions, file formats, identifiers, and quality controls. Provenance begins here. A provenance record documents where data came from, when and how they were generated, which instruments or software were used, and what transformations occurred. In computational research, code versions, configuration files, random seeds, and dependency information may be as important as the observations themselves.

Processing and documentation. Raw data are cleaned, coded, harmonised, pseudonymised, or transformed. Original raw data should normally be preserved as a read-only master, while derived versions are given new identifiers and processing histories. Documentation explains variables, missing values, coding decisions, exclusions, and changes. Without this layer, a technically accurate dataset may remain scientifically uninterpretable.

Storage, backup, and security. Working data require controlled storage, authentication, encryption where appropriate, backup, recovery testing, and monitoring. A backup is not automatically an archive: backups support recovery from loss, whereas archives support long-term intelligibility and evidential value. Critical projects should consider geographically separate copies, version control, integrity checks, and documented recovery priorities.

Analysis and use. Access should follow the principle of least privilege: each person receives only the access needed for an authorised task. Researchers should record analytical decisions, maintain reproducible computational environments where feasible, and prevent accidental disclosure through tables, maps, quotations, model outputs, or small-cell reporting. Data-use permissions should be reviewed when the purpose, dataset, personnel, or analytical method changes.

Sharing and publication. Sharing may involve open publication, controlled access, data enclaves, trusted intermediaries, contractual exchange, or sharing only metadata. The appropriate option depends on identifiability, consent, security, intellectual property, community authority, and public interest. A statement that data are “available on request” is not a complete access policy; it should specify the repository or custodian, eligibility, application process, review criteria, and expected response.

Preservation, retention, and deletion. At project closure, researchers determine which data, documentation, code, consent records, and audit logs should be retained. Retention should reflect scientific value, legal obligations, institutional schedules, contractual conditions, and participant expectations. Secure deletion must address active systems, backups, temporary files, portable devices, and cloud replicas. Where deletion is impossible or disproportionate, the limitation should be disclosed and residual risk reduced.

These stages overlap. Decisions made during planning determine whether meaningful preservation or lawful sharing will be possible later. Lifecycle governance is consequently front-loaded: the cheapest time to fix missing metadata, ambiguous consent, or weak identifiers is before collection begins.

The Data Management Plan as a Governance Instrument

A data management plan (DMP) is a living document that translates research intentions into operational commitments. It should be updated when methods, personnel, platforms, data categories, or sharing arrangements change. A doctoral DMP should normally answer the following questions:

  • What data will be collected, generated, acquired, or reused, and in what formats and quantities?
  • What ethical, legal, cultural, contractual, or security restrictions apply?
  • Who is responsible for data quality, access approval, documentation, security, and preservation?
  • How will provenance, metadata, versioning, identifiers, and quality assurance be maintained?
  • Where will data be stored, backed up, and processed, and in which jurisdictions?
  • What will be shared, with whom, when, and under what licence or access conditions?
  • What repository is suitable, and what persistent identifier will be assigned?
  • How long will data be retained, and how will deletion or continued preservation be authorised?
  • What resources, training, and costs are necessary?

A DMP should identify decision rights, not merely name technologies. “Data will be stored securely” is weak because it does not identify the platform, access roles, encryption, backup frequency, monitoring, or incident procedure. A stronger statement links the risk to a control: identifiable interview files will be stored in an institutionally managed encrypted environment; access will use named accounts and multifactor authentication; the data manager will review permissions quarterly; and disclosure incidents will be reported through the institutional procedure.

Provenance, Metadata, and Data Quality

Provenance is the history of origin, custody, processing, and modification of a data object. It supports reproducibility, accountability, error investigation, and interpretation. Provenance may be captured through human-readable logs, workflow systems, version-control repositories, database audit trails, or machine-readable standards such as provenance graphs. It should distinguish original observations from imputations, transformations, synthetic data, and analytical outputs.

Metadata are structured information about data. Descriptive metadata identify subject, creator, title, date, keywords, and abstract. Structural metadata explain relationships among files, tables, variables, and instruments. Administrative metadata describe rights, access conditions, formats, preservation actions, and technical requirements. Domain metadata use field-specific vocabularies and measurement conventions. A spreadsheet with column headings is not necessarily adequately documented; terms such as “score,” “case,” or “status” require definitions, units, allowable values, and collection context.

Data quality is fitness for an intended purpose, not an absolute property. Relevant dimensions include accuracy, completeness, consistency, timeliness, validity, uniqueness, and representativeness. Quality assurance may include instrument calibration, double entry, range checks, duplicate detection, missing-data analysis, inter-rater assessment, schema validation, anomaly detection, and independent review. Automated checks are useful but cannot determine whether a variable measures the intended construct or whether a sample excludes a marginalised population.

A mature governance process records quality limitations rather than hiding them. Missing observations, sampling bias, measurement error, changes in instruments, and failed collection periods should be documented. Transparent limitations often increase the value of a dataset because users can judge whether reuse is appropriate.

FAIR, CARE, and Data Sovereignty

The FAIR principles encourage data to be Findable, Accessible, Interoperable, and Reusable. Findability requires persistent identifiers, searchable descriptions, and indexing. Accessibility requires a clear method of obtaining data, although it does not mean unrestricted public access. Interoperability depends on standard formats, shared vocabularies, and machine-readable structures. Reusability requires sufficient provenance, metadata, licensing, and explanation of limitations.

FAIR primarily addresses the technical and scholarly conditions that make data useful. It does not by itself determine whether sharing is ethical, whether a community agrees with reuse, or whether data reflect unequal power relationships. A dataset can be FAIR but harmful if it exposes vulnerable people or treats culturally significant knowledge as an ordinary public resource.

The CARE principles—Collective benefit, Authority to control, Responsibility, and Ethics—respond to these concerns, particularly in relation to Indigenous data governance. Collective benefit asks whether data activities produce meaningful benefit for communities. Authority to control recognises community rights to determine how data are represented and used. Responsibility requires respectful, accountable relationships and capacity building. Ethics requires attention to harm, context, and relational obligations rather than relying only on individual consent.

FAIR and CARE are complementary but can create tensions. Maximising discoverability may conflict with cultural restrictions. Interoperability may encourage standardisation that strips away local meaning. Reuse may be scientifically attractive but inconsistent with community authority. The appropriate response is not to abandon either framework but to apply them together, using graduated access, community review, contextual metadata, data-use agreements, and culturally appropriate governance.

Data sovereignty concerns the authority of a people, community, organisation, or state to govern data according to its laws, values, and jurisdiction. Indigenous data sovereignty is distinct from national data localisation: it centres the rights and self-determination of Indigenous peoples, including collective interests not reducible to individual consent. Researchers must examine who defines permissible use, where servers are located, which law applies, and whether a community has meaningful decision-making power.

Repositories, Access, and Preservation

Repository selection should follow research requirements rather than convenience. An institutional repository may be suitable for many datasets; a disciplinary repository may provide richer domain metadata and community standards; a national or governmental repository may be appropriate for regulated or publicly funded data. Sensitive data may require a controlled-access repository, secure data enclave, or trusted research environment. Researchers should assess persistence, governance, identifiers, format support, access review, auditability, preservation policy, licensing, and exit options.

A repository deposit should include more than a data file. It may require a readme, codebook, methodology, licence, consent or access statement, provenance record, software environment, version information, and citation guidance. Persistent identifiers support citation and tracking, but they do not guarantee long-term preservation or ethical legitimacy.

Access models form a spectrum: open access; registration-based access; reviewed access; mediated access; secure analysis without download; and no external access. De-identification reduces risk but does not guarantee anonymity. Re-identification can arise from combinations of quasi-identifiers, linkage with external datasets, distinctive narratives, geolocation, facial images, genomic information, or model outputs. Disclosure review should consider realistic attack pathways, not merely removal of names.

Roles, Accountability, and Technical Controls

Responsibilities should be assigned explicitly. The principal investigator is accountable for scholarly and ethical compliance; a data steward manages documentation and operational controls; an information-security specialist advises on threats and safeguards; a repository or records manager supports preservation; and an ethics committee or governance board provides oversight within its mandate. Participants and communities are not merely data subjects: where appropriate, they should have voice in use, representation, benefit, and correction.

Technical controls may include role-based access, multifactor authentication, encryption in transit and at rest, key management, pseudonymisation, secure transfer, network segmentation, immutable audit logs, malware protection, vulnerability management, and tested backups. Privacy-enhancing technologies—such as differential privacy, secure multiparty computation, federated analysis, or synthetic data—can reduce exposure, but each introduces utility, implementation, and disclosure risks. Synthetic data are not automatically anonymous; their similarity to source records must be assessed.

Automation and artificial intelligence can assist metadata extraction, anomaly detection, classification, de-identification, and policy enforcement. However, automated classification may mislabel sensitive material, and generative systems may retain, infer, or reproduce confidential content. Research data should not be uploaded to an external AI service unless contractual, ethical, security, and jurisdictional requirements permit it. Human review remains necessary for high-impact decisions and culturally sensitive interpretation.

An Illustrative Case: Community Health Data Across Borders

Background

The fictional Northbridge University collaborates with a regional health service and an Indigenous community organisation to study patterns of diabetes prevention. The project combines clinical records, wearable-device measurements, interviews, and community-generated maps. A commercial analytics provider offers cloud processing in another country.

Situation and Problem

The investigators initially propose depositing a fully anonymised dataset in an open repository. The community organisation objects that the maps may identify sacred places and that the proposed consent form does not explain international cloud processing or future commercial reuse. The clinical partner is concerned about re-identification through rare diagnoses and geographic combinations. The funder expects a public data-access statement.

Analysis

The project contains multiple data classes with different risks. Clinical records and wearable data are personal and potentially sensitive. Community maps may carry collective cultural restrictions. The original consent language does not clearly support all proposed secondary uses. “Anonymised” is an unsupported conclusion until linkage risk is assessed. Open access would satisfy a narrow interpretation of FAIR but could violate CARE, community authority, and participant expectations.

Approach and Strategy

The team revises the DMP and establishes a joint governance group including the community organisation. It separates direct identifiers, research data, and linkage keys; stores the key under independent custodianship; and uses a controlled research environment rather than unrestricted cloud processing. The provider is permitted only after contractual review establishes security, deletion, audit, and jurisdictional requirements.

The team deposits a rich metadata record and non-sensitive aggregate outputs in a repository, while the underlying dataset is placed under reviewed access. Community maps are retained under community-controlled access, with contextual metadata explaining restrictions. The access committee includes community representation and evaluates proposed uses against consent, scientific purpose, privacy risk, and collective authority. The consent process explains future research, international processing, withdrawal limitations, and governance arrangements. A re-identification assessment, access log, annual review, and incident-response plan are added.

Outcome

The project does not achieve unrestricted release of the complete dataset, but it achieves responsible discoverability and controlled reuse. Other researchers can find the dataset, understand its structure, request access, and use aggregate outputs. The community gains a formal role in decisions and receives capacity-building support and results in an agreed format.

Learning Points

The case demonstrates that openness is not identical to responsibility; metadata can be public while data remain restricted; consent, sovereignty, and technical security must be considered together; and governance is strongest when affected communities participate in decision-making rather than being consulted only after the design is complete.

Challenges, Limitations, and Common Errors

Research data governance is difficult because data cross organisational and national boundaries, systems change, funding ends, and future uses cannot always be predicted. Common errors include collecting excessive data, treating de-identification as a guarantee, using personal storage for sensitive files, failing to preserve raw data, relying on undocumented spreadsheets, granting shared accounts, neglecting backup restoration tests, and promising deletion that cannot be achieved in replicated systems.

Another limitation is the tension between standardisation and context. Common schemas improve interoperability but may encode assumptions from dominant institutions. Data-quality metrics can reward completeness while overlooking systematic exclusion. Repository policies may prioritise public access without adequately recognising collective rights. Governance frameworks should therefore be evaluated for whose interests they represent and whose risks they externalise.

Researchers should also avoid “ethics by document.” A signed DMP, consent form, or access agreement is not evidence that practice is safe. Controls must be implemented, monitored, reviewed, and revised. Incidents, near misses, unexpected findings, and participant concerns should trigger learning rather than concealment.

Current Developments and Best Practice

Current practice is moving toward machine-actionable DMPs, automated provenance capture, persistent identifiers for people and organisations, trusted research environments, privacy-enhancing computation, and reproducible research packaging. Data spaces and federated analysis may enable researchers to compute across distributed datasets without centralising raw records. These approaches are promising but depend on reliable metadata, interoperable policies, skilled personnel, and sustainable funding.

Good practice can be expressed as a disciplined sequence: classify data before collection; minimise what is gathered; obtain consent that reflects realistic uses; assign accountable roles; preserve provenance and documentation; separate identifiers; use proportionate access controls; test backups and recovery; choose repositories early; publish metadata and access conditions; involve affected communities; review permissions throughout the project; and document retention or destruction decisions.

The central professional judgement is proportionality. The strongest control is not always the most restrictive control. Governance should protect people and communities while preserving legitimate scientific value, reproducibility, and public benefit. That balance requires technical competence, ethical reasoning, legal awareness, and humility about what researchers do not know.

Chapter Summary

Research data governance coordinates authority, responsibility, policy, technology, and oversight across the data lifecycle. Lifecycle management begins with planning and classification, continues through collection, provenance, processing, quality assurance, storage, analysis, sharing, preservation, and retention or deletion. A living data management plan makes these decisions explicit and assigns responsibilities.

Provenance and metadata support interpretation, reproducibility, and accountability, while quality management records both strengths and limitations. FAIR promotes findability, accessibility, interoperability, and reuse; CARE adds collective benefit, authority to control, responsibility, and ethics. Data sovereignty requires attention to jurisdiction, community authority, and self-determination. Repository and access choices must reflect sensitivity, consent, cultural context, and re-identification risk. Security controls, privacy-enhancing technologies, automation, and AI can support governance but cannot replace human and community judgement. Responsible stewardship is an ongoing practice of proportionate protection, meaningful accountability, and ethically justified reuse.

Key Terms

Data governance: The policies, roles, processes, and controls that determine how data are managed and used.

Data lifecycle: The connected stages through which data are planned, collected, processed, used, shared, preserved, and deleted or retained.

Data management plan: A living document specifying how research data will be handled, protected, documented, shared, and preserved.

Provenance: The history of a dataset’s origin, custody, processing, and modification.

Metadata: Structured information describing data content, structure, context, rights, and technical characteristics.

Data stewardship: Responsible care and oversight of data on behalf of stakeholders and future users.

Custodian: An entity responsible for maintaining and protecting data without necessarily owning them.

Data quality: The fitness of data for a defined purpose, including accuracy, completeness, validity, and consistency.

FAIR principles: Principles requiring data to be findable, accessible, interoperable, and reusable.

CARE principles: Principles requiring collective benefit, authority to control, responsibility, and ethics.

Data sovereignty: The authority to govern data according to applicable laws, values, and jurisdictional or community rights.

Pseudonymisation: Replacing direct identifiers with codes while retaining a controlled possibility of linkage.

De-identification: Processing intended to reduce the association between data and identifiable persons.

Persistent identifier: A durable reference, such as a repository identifier, that supports reliable citation and discovery.

Controlled access: A model in which data use requires eligibility checks, approval, or specified conditions.

Data repository: A managed service that stores, documents, preserves, and distributes research data.

Least privilege: Providing users only the access necessary for their authorised tasks.

Retention schedule: A documented rule specifying how long records or data should be kept and when they may be destroyed.

Privacy-enhancing technology: A technical method designed to support analysis while reducing exposure of identifiable information.

Machine-actionable DMP: A structured data management plan that can be interpreted and processed by software.

Review Questions

Short Answer Questions

1. Distinguish data governance from information security.

2. What is the purpose of a provenance record?

3. Why is a backup not the same as an archive?

4. Define controlled access and give one example of when it is appropriate.

5. State the four FAIR principles.

Long Answer Questions

1. Explain the stages of a research data lifecycle and show how early planning affects later sharing and preservation.

2. Discuss the structure and function of a doctoral-level data management plan.

3. Compare FAIR and CARE, including situations in which their practical implications may differ.

4. Explain how metadata and data-quality practices support reproducibility and responsible reuse.

5. Analyse the roles of consent, data sovereignty, repository selection, and security in governing sensitive research data.

Analytical / Application Questions

1. A researcher wants to publish a dataset containing rare diagnoses, precise locations, and interview quotations after removing names. Identify the risks and design an appropriate access and documentation strategy.

2. A community objects to unrestricted publication of a dataset that a funder requires to be “open.” Using FAIR and CARE, propose a governance arrangement that preserves scientific value while respecting community authority.

3. A laboratory has data stored on personal laptops, no version history, and undocumented transformations. Develop a prioritised remediation plan covering security, provenance, quality, backup, repository deposit, and retention.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes a backup from an archive?

A. A backup supports recovery from loss, whereas an archive supports long-term intelligibility and preservation.

B. A backup always has stronger access controls than an archive.

C. An archive is used only for temporary working files.

D. A backup automatically provides complete metadata and provenance.

Correct Answer: A. A backup supports recovery from loss, whereas an archive supports long-term intelligibility and preservation.

Question 2

A dataset has persistent identifiers and rich metadata but includes culturally restricted knowledge released without community approval. Which conclusion is most accurate?

A. It fully satisfies responsible governance because it is FAIR.

B. It is technically discoverable but may fail CARE and data-sovereignty requirements.

C. It cannot be considered research data.

D. Its metadata must be removed to resolve the ethical problem.

Correct Answer: B. It is technically discoverable but may fail CARE and data-sovereignty requirements.

Question 3

What is the strongest reason to preserve a read-only copy of raw data?

A. It guarantees that no data will ever be disclosed.

B. It allows researchers to distinguish original observations from later transformations.

C. It eliminates the need for a data management plan.

D. It makes all derived datasets publicly accessible.

Correct Answer: B. It allows researchers to distinguish original observations from later transformations.

Question 4

Which access model is most appropriate when data are potentially re-identifiable but have substantial scientific value?

A. Unrestricted public download in all cases

B. No metadata or description of the dataset

C. Reviewed or controlled access with documented conditions

D. Deletion immediately after analysis regardless of obligations

Correct Answer: C. Reviewed or controlled access with documented conditions

Question 5

Which item is most characteristic of a strong data management plan?

A. A general statement that data will be stored securely

B. A list of software brands without assigned responsibilities

C. Specific controls, responsible roles, sharing conditions, and retention decisions

D. A promise that all future uses will be predicted exactly

Correct Answer: C. Specific controls, responsible roles, sharing conditions, and retention decisions

Question 6

Why does removal of names not necessarily make a dataset anonymous?

A. Names are never direct identifiers.

B. Quasi-identifiers and external datasets may enable re-identification.

C. Metadata always reveal every participant’s identity.

D. Anonymity requires deleting all research documentation.

Correct Answer: B. Quasi-identifiers and external datasets may enable re-identification.

Question 7

In the illustrative Northbridge case, why was unrestricted open release rejected?

A. The funder prohibited all repository deposits.

B. The dataset had no scientific value outside the university.

C. Privacy, consent, cultural restrictions, and collective authority created significant risks.

D. FAIR principles prohibit sharing health data.

Correct Answer: C. Privacy, consent, cultural restrictions, and collective authority created significant risks.

Question 8

Which action best reflects the principle of least privilege?

A. Giving every project member administrator access

B. Using one shared account for convenient auditing

C. Providing each authorised user only the access needed for a defined task

D. Allowing access permanently once it has been granted

Correct Answer: C. Providing each authorised user only the access needed for a defined task

Question 9

What is a central limitation of automated data classification and AI-based governance tools?

A. They cannot process any metadata.

B. They may misclassify sensitive material and cannot replace contextual human judgement.

C. They make encryption technically impossible.

D. They eliminate the need for community participation.

Correct Answer: B. They may misclassify sensitive material and cannot replace contextual human judgement.

Question 10

Which statement best expresses proportional research data governance?

A. All research data should be public regardless of risk.

B. The most restrictive possible control is always ethically superior.

C. Controls should correspond to sensitivity, purpose, risks, rights, and scientific value.

D. Governance is complete once ethics approval is obtained.

Correct Answer: C. Controls should correspond to sensitivity, purpose, risks, rights, and scientific value.

Research Ethics & Computer Applications
Chapter 7 of 14

Research Ethics & Computer Applications

Chapter 8
Computer Applications for Scholarly Research

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

8. Computer Applications for Scholarly Research

Introduction and Context

Scholarly research is increasingly conducted through interconnected digital environments rather than through isolated software packages. A doctoral researcher may discover literature in bibliographic databases, manage sources in a reference manager, preregister a study on an online platform, collect evidence through a survey system, record procedures in an electronic laboratory notebook, analyse qualitative material in specialist software, collaborate through cloud services, and preserve outputs in a repository. These applications can improve efficiency, transparency, reproducibility, and scholarly communication. They can also introduce serious risks: inaccurate metadata, opaque algorithms, insecure data storage, inappropriate automation, vendor dependence, and the accidental disclosure of confidential information.

The central issue is therefore not simply whether a tool is convenient. The researcher must ask whether the tool is methodologically appropriate, ethically defensible, technically reliable, and compatible with institutional and legal requirements. Digital applications support research; they do not replace research judgement. A sophisticated platform cannot compensate for a weak research question, poor sampling, inadequate documentation, or flawed interpretation.

This chapter examines the research workflow as a connected information system. It considers major categories of applications, explains how they contribute to scholarly practice, and develops criteria for selecting and governing them. Particular attention is given to doctoral-level concerns: provenance, auditability, interoperability, privacy, reproducibility, responsible automation, and the relationship between technical affordances and research validity.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Explain the role of major computer applications used in scholarly research.

2. Distinguish discovery, organization, analysis, collaboration, and preservation functions.

3. Design an integrated and auditable digital research workflow.

4. Evaluate applications according to methodological, ethical, technical, and organizational criteria.

5. Identify risks involving privacy, security, bias, data loss, vendor dependence, and automation.

6. Apply good practices to literature reviews, laboratory documentation, surveys, qualitative analysis, and collaborative research.

7. Critically assess emerging uses of artificial intelligence in scholarly workflows.

The Digital Research Workflow as an Evidence System

A research workflow is a sequence of activities through which a research idea becomes a defensible scholarly claim. Typical stages include question formulation, literature discovery, source evaluation, study design, data collection, data management, analysis, interpretation, writing, dissemination, and preservation. Applications used at each stage produce records and transformations. A database search creates a retrieval history; a reference manager creates bibliographic records; a survey system creates response data; analysis software creates coding or statistical outputs; and a repository preserves selected versions of the research object.

The quality of a digital workflow can be understood through four related properties. Traceability means that a claim can be connected to the evidence, procedures, and sources from which it was derived. Reproducibility means that another researcher can repeat the documented procedure and obtain the same or sufficiently comparable result. Auditability means that changes, decisions, and approvals can be examined. Interoperability means that data and metadata can move between systems without unacceptable loss or distortion.

These properties are not identical. A workflow may be reproducible but ethically unacceptable if it exposes participants. It may be secure but not auditable if important decisions are undocumented. It may be efficient but methodologically weak if a platform encourages convenience sampling or removes contextual information from qualitative data. Consequently, tool selection must be linked to the research design rather than treated as an administrative afterthought.

Finding and Evaluating Scholarly Literature

Literature databases

Bibliographic databases provide structured access to journal articles, conference papers, books, dissertations, patents, datasets, and other scholarly materials. Their value depends on coverage, indexing policies, metadata quality, search functionality, disciplinary relevance, and update frequency. A multidisciplinary database may offer broad discovery, while a subject-specific index may provide more precise controlled vocabulary and deeper coverage in a particular field.

Researchers should distinguish a database search from a literature review. A search retrieves records according to a strategy; a review evaluates, synthesizes, and positions evidence. Search results are shaped by the database’s coverage and indexing decisions. Important work may be absent because it is published in another language, indexed under different terminology, deposited in a repository, or excluded by commercial coverage policies. A defensible search therefore often uses several sources and records the date, database, search string, filters, and number of results.

Search strategies may combine keywords, synonyms, Boolean operators, phrase searching, truncation, field restrictions, and controlled vocabulary. Citation chaining—examining references cited by a relevant work and later works that cite it—can identify materials missed by keyword searches. However, citation counts are indicators of visibility, not direct measures of quality. Highly cited work may be influential, controversial, methodologically weak, or simply old enough to have accumulated citations.

Reference managers and bibliographic integrity

Reference managers store citation records, attach documents, generate bibliographies, and support group libraries. They reduce repetitive formatting work and help researchers organize sources with folders, tags, notes, and annotations. Their most important scholarly function, however, is not convenience but the maintenance of a reliable relationship between claims and sources.

Imported metadata should never be accepted without verification. Author names, publication dates, titles, page ranges, editions, digital object identifiers, and journal information may be incomplete or incorrect. Duplicate records can produce inconsistent citations, while automatic retrieval of full texts may create copyright or security problems. A sound practice is to identify a trusted master record, inspect the source itself, standardize author and institutional names, and retain notes explaining why a source is relevant.

Reference managers also create governance questions. Shared libraries may contain copyrighted PDFs, unpublished manuscripts, or sensitive annotations. Synchronization services may transfer data across jurisdictions. Researchers should understand access permissions, backup arrangements, export formats, and the procedure for leaving a collaboration. A project should not become dependent on a proprietary application from which its records cannot be exported in a usable form.

Systematic-Review Platforms and Evidence Synthesis

Systematic reviews require explicit methods for searching, screening, eligibility assessment, extraction, quality appraisal, and synthesis. Dedicated review platforms can manage duplicate removal, independent screening by multiple reviewers, conflict resolution, extraction forms, and decision histories. They are especially useful when a review involves large numbers of records or several researchers.

The platform does not make a review systematic by itself. Systematicity comes from a pre-specified and defensible protocol. Reviewers should define the research question, inclusion and exclusion criteria, sources to be searched, screening process, data items, risk-of-bias method, and synthesis plan before results are known. A platform can record these decisions, but it cannot determine whether they are conceptually appropriate.

A robust workflow separates identification from selection. Search results should be preserved before screening, duplicates should be removed transparently, and reasons for exclusion at the full-text stage should be recorded. Independent screening reduces the risk that one reviewer’s assumptions determine the evidence base. Disagreements should be resolved through a stated procedure rather than silently overwritten. When automation is used to prioritize records, researchers must examine whether the system systematically deprioritizes particular methods, languages, populations, or publication types.

Electronic Laboratory Notebooks and Research Records

An electronic laboratory notebook (ELN) is a digital environment for recording experimental plans, protocols, observations, instrument outputs, calculations, deviations, and approvals. In computing and information technology research, an ELN may document software configurations, datasets, algorithm versions, test environments, cybersecurity experiments, or user-study procedures as well as physical experiments.

A useful ELN entry records what was planned, what was done, what was observed, and what was changed. Dates and times, researcher identity, version information, linked files, calibration or configuration details, and explanations of anomalies are important. Entries should be sufficiently detailed for a competent colleague to understand the procedure without relying on memory. Templates can improve consistency, but they should not constrain researchers from recording unexpected events.

Electronic records require controls for authenticity and integrity. Role-based access, version history, timestamps, electronic signatures where appropriate, regular backups, and retention policies support trust in the record. Editable files should not be silently replaced by corrected versions; corrections should preserve the original and explain the amendment. Cloud storage may be useful, but the institution must know where data are hosted, how they are encrypted, and how records can be exported if the service ends.

Surveys and Digital Data Collection

Online survey systems support questionnaire design, recruitment links, branching logic, validation, randomization, consent screens, reminders, and data export. They are valuable for collecting standardized responses at scale, but they can also shape the data through interface design. Mandatory questions may increase completeness while creating undue pressure. Poorly designed mobile displays can alter response behaviour. Anonymous links may be convenient but can prevent detection of duplicate responses or withdrawal requests.

Survey design begins with the construct, not the software. Researchers must establish what is being measured, why each item is necessary, and whether the wording is comprehensible to the target population. Pilot testing can reveal ambiguity, technical failure, excessive duration, and accessibility barriers. Skip logic should be tested under every relevant path. The final instrument, version, instructions, consent statement, and date of deployment should be archived.

Ethical issues include informed consent, confidentiality, incentives, accessibility, vulnerable populations, and data minimization. A system may collect metadata such as Internet Protocol addresses, timestamps, device details, or geolocation even when the researcher does not require them. Such collection should be disabled where possible and disclosed where necessary. Researchers must also distinguish anonymity from confidentiality: anonymous data cannot reasonably be linked to an individual, whereas confidential data may be linkable but protected through controls.

Qualitative Analysis Software

Qualitative analysis applications assist with importing transcripts and documents, coding passages, writing analytic memos, comparing cases, building conceptual networks, and retrieving evidence. They do not perform interpretation in the human sense. Coding remains a theoretically informed activity involving decisions about meaning, context, relevance, and exception.

A transparent qualitative workflow commonly includes familiarization, initial coding, codebook development, focused coding, comparison across cases, memo writing, and theme or theory development. Software can display code frequencies and co-occurrences, but frequency is not equivalent to significance. A rarely mentioned event may be theoretically decisive; a frequently mentioned phrase may reflect the interview question rather than an important social pattern.

Researchers should preserve the relationship between the original material, the de-identified version, the codebook, analytic memos, and the interpreted findings. Team-based coding requires training, discussion of disagreements, and an agreed approach to consistency. Measures of coder agreement may be useful in some designs, but they should not be treated as universal proof of qualitative validity. Excessive pressure to achieve identical coding can suppress legitimate interpretive difference.

Confidentiality is particularly important because qualitative files often contain names, narratives, locations, and combinations of details that make participants identifiable. De-identification should be assessed in context, not limited to deleting names. Cloud collaboration and automatic transcription services should be approved before sensitive recordings are uploaded. Researchers must verify whether a service retains audio, uses it for model training, or transfers it to third parties.

Collaboration, Workflow, and Project Coordination

Research collaboration tools include version-control systems, document platforms, issue trackers, calendars, messaging applications, shared drives, and project-management systems. Their value lies in making responsibilities, versions, decisions, and dependencies visible. A project can use a document platform for drafting, a version-control repository for code, an issue tracker for tasks, and a controlled storage system for research data. These systems should be connected through clear naming conventions and identifiers rather than through uncontrolled duplication.

Version control is essential when code, instruments, protocols, or manuscripts change over time. A meaningful commit message or change record explains what changed and why. Branches can support experimentation, while review procedures protect the main version. Access should follow the principle of least privilege: collaborators receive the access required for their role, not unrestricted access by default.

Communication tools can improve speed but create fragmented decision-making. Important methodological decisions should be transferred from informal messages into an authoritative project record. Meeting notes should identify decisions, unresolved issues, responsible persons, and deadlines. Researchers should also establish rules for file naming, folder structure, data classification, response expectations, and the storage of final versions.

An Integrated Framework for Selecting Research Applications

A doctoral researcher can evaluate a tool through six questions:

1. Purpose: What research problem does the application solve, and is the problem methodological, administrative, or merely convenient?

2. Validity: Could the tool alter sampling, measurement, coding, or interpretation in a way that threatens the design?

3. Governance: Who owns the data, who can access it, and how are consent, retention, deletion, and transfer managed?

4. Auditability: Does the system preserve versions, decisions, provenance, and activity logs?

5. Interoperability: Can data be exported in open, documented formats and used by other systems?

6. Sustainability: What happens if the provider changes its pricing, withdraws a feature, suffers a breach, or closes?

These questions can be formalized as a decision matrix. Criteria may include methodological fit, privacy protection, security, accessibility, cost, training burden, integration, export capability, and institutional support. Weighting criteria makes trade-offs explicit. For example, a free platform may score well on cost but poorly on data residency and export. A highly powerful system may be unsuitable if only one researcher understands it and no succession plan exists.

A defensible workflow also requires a data-management plan. It should specify data types, file formats, naming conventions, storage locations, access rights, backup frequency, quality assurance, retention, destruction, documentation, and sharing conditions. The plan should be revised when the project changes rather than treated as a static administrative form.

Ethics, Security, and Responsible Automation

Digital research applications create ethical obligations beyond formal compliance. Researchers must protect autonomy, minimize harm, respect confidentiality, and ensure that digital convenience does not override participant interests. Institutional review or ethics approval may be required for studies involving human participants, personal data, sensitive records, or potentially harmful interventions. Approval does not remove the researcher’s continuing responsibility to monitor risk.

Security controls should be proportionate to sensitivity. Strong authentication, encryption in transit and at rest, patching, access reviews, secure backups, malware protection, and incident-response procedures are basic safeguards. Researchers should avoid storing identifiable data on personal devices without authorization and should not place confidential material into public generative-AI systems merely to obtain assistance.

Generative and predictive AI can support search expansion, transcription, translation, classification, summarization, coding suggestions, and language editing. Its outputs are probabilistic and may contain fabricated citations, distorted meaning, hidden bias, or leakage of confidential information. AI use should therefore be documented, verified against primary sources, and limited according to institutional policy and publisher requirements. The researcher remains responsible for the accuracy, originality, and ethical status of the final work. AI-generated text or coding suggestions should not be represented as independently verified scholarship.

Automation is safest when it assists repetitive, reviewable tasks and riskiest when it makes unexamined decisions about inclusion, exclusion, participant eligibility, risk, or interpretation. Human oversight should be meaningful: reviewers must be able to inspect inputs, outputs, error patterns, and uncertainty, not merely approve an opaque recommendation.

Illustrative Case: A Multi-Institutional Review and Interview Study

Background

A doctoral team is studying how small organizations adopt privacy-preserving analytics. The project combines a systematic review with semi-structured interviews across three universities.

Situation and problem

The team initially uses one commercial database, a shared spreadsheet, an online interview transcription service, and a cloud folder with unrestricted access. Records contain duplicate citations, interview audio is uploaded without a documented retention policy, and researchers disagree about which version of the interview guide is current. One member proposes using an AI tool to rank articles and summarize interviews.

Analysis

The main problem is not the number of applications but the absence of governance between them. The literature search is not reproducible because the search history is incomplete. The review is vulnerable to inconsistent screening. Interview data may be exposed to an external processor, and unrestricted access violates least-privilege principles. The AI proposal introduces risks of fabricated summaries and disclosure of sensitive content.

Approach

The team develops a protocol before further screening, searches multiple relevant databases, exports results in a standard format, and records search strings and dates. A systematic-review platform is configured for independent screening and conflict resolution. The reference manager becomes the bibliographic master, with verified metadata and controlled access.

For interviews, the team obtains ethics approval for the selected transcription arrangement, confirms data processing terms, removes unnecessary identifiers, and stores audio separately from transcripts. The interview guide receives a version number, and only the approved version is used. A secure repository with role-based permissions is established. AI is used only to suggest possible search synonyms on non-sensitive text and to identify transcription passages for human checking; no automated output is accepted without verification.

Outcome

The team can reproduce its search, explain screening decisions, identify the provenance of each transcript, and demonstrate who accessed sensitive files. Collaboration becomes slower during the initial setup but more efficient later because disagreements and duplicate work decline. The final report includes a transparent account of software, automation, data handling, and limitations.

Learning points

The case illustrates that digital maturity is a property of the whole workflow. Tool integration must preserve evidence and responsibility across transitions. Efficiency is valuable only when it does not weaken validity, confidentiality, or accountability.

Challenges and Common Mistakes

Several errors recur across digital research projects. Researchers may select tools based on popularity rather than research requirements, assume that a platform’s default settings are ethically appropriate, or confuse automatic backup with a tested recovery plan. Other mistakes include failing to archive search strategies, treating imported citations as accurate, overwriting original data, using inconsistent file names, granting broad permissions, and relying on a single proprietary service.

A further danger is technological determinism: the belief that a tool’s output is objective because it is computational. Algorithms embody training data, design assumptions, classification categories, and optimization choices. A dashboard can make weak evidence appear authoritative through attractive visualizations. Qualitative code counts can create a false impression of precision, while automated screening can reproduce historical publication biases.

Projects should plan for failure. They need tested backups, alternative export routes, documented dependencies, succession arrangements, and an incident process for accidental disclosure or data corruption. Researchers should record limitations of the tools themselves in methods sections and doctoral theses.

Current Developments and Emerging Directions

Research infrastructure is moving toward more integrated platforms, persistent identifiers, machine-actionable metadata, open research objects, and reproducible computational environments. Containerization, workflow engines, and executable notebooks can link code, data, parameters, and outputs. Persistent identifiers for researchers, publications, datasets, and projects improve attribution and discovery.

Open science practices are also expanding, but openness must be calibrated. Sharing protocols, code, and de-identified data can support verification; unrestricted release may harm participants or violate contractual obligations. The relevant principle is responsible openness, not disclosure at any cost.

AI-assisted scholarly tools will likely become more capable in retrieval, classification, translation, and workflow support. Their legitimacy will depend on provenance, explainability, privacy protection, evaluation across disciplines and languages, and clear allocation of responsibility. Doctoral researchers should treat claims about accuracy as empirical questions requiring validation, not as features to be accepted from vendors.

Best Practices for Doctoral Researchers

  • Begin with the research design and data requirements, not with a preferred application.
  • Maintain a written map of tools, data flows, responsibilities, and dependencies.
  • Verify bibliographic metadata and preserve search histories.
  • Use version control and retain original data and records.
  • Apply least-privilege access and separate identifiable from analytical data.
  • Test survey logic, transcription quality, exports, backups, and recovery procedures.
  • Record software versions, settings, transformations, and human decisions.
  • Use open or well-documented export formats whenever possible.
  • Treat automated outputs as provisional and independently verify them.
  • Review privacy, copyright, licensing, accessibility, and data-transfer conditions.
  • Archive sufficient materials to support audit and reproduction without exposing protected information.
  • Reassess tools when the research question, data sensitivity, team, or legal context changes.

Chapter Summary

Computer applications form an interconnected scholarly research environment. Literature databases support discovery, reference managers support bibliographic integrity, systematic-review platforms support transparent evidence synthesis, ELNs preserve experimental records, survey systems enable structured data collection, qualitative software supports organization and interpretation, and collaboration tools coordinate people and versions. Their value depends on methodological fit and responsible governance.

A high-quality digital workflow preserves traceability, reproducibility, auditability, interoperability, privacy, and security. Researchers must document searches, verify metadata, control access, retain versions, test data-collection instruments, and distinguish automated assistance from scholarly judgement. AI can reduce repetitive work but cannot transfer responsibility for validity, confidentiality, or interpretation. The mature researcher evaluates applications as components of an evidence system and plans for both ordinary use and technological failure.

Key Terms

Bibliographic database: A structured searchable collection of scholarly records and associated metadata.

Reference manager: Software that stores, organizes, and formats bibliographic information.

Systematic review: An evidence synthesis using explicit, reproducible methods for searching, selecting, appraising, and synthesizing studies.

Auditability: The extent to which decisions, changes, and activities can be examined retrospectively.

Traceability: The ability to connect a claim to its sources, data, procedures, and transformations.

Reproducibility: The ability to repeat documented procedures and obtain the same or comparable results.

Interoperability: The capacity of systems to exchange and use data without unacceptable loss of meaning.

Electronic laboratory notebook: A digital record of research plans, procedures, observations, and results.

Metadata: Structured information describing a research object, such as its creator, date, format, or subject.

Version control: A system for recording and managing successive changes to files or code.

Data provenance: The documented history of a dataset or result, including its origins and transformations.

De-identification: The removal or alteration of identifying information to reduce linkability to individuals.

Role-based access: Permission assignment according to a user’s research role and responsibilities.

Least privilege: The security principle that users receive only the access necessary for their tasks.

Qualitative coding: The assignment of analytic labels to segments of qualitative material.

Controlled vocabulary: A standardized set of terms used to improve consistent indexing and retrieval.

Data minimization: Collecting and retaining only data necessary for a legitimate research purpose.

Responsible openness: Sharing research materials to support verification while protecting people, rights, and legitimate restrictions.

Review Questions

Short Answer Questions

1. Distinguish traceability from reproducibility in a digital research workflow.

2. Why should imported bibliographic metadata be verified?

3. State two functions of an electronic laboratory notebook.

4. Why is frequency of a qualitative code not equivalent to analytical significance?

5. What is meant by least-privilege access?

Long Answer Questions

1. Explain how literature databases, reference managers, and systematic-review platforms can be integrated into a transparent evidence-synthesis workflow.

2. Discuss the methodological and ethical issues involved in using online survey systems for research with human participants.

3. Examine the role of electronic laboratory notebooks in research integrity and reproducibility.

4. Evaluate the benefits and limitations of qualitative analysis software in doctoral research.

5. Develop a framework for selecting a digital research application, incorporating validity, governance, auditability, interoperability, and sustainability.

Analytical / Application Questions

1. A research team stores identifiable interview transcripts in a shared cloud folder and uses an AI transcription service without checking its retention policy. Diagnose the risks and propose a revised workflow.

2. A systematic-review team allows an automated tool to exclude articles based on predicted relevance. Design safeguards that would preserve transparency and reduce selection bias.

3. A doctoral project uses five separate applications for data collection, analysis, collaboration, and storage. Construct a data-management and provenance plan that would allow an external examiner to audit the project.

22. Multiple Choice Questions with Answers

Question 1

Which property most directly enables a researcher to connect a published claim with the data and procedures that produced it?

A. Traceability

B. Anonymity

C. Scalability

D. Automation

Correct Answer: A. Traceability

Question 2

Why should bibliographic records imported into a reference manager be checked manually?

A. Reference managers cannot store author names

B. Imported metadata may contain errors or omissions

C. Manual checking removes the need for citation styles

D. Databases prohibit the use of imported records

Correct Answer: B. Imported metadata may contain errors or omissions

Question 3

What makes a literature review systematic rather than merely computer-assisted?

A. Use of the most expensive database

B. Use of automated summaries

C. Explicit and defensible procedures for searching, selection, appraisal, and synthesis

D. A large number of retrieved articles

Correct Answer: C. Explicit and defensible procedures for searching, selection, appraisal, and synthesis

Question 4

Which ELN practice best supports research-record integrity?

A. Replacing incorrect entries without explanation

B. Allowing unrestricted editing by all users

C. Deleting anomalous observations

D. Preserving versions and documenting corrections

Correct Answer: D. Preserving versions and documenting corrections

Question 5

A survey platform collects IP addresses although the study does not require them. Which principle is most directly implicated?

A. Data minimization

B. Citation chaining

C. Coder agreement

D. Version branching

Correct Answer: A. Data minimization

Question 6

Why should qualitative researchers avoid interpreting code frequency as importance by itself?

A. Software cannot display coded passages

B. Rare events may be theoretically significant

C. Qualitative data never contain repeated ideas

D. Frequency calculations are always mathematically invalid

Correct Answer: B. Rare events may be theoretically significant

Question 7

Which arrangement best demonstrates least-privilege access?

A. Every collaborator receives administrator rights

B. Only the principal investigator can access any project file

C. Each user receives access required for the responsibilities assigned

D. Files are made public to simplify collaboration

Correct Answer: C. Each user receives access required for the responsibilities assigned

Question 8

What is the principal concern when an AI tool ranks articles for systematic-review screening?

A. It guarantees that all irrelevant articles are removed

B. It may systematically deprioritize certain methods, languages, or populations

C. It prevents reviewers from recording decisions

D. It makes protocol development unnecessary

Correct Answer: B. It may systematically deprioritize certain methods, languages, or populations

Question 9

Which feature most improves interoperability in a multi-tool research workflow?

A. Exclusive reliance on undocumented proprietary formats

B. Avoidance of metadata

C. Well-documented export formats and stable identifiers

D. Deleting intermediate files

Correct Answer: C. Well-documented export formats and stable identifiers

Question 10

In the illustrative case, why was AI use restricted to non-sensitive text and human-verified assistance?

A. AI is incapable of processing text

B. Automation can create privacy, accuracy, and accountability risks

C. Search synonyms cannot be generated computationally

D. Human researchers are not permitted to use software

Correct Answer: B. Automation can create privacy, accuracy, and accountability risks

Research Ethics & Computer Applications
Chapter 8 of 14

Research Ethics & Computer Applications

Chapter 9
Computational Analysis and Research Analytics

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

9. Computational Analysis and Research Analytics

Introduction and Context

Doctoral research increasingly depends on computational methods. Statistical software, programming languages, databases, visualization systems, text-mining tools, simulation environments, and cloud platforms allow researchers to process evidence at a scale and speed that would be impossible through manual procedures. These technologies, however, do not make research automatically scientific. Computation can produce precise-looking results from biased samples, invalid measures, inappropriate models, or poorly documented code.

Computational analysis is therefore both a technical and epistemological activity. It concerns how data are represented, transformed, analyzed, visualized, interpreted, and communicated. Research analytics extends this concern to the systematic use of data and analytical models for explanation, prediction, evaluation, and decision support. The doctoral researcher must understand not only how to execute an algorithm but also what assumptions it embodies, whose interests it serves, how uncertainty is represented, and whether conclusions remain valid outside the observed data.

This chapter presents a research-oriented framework for computational analysis. It treats software and infrastructure as components of a reproducible research system rather than as isolated tools. Particular attention is given to statistical reasoning, programming, databases, visualization, text mining, simulation, high-performance computing, cloud services, validity, bias, interpretability, and research ethics.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Distinguish computational analysis from broader research analytics and identify their roles in doctoral research.

2. Select appropriate statistical, programming, database, visualization, text-mining, simulation, and computing approaches.

3. Evaluate assumptions, data quality, uncertainty, bias, validity, and interpretability in computational studies.

4. Design a reproducible and auditable analytical workflow.

5. Recognize ethical, legal, security, governance, and professional responsibilities in data-intensive research.

6. Critically assess computational results and communicate them to technical and non-technical audiences.

The Computational Research System

A computational study can be understood as a chain linking a research question to evidence and then to a warranted claim. A useful abstraction is:

Question → operationalization → data acquisition → data preparation → analysis → validation → interpretation → communication.

Each transition can introduce error. A question about digital exclusion, for example, may be operationalized using internet access, device ownership, or meaningful participation. These measures are not interchangeable. Data acquisition may exclude people who are difficult to reach; preparation may remove unusual cases; analysis may impose distributional assumptions; and communication may hide uncertainty through an attractive chart.

The distinction between a data result and a research claim is essential. A result is an output of a procedure, such as a coefficient, cluster, prediction, or simulated estimate. A claim is an interpretation of that result in relation to theory, context, and limitations. Computation supports claims, but it does not by itself establish causation, generalizability, or social importance.

Important terminology

A dataset is an organized collection of observations, variables, metadata, and sometimes identifiers. Structured data follow a defined schema, while unstructured data include text, images, audio, or other materials requiring additional representation. Metadata describe data provenance, definitions, formats, collection conditions, and transformations. A pipeline is an ordered set of computational operations. Reproducibility means that an analysis can be repeated from the same materials and produce the same results; replicability commonly refers to obtaining consistent findings in a new study or implementation. These terms are related but should not be treated as synonyms.

An estimator uses sample data to estimate a population quantity. Uncertainty expresses limited knowledge arising from sampling, measurement, model specification, or computational approximation. Validity concerns whether a method supports the intended inference. Reliability concerns consistency of measurement or procedure. Bias is systematic deviation that can distort inference, whereas variance reflects sensitivity to sampled data. Interpretability concerns the extent to which a human can understand how an analytical output was produced and what it means.

Choosing Methods Rather Than Merely Tools

Statistical software and statistical reasoning

Packages such as R, Python libraries, Stata, SPSS, and specialized statistical systems can perform descriptive analysis, estimation, hypothesis testing, regression, multilevel modeling, survival analysis, Bayesian inference, and machine learning. Tool selection should follow the research design and data-generating process, not personal familiarity or popularity.

Descriptive statistics summarize observed data; they do not automatically support population inference. Inferential procedures require attention to sampling, dependence, missingness, measurement level, and model assumptions. For example, ordinary least squares regression assumes, among other conditions, a suitable functional form and an error structure appropriate to the inference being made. Normality of the raw outcome is not generally the central requirement, but influential observations, heteroscedasticity, dependence, and misspecification can seriously affect conclusions.

A responsible workflow combines graphical diagnostics, substantive reasoning, sensitivity analysis, and model comparison. A statistically significant result may have negligible practical importance, while a non-significant result may reflect low power or imprecise measurement rather than absence of an effect. Researchers should report effect sizes, uncertainty intervals, sample construction, missing-data decisions, and the analyses considered before presenting a final model.

Bayesian methods make prior information explicit and produce probability statements conditional on a model and prior distribution. Frequentist methods use long-run properties of procedures and do not interpret a p-value as the probability that a hypothesis is true. Both traditions can be rigorous; neither removes the need for appropriate design, measurement, and critical interpretation.

Programming as a research instrument

Programming supports automation, complex data transformation, simulation, bespoke algorithms, and reproducible documentation. Python and R are widely used, while SQL is central to relational data management. Programming also creates risks: an indexing error, silent type conversion, faulty loop, or inappropriate default can alter an entire analysis without producing an obvious failure.

Good research code is modular, tested, version-controlled, documented, and connected to a defined computational environment. Functions should have clear inputs and outputs. Assertions and unit tests can detect invalid values and unexpected changes. Code review by another researcher is particularly valuable for consequential analyses. A script that runs successfully is not necessarily a correct script; correctness requires tests against known cases and alignment with the research design.

Databases and data provenance

Relational databases organize information into tables connected through keys and constraints. Normalization reduces unnecessary duplication, while indexes improve retrieval. SQL enables filtering, joining, aggregation, and controlled extraction. Document, graph, and key-value databases may be appropriate for semi-structured or relationship-intensive data, but flexibility should not replace governance.

Researchers must distinguish the original source, cleaned data, derived data, and analytical dataset. A provenance record should identify who collected the data, when and how it were obtained, what transformations occurred, which records were excluded, and which version was analyzed. Data dictionaries should define variables, units, coding schemes, missing-value conventions, and permissible ranges. Identifiers should be separated from analytical variables whenever possible, and access should follow the principle of least privilege.

Visualization as analysis

Visualization is not merely presentation. It can reveal missingness, nonlinearity, outliers, clustering, temporal patterns, and distributional differences before formal modeling. Histograms, density plots, box plots, scatterplots, residual plots, maps, network diagrams, and uncertainty displays each encode different assumptions.

A credible visualization identifies the population or sample, units, time period, denominator, and scale. Truncated axes, inappropriate color schemes, three-dimensional decoration, excessive aggregation, and omitted uncertainty can mislead even when the underlying data are accurate. For accessibility, researchers should use readable labels, color palettes distinguishable by people with color-vision differences, text alternatives, and formats suitable for different devices.

Text mining and natural-language data

Text mining converts language into analyzable representations. Common approaches include tokenization, normalization, term-frequency matrices, n-grams, topic models, sentiment classification, named-entity recognition, embeddings, and supervised language models. Every representation loses some context. Removing stop words may eliminate meaningful negation; stemming may merge distinct terms; automated sentiment tools may perform poorly across dialects, disciplines, or cultural contexts.

A text-mining study should define the corpus, sampling frame, language, unit of analysis, annotation procedure, and validation strategy. Human-coded samples can evaluate classification quality, but inter-coder disagreement may reveal conceptual ambiguity rather than simple error. Privacy risks are substantial because apparently public text may contain identifiable or sensitive information. Researchers should consider consent, platform terms, re-identification, quotation traceability, and the consequences of labeling people or communities.

Simulation and computational experiments

Simulation is useful when real-world experimentation is impractical, unethical, expensive, or too slow. In a Monte Carlo study, researchers repeatedly generate data under specified conditions and evaluate the performance of an estimator or decision rule. Agent-based models represent interacting entities and can explore emergent behavior. Discrete-event simulation models events through time, while system-dynamics models represent stocks, flows, and feedback.

A simulation does not discover reality independently of its assumptions. Its conclusions are conditional: if the data-generating mechanism and parameterization are reasonable, then the observed computational behavior is informative. Credible simulation requires transparent assumptions, calibration or validation where possible, sensitivity analysis, sufficient repetitions, and careful distinction between model verification—whether the program implements the model correctly—and model validation—whether the model adequately represents the intended system.

High-performance and cloud computing

Large-scale analysis may use parallel processing, graphics processing units, distributed storage, clusters, or cloud platforms. Cloud services provide elastic resources and managed software, but introduce issues involving data location, access control, vendor dependence, cost, service configuration, and jurisdiction. Parallel execution can change numerical results because floating-point operations are not always associative. Reproducibility therefore requires recording software versions, hardware or accelerator details where relevant, random seeds, parameters, dependencies, and resource configurations.

A computational budget is also a research-ethics issue. Inefficient code consumes energy and money, while excessive experimentation can create hidden analytic flexibility. Researchers should use appropriate resource limits, monitor costs, delete temporary data securely, and avoid transferring sensitive data to services not approved for that data.

A Framework for Valid and Reproducible Analysis

A robust computational workflow can be organized around six questions.

First, what is the estimand or decision target? The researcher should specify whether the goal is description, prediction, causal effect estimation, classification, optimization, or exploration. Vague objectives encourage inappropriate methods.

Second, how were observations generated? Sampling, recruitment, platform design, sensor behavior, and missingness determine what can be inferred. Selection bias, survivorship bias, collider bias, and measurement error can remain even in very large datasets.

Third, what transformations were applied? Cleaning rules, imputation, feature engineering, scaling, filtering, and record linkage should be documented before results are interpreted. Data leakage occurs when information unavailable at the time of prediction enters model training.

Fourth, how was performance or fit assessed? Training performance is not evidence of generalization. Holdout data, cross-validation, temporal validation, calibration, class-specific metrics, and external validation may be appropriate. Accuracy alone can conceal poor performance for minority classes.

Fifth, how sensitive are the findings? Researchers should examine alternative specifications, plausible missing-data assumptions, influential observations, different thresholds, priors, random seeds, and reasonable preprocessing choices. Sensitivity analysis does not guarantee truth, but it reveals dependence on assumptions.

Sixth, can another researcher audit the work? A reproducible package may include code, environment files, synthetic or permitted data, documentation, a workflow graph, and a computational notebook. Releasing data is not always ethical or legal; controlled access, de-identification, or a data-use agreement may be better solutions.

The framework can be represented as a validity triangle: measurement validity, inferential validity, and computational validity. Measurement validity asks whether variables represent the intended concepts. Inferential validity asks whether the design and model justify the conclusion. Computational validity asks whether the implemented procedure accurately executes the intended analysis. A weakness in any one corner limits the whole study.

An Illustrative Case: Predicting Student Withdrawal

Background

Consider an illustrative doctoral project at a fictional public university. The institution wishes to identify students who may withdraw from online courses early enough for advisers to offer support. The research team receives enrollment records, learning-management-system activity, assessment submissions, and voluntary survey responses.

Situation and problem

An initial model reports 92 percent accuracy. Administrators propose automatically sending high-risk students messages and using the model in progression decisions. The research team must determine whether the result is valid and ethically acceptable.

Analysis

The team first defines the target as withdrawal before the final assessment and restricts predictors to information available during the first three weeks. It discovers that a post-withdrawal administrative code had entered the feature table, producing leakage. After removing it, accuracy falls substantially. Class imbalance also means that a model predicting continuation for everyone appears accurate. The team therefore reports sensitivity, specificity, precision, recall, calibration, and subgroup performance rather than accuracy alone.

Further examination shows that survey participation is lower among students with limited connectivity. Learning-platform activity is an imperfect proxy for engagement because students may download materials offline. The team evaluates performance across age groups, disability-related accommodation status where lawful and appropriate, study mode, and connectivity categories. It uses an interpretable baseline model, compares it with more complex models, and conducts temporal validation on a later cohort.

Approach and governance

The model is positioned as a referral aid rather than a decision-maker. Students are informed about the support program, and advisers review cases. The university establishes an appeal and correction process, limits access, defines retention periods, logs model use, and prohibits use for punitive decisions. Data protection review addresses purpose limitation, minimization, security, and the possibility of re-identification. Documentation records the model’s intended use, known limitations, training population, validation results, and monitoring plan.

Outcome

The final system identifies some students who may benefit from contact, but it is not treated as a definitive prediction of individual need. Monitoring reveals performance drift after a change in course design, leading to recalibration and renewed validation. The project’s principal contribution is not a high accuracy score; it is a bounded, transparent, and evaluated decision-support process.

Learning points

The case demonstrates that leakage, class imbalance, proxy variables, unequal data quality, drift, and automation bias can undermine apparently successful analytics. It also shows that ethical deployment requires human responsibility, contestability, governance, and a clear distinction between support and surveillance.

Risks, Limitations, and Common Errors

Several recurring errors deserve explicit attention. Researchers may confuse correlation with causation, treat a large sample as protection against bias, select a model after inspecting outcomes without accounting for that flexibility, or report only favorable metrics. Multiple testing and repeated experimentation can inflate false discoveries. Overfitting occurs when a model captures idiosyncrasies of the research sample rather than stable structure. Underfitting can conceal meaningful relationships.

Missing data are not simply inconvenient blanks. The mechanism of missingness may be associated with observed or unobserved variables. Complete-case analysis can change the target population, while imputation can create unjustified confidence if uncertainty is ignored. Deduplication and record linkage can also remove valid cases or merge different people.

Fairness cannot be reduced to one universal metric. Equal error rates, demographic parity, calibration, and individual similarity may conflict under certain conditions. A technically fair model may still support an unfair institutional policy if the target itself reflects unequal opportunity. Researchers must therefore examine social context, distribution of benefits and burdens, affected communities, and available remedies.

Other common mistakes include treating software defaults as methodological decisions, failing to preserve raw data, overwriting intermediate files, using unreviewed code, interpreting a visualization without its denominator, and releasing sensitive data in the name of openness. Reproducibility is not achieved by uploading a notebook alone; dependencies, data access, parameters, and execution instructions matter.

Ethical, Legal, and Professional Responsibilities

Computational researchers have duties of respect, beneficence, non-maleficence, justice, autonomy, and accountability. Consent may be required, but consent alone does not justify every secondary use. Public availability does not eliminate privacy expectations or the possibility of harm. Data minimization, purpose limitation, secure storage, access control, encryption, retention rules, and incident response should be designed into the workflow.

Researchers should disclose conflicts of interest, funding influence, material exclusions, analytical flexibility, and limitations. Where automated systems affect people, meaningful explanation, human review, correction, and appeal are important safeguards. Governance should identify data stewards, model owners, reviewers, and escalation procedures. Institutional review, sector-specific regulation, intellectual-property rules, contractual restrictions, and applicable data-protection law must be considered before collection and deployment.

Responsible authorship includes credit for data curation, software, methods, and infrastructure. Software and data citations support scholarly recognition and enable auditing. A preregistration or analysis plan can reduce undisclosed flexibility, although exploratory analysis remains valuable when clearly labeled as exploratory. The researcher’s obligation is not to eliminate uncertainty but to represent it honestly.

Emerging Directions and Best Practices

Research analytics is moving toward integrated workflows that combine statistical modeling, machine learning, causal inference, knowledge graphs, large language models, automated feature engineering, and interactive dashboards. These developments may accelerate discovery, but automation can also conceal assumptions and amplify historical patterns. Large language models used for coding or text analysis require verification, privacy review, prompt and version documentation, and attention to fabricated outputs and unstable behavior.

Digital twins, federated learning, privacy-enhancing computation, differential privacy, synthetic data, and confidential computing are promising approaches for complex or sensitive research. Each has limitations: synthetic data may reproduce bias, privacy mechanisms may reduce utility, and federated systems do not automatically solve governance or inference problems.

A practical standard for doctoral work is to make the analysis question-driven, assumption-aware, versioned, tested, transparent, uncertainty-conscious, ethically governed, and proportionate to the decision at stake. Researchers should prefer the simplest adequate method, validate before deployment, involve domain experts and affected communities, and report negative or inconclusive findings when they are relevant.

Chapter Summary

Computational analysis transforms research questions into data procedures, models, and interpretable claims. Statistical software, programming, databases, visualization, text mining, simulation, and cloud computing expand analytical capability but also introduce assumptions and new forms of error. Valid research requires attention to measurement, sampling, missingness, model specification, uncertainty, leakage, generalization, fairness, and computational correctness. Reproducible pipelines document data provenance, code, environments, parameters, and decisions. Ethical practice adds privacy, security, consent, accountability, human oversight, contestability, and responsible communication. The central doctoral skill is not merely operating sophisticated tools; it is judging whether computational evidence warrants the claim being made and whether its use is responsible.

Key Terms

Computational analysis: Use of computational procedures to transform, model, examine, or simulate research data.

Research analytics: Systematic use of data and analytical methods to support explanation, prediction, evaluation, or decisions.

Data provenance: Record of a dataset’s origin, custody, transformations, and analytical history.

Pipeline: Ordered sequence of computational operations applied to data.

Reproducibility: Ability to repeat an analysis with the same materials and obtain consistent results.

Replicability: Ability to obtain consistent findings through a new study or implementation.

Estimator: Rule or procedure that uses sample data to estimate a population quantity.

Uncertainty: Incompleteness of knowledge arising from sampling, measurement, modeling, or computation.

Bias: Systematic distortion of an estimate, decision, or representation.

Variance: Sensitivity of an estimate or model to the particular sample or data used.

Validity: Extent to which evidence and methods support the intended inference.

Interpretability: Degree to which a human can understand an analytical procedure or output.

Data leakage: Use of information in model development that would not be available when making the intended prediction.

Overfitting: Modeling sample-specific noise as if it were general structure.

Sensitivity analysis: Examination of how conclusions change under plausible alternative assumptions.

Text mining: Computational extraction of patterns or information from textual data.

Simulation: Computational generation or representation of processes under specified assumptions.

Model verification: Checking whether software correctly implements the specified model.

Model validation: Assessing whether a model adequately represents the intended real-world system or purpose.

Algorithmic fairness: Evaluation and governance of whether an automated system distributes errors, benefits, and burdens acceptably across groups.

Review Questions

Short Answer Questions

1. Distinguish reproducibility from replicability.

2. Why is a large dataset not necessarily an unbiased dataset?

3. What is data leakage, and why does it invalidate predictive evaluation?

4. State two purposes of visualization during analysis rather than presentation.

5. Explain the difference between model verification and model validation.

Long Answer Questions

1. Explain how a doctoral researcher should evaluate assumptions and uncertainty in a regression-based study.

2. Discuss the role of data provenance, version control, testing, and environment specification in reproducible research.

3. Compare statistical modeling, text mining, and simulation in terms of research objectives and limitations.

4. Analyze the ethical and governance requirements for using predictive analytics in an educational institution.

5. Explain how cloud and high-performance computing affect reproducibility, security, cost, and research design.

Analytical / Application Questions

1. A classifier reports 95 percent accuracy on a highly imbalanced dataset. Design an evaluation strategy that determines whether it is useful and fair.

2. A text-mining project uses public social-media posts to infer mental-health categories. Identify methodological, ethical, privacy, and validity issues and propose safeguards.

3. A simulation produces a striking policy recommendation, but its results change substantially under small parameter changes. How should the researcher analyze, report, and govern this finding?

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes a research claim from a computational result?

A. A research claim is always numerical, whereas a result is qualitative.

B. A research claim interprets a result in relation to theory, context, and warranted inference.

C. A research claim is produced automatically by statistical software.

D. A computational result is necessarily more valid than a theoretical argument.

Correct Answer: B. A research claim interprets a result in relation to theory, context, and warranted inference.

Question 2

A predictive model uses a variable recorded only after a student has withdrawn. This is primarily an example of:

A. Regularization

B. External validation

C. Data leakage

D. Stratified sampling

Correct Answer: C. Data leakage

Question 3

Which practice most directly improves computational reproducibility?

A. Reporting only the final accuracy score

B. Using the most complex available model

C. Recording code, software versions, parameters, and execution environment

D. Deleting intermediate files after analysis

Correct Answer: C. Recording code, software versions, parameters, and execution environment

Question 4

Why can accuracy be misleading for a highly imbalanced classification problem?

A. Accuracy cannot be calculated for categorical outcomes.

B. A model can appear accurate while failing to identify the minority class.

C. Accuracy always measures calibration rather than classification.

D. Imbalance affects only regression models.

Correct Answer: B. A model can appear accurate while failing to identify the minority class.

Question 5

In a simulation study, checking whether the program implements the specified equations correctly is called:

A. Model verification

B. Model generalization

C. Model calibration

D. Model interpretation

Correct Answer: A. Model verification

Question 6

Which statement about text mining is most defensible?

A. Public text is automatically free of privacy concerns.

B. Text representations preserve all contextual meaning.

C. Automated language tools should be validated for the corpus and population being studied.

D. Human annotation is unnecessary when a large corpus is available.

Correct Answer: C. Automated language tools should be validated for the corpus and population being studied.

Question 7

A researcher changes the outcome definition, exclusions, and model repeatedly after viewing results, without disclosure. The main concern is:

A. Analytical flexibility and inflated false-discovery risk

B. Database normalization

C. Hardware parallelism

D. Improved external validity

Correct Answer: A. Analytical flexibility and inflated false-discovery risk

Question 8

Which action is most appropriate when an automated system influences student support decisions?

A. Allow the model to make irreversible decisions without review.

B. Use the model as a bounded aid with human oversight, documentation, and appeal mechanisms.

C. Hide the model’s limitations to increase acceptance.

D. Use every available student variable regardless of purpose.

Correct Answer: B. Use the model as a bounded aid with human oversight, documentation, and appeal mechanisms.

Question 9

What does sensitivity analysis primarily examine?

A. Whether a computer has sufficient storage

B. How findings change under plausible alternative assumptions or specifications

C. Whether a dataset contains any numerical variables

D. Whether a visualization uses color effectively

Correct Answer: B. How findings change under plausible alternative assumptions or specifications

Question 10

Which combination best represents the validity triangle described in the chapter?

A. Speed, cost, and storage

B. Measurement validity, inferential validity, and computational validity

C. Privacy, encryption, and authentication

D. Sampling, coding, and publication

Correct Answer: B. Measurement validity, inferential validity, and computational validity

Research Ethics & Computer Applications
Chapter 9 of 14

Research Ethics & Computer Applications

Chapter 10
Reproducibility, Open Science, and Research Software Engineering

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

10. Reproducibility, Open Science, and Research Software Engineering

Introduction and context

Contemporary information-technology research increasingly depends on software, computational infrastructure, data pipelines, simulation, and automated analysis. A published claim may therefore be supported not only by a manuscript and dataset, but also by source code, configuration files, dependency specifications, execution logs, notebooks, workflow definitions, and records of analytical decisions. When these elements are unavailable, undocumented, or impossible to execute, readers may be unable to determine how a result was produced or whether it can be independently verified.

Reproducibility is consequently more than a technical convenience. It is an epistemic and ethical requirement. A reproducible study makes its evidential pathway sufficiently transparent for qualified others to inspect, rerun, challenge, and extend it. Open science broadens this principle by encouraging responsible sharing of methods, data, code, materials, and outputs. Research software engineering provides the professional practices needed to build dependable computational artefacts rather than treating research code as disposable support material.

The objective is not to demand that every study release every file. Privacy, security, intellectual property, contractual restrictions, and potential misuse may justify controlled access. The standard is responsible transparency: researchers should disclose what can be shared, explain what cannot, and provide enough documentation for an informed assessment of the work.

Learning objectives

By the end of this chapter, learners should be able to:

  • distinguish reproducibility, replicability, repeatability, and generalizability;
  • design an auditable research repository using version control and persistent identifiers;
  • explain the roles of testing, workflow automation, containers, and dependency management;
  • compare preregistration and registered reports with conventional publication practices;
  • evaluate ethical, legal, security, and governance constraints on open research;
  • develop a practical reproducibility plan for a computational research project; and
  • critically assess the limitations of claims that a computational result is “reproducible.”

The evidential meaning of reproducibility

Terminology varies across disciplines, so definitions should be stated explicitly. In this chapter, repeatability refers to obtaining consistent results when the same researcher uses the same procedures and environment. Reproducibility commonly refers to obtaining consistent results when another researcher uses the same data, code, and documented procedures. Replicability usually concerns whether an independent study addressing the same question, often with new data or an independently implemented method, reaches compatible conclusions. Generalizability concerns whether findings transfer to other populations, settings, datasets, or conditions. These concepts overlap but are not interchangeable.

A computational result has several layers. The numerical output may be reproducible while the scientific interpretation is not; a script may run successfully while the data-processing decisions remain opaque; and a repository may be publicly accessible while its dependencies are obsolete. Reproducibility therefore has technical, procedural, interpretive, and social dimensions. It includes the ability to identify the relevant artefact, understand its provenance, execute it, inspect its assumptions, and judge whether the resulting conclusion is warranted.

A useful model is an audit chain:

1. Question and design: What was planned, and why is the design appropriate?

2. Inputs: What data, instruments, files, or external services were used?

3. Transformation: Which cleaning, feature-engineering, exclusion, and analytical operations occurred?

4. Execution: Which code, software versions, hardware, parameters, and random seeds were involved?

5. Outputs: What tables, models, visualizations, logs, and reports were generated?

6. Interpretation: How were results translated into claims, and what uncertainties remain?

An auditable project connects each link. A final figure without provenance is a weak evidential object; a figure linked to a versioned script, input manifest, test results, and documented interpretation is considerably stronger.

Open science as a research governance model

Open science is an approach to research that promotes transparency, accessibility, collaboration, and reuse throughout the research lifecycle. It includes open access to publications, open or appropriately governed data, open-source software, open methods, open peer review in some settings, and sharing of educational or infrastructural resources. Openness is not identical to unrestricted disclosure. A responsible model distinguishes between open, controlled, restricted, and non-shareable materials.

The principle of “as open as possible, as closed as necessary” requires justification. For example, personally identifiable health records should not be placed in a public repository merely to demonstrate openness. Instead, researchers may publish a data dictionary, synthetic example data, de-identification methods, access criteria, and code that operates on a compatible protected dataset. Similarly, vulnerability research may require coordinated disclosure rather than immediate publication of exploit details.

Open methods are particularly important in software-dependent research. A methods section should identify data acquisition, preprocessing, analytical choices, software libraries, parameter values, hardware requirements, and known failure conditions. Statements such as “standard preprocessing was applied” are inadequate when preprocessing can materially affect the result.

Preregistration and registered reports

Preregistration records research questions, hypotheses, outcomes, analysis plans, sampling rules, and decision criteria before analysis begins. It separates confirmatory work, in which tests are planned in advance, from exploratory work, in which patterns are investigated and hypotheses may be generated after examining data. Exploratory research is legitimate; the ethical problem arises when exploratory decisions are presented as if they had been specified beforehand.

A registered report extends preregistration into the publication process. The study design and analysis plan are peer reviewed before data collection or analysis, and an in-principle acceptance may be granted before results are known. This reduces incentives to select methods or conclusions based on the eventual result. It does not eliminate poor design, implementation errors, or questionable interpretation, but it makes the decision process more visible.

Preregistration must be sufficiently precise to be useful without pretending that all contingencies can be predicted. Deviations are acceptable when documented, justified, and clearly labelled. A strong report distinguishes planned analyses, deviations from the plan, sensitivity analyses, and post hoc explorations.

Research software engineering: from scripts to engineered artefacts

Research software engineering applies software-engineering discipline to scientific and scholarly computation. Its concern is not to turn every researcher into a commercial software developer, but to ensure that code supporting a claim is understandable, testable, maintainable, and appropriately controlled.

Version control and provenance

A version-control system records changes to code and related files. Each commit should represent a coherent change and include a meaningful message. Branches can isolate experimental work, while tags or releases identify the exact state associated with a manuscript, dataset, or published result. A repository should contain a clear README, licence, citation information, contribution guidance where relevant, and a change history.

Version control does not automatically provide reproducibility. A repository containing only the latest script may omit earlier analytical decisions, generated configuration, data provenance, or system dependencies. Large or sensitive files may require dedicated storage and access controls. The relationship between repository versions and persistent archival releases should be explicit.

Documentation and literate research

Documentation operates at several levels. Conceptual documentation explains the research question and design. Technical documentation describes installation, inputs, commands, configuration, expected outputs, and troubleshooting. Code documentation explains interfaces, assumptions, units, and exceptional cases. Data documentation includes provenance, schema, missing-value conventions, transformations, licences, and ethical restrictions.

Literate programming and computational notebooks combine narrative, code, output, and interpretation. They can make reasoning visible, but notebooks also create risks: hidden state, execution out of order, embedded credentials, excessive manual editing, and dependence on an interactive session. A robust project converts critical notebook logic into tested modules or scripts and records the execution order and environment.

Testing and quality assurance

Testing provides evidence that software behaves as intended. Unit tests examine small functions; integration tests assess interactions among components; system or workflow tests evaluate an end-to-end pipeline; and regression tests detect unintended changes in previously working behaviour. Property-based tests examine general properties across many inputs, while validation tests compare outputs with known benchmarks or independently calculated results.

Testing does not prove that a scientific model is true. It can show that an implementation conforms to its specification, reproduces a known result, rejects invalid input, and remains stable after modification. Scientific validation must additionally consider construct validity, measurement error, statistical assumptions, data leakage, bias, and sensitivity to analytical choices.

Automation and workflow management

Manual execution is a major source of irreproducibility. Workflow systems represent analyses as directed graphs of inputs, processes, and outputs. They can rerun only tasks affected by changed inputs, record dependencies, parallelize computation, and preserve provenance. Continuous-integration services can automatically install dependencies, run tests, check formatting, build documentation, and verify that a minimal example executes.

Automation should be transparent. A workflow that silently downloads changing data, relies on an external API, or uses the current date without recording it may be automated yet non-auditable. Effective workflows pin important inputs, record checksums, expose parameters, and fail loudly when assumptions are violated.

Environments, containers, and dependency management

A computational environment consists of operating-system components, programming languages, libraries, system packages, hardware, environment variables, and external services. Dependency specifications such as lockfiles or environment manifests record required versions. Containers package an application and many of its dependencies in an isolated image, improving portability between a researcher’s workstation, a server, and a cloud platform.

Containers are not complete time capsules. They depend on a host kernel, hardware, registries, credentials, external data, and sometimes nondeterministic parallel operations. Images may contain security vulnerabilities or confidential material. They should be built from trusted sources, scanned, pinned where appropriate, documented, and archived with a digest or other immutable identifier. Virtual machines, package environments, workflow systems, and hardware-specific documentation may be preferable in some contexts.

Randomness must also be managed. Seeds should be recorded, but a seed alone does not guarantee identical results across libraries, processors, or parallel execution models. Researchers should document random-number generators, deterministic settings where feasible, numerical tolerances, and the acceptable range of variation.

Persistent identifiers and research objects

A persistent identifier provides a stable reference to an object despite changes in location. Digital object identifiers can identify articles, datasets, software releases, and archived materials; researcher identifiers distinguish authors with similar names; repository URLs and version tags connect working development to citable releases. A software citation should identify the software name, authors, version, repository or archive, and persistent identifier when available.

The scholarly object is increasingly a network rather than a single paper. A publication may link to a preregistration, protocol, dataset, code repository, container image, workflow definition, computational notebook, and software release. Metadata should describe relationships among these objects. Citation of software is also a matter of credit: researchers whose libraries or infrastructure enable a result deserve recognition, while reuse must comply with licences and attribution requirements.

A practical reproducibility architecture

A mature project can be organized into four layers. The research layer contains questions, hypotheses, protocols, and preregistration. The data layer contains raw-data manifests, provenance records, schemas, transformations, and access rules. The software layer contains source code, tests, workflows, configuration, and dependency specifications. The evidence layer contains generated outputs, logs, reports, figures, and links to the exact versions that produced them.

A practical lifecycle is as follows:

  • Define the research question, estimand, primary outcomes, and governance constraints.
  • Create a project structure and repository before substantial analysis begins.
  • Record provenance and access conditions for every important input.
  • Separate raw, intermediate, and derived data; never overwrite irreplaceable raw material.
  • Implement analysis as parameterized, version-controlled code rather than undocumented manual operations.
  • Add tests for transformations, edge cases, expected dimensions, and key scientific calculations.
  • Specify the environment and automate execution through a workflow.
  • Run the workflow in a clean environment before release.
  • Archive a release with documentation, metadata, licence information, and a persistent identifier.
  • Publish a reproducibility statement that reports what was shared, what was restricted, known limitations, and how the results can be evaluated.

This architecture supports both open and restricted research. Where data cannot be released, the computational pathway can often still be released with synthetic or de-identified examples, controlled-access instructions, and a clear explanation of the difference between code reproducibility and result reproducibility.

Illustrative case study: an auditable machine-learning study

Background

The following fictional case illustrates common decisions in doctoral research. A university research group develops a machine-learning model to identify deterioration risk in patients admitted to a hospital. The project uses electronic health records from two institutions and aims to support clinical research, not automated clinical decision-making.

Situation and problem

An initial manuscript reports high predictive performance, but reviewers cannot reproduce the main table. The code is a collection of notebooks; preprocessing differs between training and evaluation; library versions are missing; some records were excluded manually; and the data-use agreement prohibits public release of patient-level data. The team must determine whether the result is trustworthy and how to make the study auditable without violating confidentiality.

Analysis

The group maps the audit chain. It discovers that an analyst changed an imputation rule after inspecting preliminary results, but the change was not recorded. A random split allowed records from the same patient to appear in both training and test sets, inflating performance. The model also depends on a feature recorded only after clinical deterioration, creating a form of target leakage. These problems are not solved by publishing the original notebooks.

Approach

The team preregisters a revised analysis plan for a new evaluation phase and labels the earlier work as exploratory. It creates a version-controlled repository containing modular preprocessing code, unit tests for date handling and patient-level splitting, integration tests for the feature pipeline, and a workflow that generates tables and figures from fixed configuration files. Data remain in a secure environment, while the repository includes a schema, synthetic records, a data dictionary, access requirements, and instructions for authorized researchers.

Containerized execution is used inside the secure environment, and the image digest, package manifest, hardware assumptions, and random-number settings are recorded. A continuous-integration process runs tests on synthetic data. The final manuscript links to a tagged software release and archived metadata. It reports the leakage discovered in the first analysis, the deviation from the original plan, sensitivity analyses, and the limits of transporting the model to other hospitals.

Outcome

The revised performance is lower but more credible. Independent authorized researchers can execute the workflow on a compatible dataset and inspect each transformation. The public cannot access patient records, but can evaluate the code, documentation, synthetic example, tests, and governance process. The group’s credibility improves because the correction is treated as part of responsible scholarship rather than concealed as an inconvenient result.

Learning points

Reproducibility begins with design and governance, not with uploading code at publication. Testing cannot correct a flawed estimand or leakage, but it can expose implementation problems. Controlled access can be ethically superior to public release. Finally, negative or corrective findings should be preserved in the project history because they explain how the final claim was reached.

Risks, limitations, and common failure modes

A frequent mistake is confusing availability with usability. A public repository may lack installation instructions, data access, a licence, or a working entry point. Another is relying on a single notebook whose hidden execution state cannot be reconstructed. Researchers also commonly fail to distinguish raw data from derived data, overwrite intermediate files, omit random seeds, use unpinned dependencies, or download mutable external resources without recording versions.

Reproducibility can be expensive. Legacy code may require obsolete software; large datasets may be costly to transfer; environmental differences may produce small numerical variations; and long-term maintenance requires resources. The pursuit of exact bitwise identity can also be misplaced when the scientific question concerns robust conclusions rather than identical floating-point output. Conversely, “minor” variation should not be dismissed if it changes a substantive conclusion.

Open research creates security and privacy risks. Repositories may accidentally expose passwords, access tokens, personal information, proprietary data, or exploitable vulnerabilities. Automated dependency installation can introduce malicious or compromised packages. Release procedures should include secret scanning, dependency review, least-privilege access, removal of sensitive history where necessary, and organizational incident-response procedures.

Reproducibility badges, checklists, and automated metrics are useful signals but imperfect measures. They may reward the presence of files rather than the quality of the reasoning. A project can be technically executable and scientifically invalid. Evaluation must therefore combine computational checks with methodological and interpretive review.

Ethical, professional, and governance considerations

Researchers have duties to participants, collaborators, institutions, funders, users, and future investigators. Consent materials should anticipate appropriate data sharing where possible. Data protection principles such as purpose limitation, minimization, security, and controlled access should guide the research object lifecycle. Anonymization should not be assumed merely because direct identifiers have been removed; re-identification risk depends on context and linkage possibilities.

Authorship and credit should reflect intellectual and technical contributions. Research software engineers, data stewards, maintainers, and infrastructure contributors should receive appropriate acknowledgement or authorship under applicable standards. Licences communicate permissions and obligations. A permissive licence, a copyleft licence, and a restricted data-use agreement create different conditions for reuse; researchers should not redistribute material in ways inconsistent with its licence.

Supervisors and institutions should treat reproducibility as research integrity infrastructure. Training, code review, secure storage, archival services, and time for documentation are organizational responsibilities, not merely individual preferences. A reproducibility plan should be proportionate to risk and significance: a small exploratory script and a safety-critical clinical system require different controls.

Emerging directions

Research practice is moving toward executable publications, machine-readable metadata, provenance standards, software citation, open peer review, and automated reproducibility checks. Cloud platforms can provide scalable execution, while workflow registries and archival services improve discoverability. Artificial-intelligence tools are increasingly used to generate code, documentation, tests, and data transformations. Their use introduces additional requirements: generated code must be reviewed and tested; prompts and model versions may need recording; training-data or licence constraints must be considered; and researchers remain responsible for errors, bias, insecure code, and fabricated documentation.

Long-term preservation is becoming more important as software ecosystems change. Future reproducibility may depend less on freezing one environment forever and more on preserving multiple forms of evidence: source code, dependency metadata, container images, workflow specifications, test fixtures, representative data, execution logs, and a clear account of known limitations. The goal is resilient understanding rather than a false promise of permanent execution.

Best-practice checklist

A doctoral researcher should be able to answer the following questions before submission:

  • Can another qualified researcher identify the exact code and data versions behind each principal result?
  • Are planned and exploratory analyses clearly distinguished?
  • Can the workflow run from a clean environment using documented commands?
  • Are dependencies, random settings, external resources, and hardware assumptions recorded?
  • Do tests cover critical transformations and scientific calculations?
  • Are sensitive materials protected, and are restrictions transparently explained?
  • Does the release have a licence, metadata, persistent identifier, and software citation?
  • Have independent colleagues attempted execution and reviewed the interpretation?

Chapter Summary

Reproducibility is an evidential property supported by transparent design, provenance, executable methods, and critical interpretation. Open science extends transparency across publications, data, code, methods, and scholarly infrastructure while recognizing legitimate privacy, security, legal, and intellectual-property constraints. Research software engineering supplies version control, documentation, testing, workflow automation, dependency management, containers, and release practices that transform fragile scripts into auditable research artefacts. Preregistration and registered reports clarify the difference between confirmatory and exploratory reasoning. Persistent identifiers connect papers with code, data, protocols, and environments. Yet technical execution alone cannot guarantee scientific validity; sound constructs, appropriate designs, careful governance, and honest reporting remain essential.

Key Terms

Reproducibility: The ability of others to obtain consistent results using the same data, code, and documented procedures.

Repeatability: Consistency of results when the same researcher repeats an analysis under the same conditions.

Replicability: Consistency of conclusions when an independent study uses new data or an independently implemented method.

Generalizability: The extent to which findings apply beyond the original data, population, or setting.

Open science: Research practice emphasizing responsible transparency, accessibility, sharing, and reuse.

Preregistration: A time-stamped public record of research questions and analysis plans made before the relevant analysis.

Registered report: A publication format in which the study plan is peer reviewed before results are known.

Provenance: A record of the origin, history, transformations, and custody of data or research outputs.

Version control: A system for recording and managing changes to files and code over time.

Persistent identifier: A durable reference that identifies a scholarly object across changes in location.

Research software engineering: Application of software-engineering practices to research code and computational infrastructure.

Unit test: A test that examines the behaviour of a small software component.

Workflow: An explicit sequence or graph of computational tasks and dependencies.

Container: An isolated, portable package containing software and many of its dependencies.

Dependency: An external library, tool, service, or system component required by software.

Data leakage: Inappropriate transfer of information from evaluation data or future events into model development.

Computational notebook: An interactive document combining executable code, narrative, and outputs.

Audit chain: The connected evidential pathway from research question and inputs to computation, outputs, and interpretation.

Controlled access: A governance arrangement in which approved users may access restricted research materials under specified conditions.

Review Questions

Short Answer Questions

1. Distinguish repeatability, reproducibility, and replicability.

2. Why does open science not require unrestricted release of every dataset?

3. What information should a dependency manifest provide?

4. How do unit tests differ from scientific validation?

5. What is the purpose of a persistent identifier for research software?

Long Answer Questions

1. Explain how version control, documentation, testing, and workflow automation jointly create an audit chain.

2. Compare preregistration with registered reports, including their benefits and limitations.

3. Discuss the role of containers in reproducible computational research and explain why they are not complete time capsules.

4. Analyze the ethical and governance issues involved in sharing sensitive research data.

5. Develop a reproducibility architecture for a doctoral machine-learning project.

Analytical / Application Questions

1. A published analysis runs only on the author’s laptop and uses an undocumented external API. Diagnose the reproducibility failures and propose a remediation plan.

2. A study cannot release participant-level data but wishes to support independent evaluation. Design an open and controlled-access strategy.

3. A machine-learning result changes substantially when a library version is updated. Explain how you would investigate the change and decide what should be reported.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes reproducibility from replicability?

A. Reproducibility uses new data, whereas replicability uses the original data.

B. Reproducibility commonly uses the same data and code, whereas replicability generally involves an independent study or implementation.

C. Reproducibility concerns ethics only, whereas replicability concerns software only.

D. They are always identical terms in every research discipline.

Correct Answer: B. Reproducibility commonly uses the same data and code, whereas replicability generally involves an independent study or implementation.

Question 2

A researcher cannot release patient-level data because of a data-use agreement. Which response best reflects responsible open science?

A. Release the data without identifiers because all de-identification is automatically safe.

B. Release nothing, including methods and code, to avoid any risk.

C. Share code, metadata, synthetic examples, access procedures, and a clear explanation of restrictions.

D. Replace the data with arbitrary numbers and claim full result reproducibility.

Correct Answer: C. Share code, metadata, synthetic examples, access procedures, and a clear explanation of restrictions.

Question 3

What is the primary purpose of a registered report?

A. To guarantee that the study will produce statistically significant findings.

B. To obtain peer review of the study plan before results are known.

C. To eliminate the need for data governance.

D. To prevent all exploratory research.

Correct Answer: B. To obtain peer review of the study plan before results are known.

Question 4

Which practice most directly reduces hidden-state problems in computational notebooks?

A. Adding more narrative text without rerunning code.

B. Executing cells in an undocumented order.

C. Moving critical logic into tested modules or scripts and recording execution procedures.

D. Deleting intermediate outputs before publication.

Correct Answer: C. Moving critical logic into tested modules or scripts and recording execution procedures.

Question 5

A container improves portability, but why does it not guarantee complete reproducibility?

A. Containers cannot contain any dependencies.

B. Containers may still depend on hosts, hardware, external data, credentials, and nondeterministic operations.

C. Containers automatically change source code during execution.

D. Containers prevent version control.

Correct Answer: B. Containers may still depend on hosts, hardware, external data, credentials, and nondeterministic operations.

Question 6

Which example is a regression test?

A. Checking whether a previously working calculation still produces its expected result after code changes.

B. Writing a research question after viewing results.

C. Assigning a persistent identifier to a paper.

D. Removing personal identifiers from a dataset.

Correct Answer: A. Checking whether a previously working calculation still produces its expected result after code changes.

Question 7

A model shows unusually high test performance because records from the same patient occur in both training and test sets. What problem is most directly indicated?

A. Software licensing conflict.

B. Data leakage caused by an inappropriate split.

C. Failure of persistent identification.

D. Excessive container isolation.

Correct Answer: B. Data leakage caused by an inappropriate split.

Question 8

Which item most strengthens the connection between a published figure and the computation that produced it?

A. A screenshot of the figure without source information.

B. A tagged software release, workflow, input manifest, and execution documentation.

C. A statement that standard analysis was used.

D. An unversioned notebook stored on a personal computer.

Correct Answer: B. A tagged software release, workflow, input manifest, and execution documentation.

Question 9

Why should exploratory analyses be labelled separately from preregistered analyses?

A. Exploratory analyses are always invalid.

B. The distinction clarifies which decisions were planned and which arose after examining data.

C. Preregistration makes exploratory work illegal.

D. Exploratory analyses never require documentation.

Correct Answer: B. The distinction clarifies which decisions were planned and which arose after examining data.

Question 10

Which claim about automated reproducibility checks is most defensible?

A. Successful execution proves that the scientific conclusion is true.

B. Automated checks can reveal technical failures but cannot replace methodological and interpretive evaluation.

C. Automated checks make ethical review unnecessary.

D. A passing test eliminates all dependency risks.

Correct Answer: B. Automated checks can reveal technical failures but cannot replace methodological and interpretive evaluation.

Research Ethics & Computer Applications
Chapter 10 of 14

Research Ethics & Computer Applications

Chapter 11
Artificial Intelligence and Machine Learning in Research

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

11. Artificial Intelligence and Machine Learning in Research

Introduction and Context

Artificial intelligence (AI) and machine learning (ML) have become important instruments of contemporary research. They support literature discovery, translation, coding, image interpretation, simulation, prediction, document classification, qualitative analysis, and the generation of text, code, images, and synthetic data. Their value, however, does not arise merely from automation. In research, the central question is whether the use of an AI system produces knowledge that is valid, reproducible, transparent, ethically defensible, and appropriately attributed.

AI-assisted research creates a distinctive governance problem. A conventional research tool generally performs a relatively stable and inspectable operation. An AI system may instead produce probabilistic outputs influenced by training data, model architecture, prompts, system instructions, retrieval sources, and user interaction. The same prompt may produce different results, and a fluent answer may be factually wrong. Consequently, researchers must treat AI outputs as claims or proposals requiring evaluation, not as authoritative evidence.

The issue is particularly significant for doctoral researchers. At doctoral level, responsible AI use involves more than following institutional rules. It requires critical examination of epistemic authority, bias, accountability, intellectual property, privacy, reproducibility, and the relationship between human judgment and automated inference. This chapter develops a governance-oriented approach to AI and ML in research, with particular attention to generative AI, algorithmic bias, explainability, validation, hallucination, disclosure, and human oversight.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Distinguish AI, ML, deep learning, generative AI, and automated research analysis.

2. Evaluate appropriate and inappropriate uses of AI across the research lifecycle.

3. Design validation procedures for AI-assisted discovery and analysis.

4. Identify algorithmic bias, hallucination, opacity, privacy, and intellectual-property risks.

5. Apply principles of explainability, documentation, disclosure, and human oversight.

6. Develop a responsible-use protocol for an AI-enabled research project.

7. Critically assess emerging regulatory and professional expectations.

From Computational Assistance to Epistemic Dependence

AI refers broadly to computational systems designed to perform tasks associated with human intelligence, such as classification, prediction, language processing, planning, or perception. ML is a subset of AI in which systems learn patterns from data rather than being programmed solely through explicit rules. Deep learning uses multilayer neural networks to learn complex representations. Generative AI produces new content, including text, code, audio, images, or synthetic records, in response to learned patterns and user instructions.

These categories should not be treated as interchangeable. A supervised ML model trained to classify medical images presents different risks from a large language model used to draft a literature review. A retrieval system that ranks articles is different from a generative model that summarizes them. Governance must therefore address the specific system, task, data, consequence, and degree of human dependence.

AI enters research in at least five ways. First, it can assist discovery by identifying topics, relationships, citations, and candidate hypotheses. Second, it can automate analysis through classification, clustering, regression, image recognition, speech processing, or natural-language coding. Third, generative systems can produce drafts, code, synthetic data, or research instruments. Fourth, AI can support research operations, including transcription, translation, screening, and project administration. Fifth, AI can become the object of research itself.

The epistemic danger is not simply error. It is the possibility that researchers accept a system's output without understanding how it was generated, what data shaped it, or where it fails. Automation can thus create epistemic dependence: the researcher's conclusions become dependent on a computational process that is insufficiently examined. Responsible research retains the capacity to challenge, reproduce, and explain important outputs.

Core Concepts and Terminology

A model is a computational representation that maps inputs to outputs. Training is the process through which model parameters are adjusted using data. Inference is the production of an output from a trained model. A feature is an input variable used by a model, while a label is a target category or value. A foundation model is trained on broad data and adapted to multiple tasks. A large language model predicts sequences of tokens and may generate coherent but unsupported text.

A prompt is an instruction or input supplied to a generative model. Prompt engineering concerns the design of instructions, context, constraints, and examples. Retrieval-augmented generation combines model generation with external document retrieval; it can improve grounding but does not guarantee that retrieved material is relevant or correctly interpreted. Hallucination is the production of an apparently credible but unsupported or false output. It may involve invented references, incorrect quotations, fabricated data, or unjustified causal claims.

Validation concerns whether a system performs adequately for its intended purpose. Verification asks whether the system was implemented correctly, whereas validation asks whether it is appropriate and reliable for the research task. Generalizability concerns performance beyond the data or conditions used in development. Reproducibility concerns whether the same analysis can be repeated with the same materials and procedures. Replicability is often used for obtaining consistent findings in a new study or implementation, although terminology varies across disciplines.

Explainability refers to the degree to which the operation or output of a model can be meaningfully understood. Interpretability often denotes a model's intrinsic comprehensibility, whereas post hoc explanation provides an account after a complex model has produced an output. Fairness concerns whether a system produces unjustified disparities across groups. Accountability identifies who is responsible for decisions and consequences. Data provenance records the origin, transformations, permissions, and lineage of data and outputs.

A Governance Framework for AI-Assisted Research

A useful governance framework follows the research lifecycle rather than treating AI as a single tool. Each use should be assessed through six questions: What is the research purpose? What is the system doing? What data does it use? What could go wrong? How will the output be validated? Who remains responsible?

Defining the purpose and risk

Researchers should first specify whether AI is being used for low-risk assistance, substantive analysis, or consequential decision-making. Correcting grammar in a private draft is different from classifying participants by mental-health risk. Risk increases when outputs affect human participants, public policy, clinical decisions, employment, educational opportunity, or the interpretation of sensitive data. A risk assessment should consider severity, likelihood, reversibility, affected populations, and the availability of human review.

Selecting and documenting the system

Tool selection should consider training-data provenance, privacy terms, retention practices, model version, access controls, known limitations, and institutional approval. A free public system may transmit prompts to an external provider, making it inappropriate for confidential interviews or identifiable participant data. Researchers should record the tool name, version or access date, relevant settings, prompts, retrieved sources, code, datasets, and human interventions. If the system changes during the project, the change should be documented.

Preparing and governing data

AI does not remove the obligations attached to research data. Data must be collected lawfully and ethically, with attention to informed consent, purpose limitation, minimization, confidentiality, and secure storage. De-identification reduces risk but does not guarantee anonymity, especially where datasets can be linked. Training data may contain copyrighted works, personal information, discriminatory patterns, or unverified material. Researchers must establish whether they have the right to use data for the intended purpose and whether participants were informed about automated processing.

Validation and triangulation

Validation should be designed before relying on an output. For predictive models, relevant procedures may include train-test separation, cross-validation, calibration assessment, error analysis, subgroup performance analysis, and external validation. For generative systems, researchers should verify factual claims against primary sources, inspect quotations and references, test prompts across cases, and maintain an audit sample of outputs. Agreement with a model is not evidence of validity; independent evidence is required.

Triangulation is especially important. AI-assisted coding of interview data can be compared with human coding, a second analyst, participant interpretation, or an established coding framework. Agreement statistics may be useful, but disagreement is also informative because it can reveal ambiguity, conceptual weakness, or culturally specific meaning that the model fails to recognize.

Human oversight and escalation

Human oversight should be substantive rather than ceremonial. The reviewer must have the expertise, authority, time, and information necessary to challenge the system. A researcher who merely approves every output is not exercising meaningful oversight. Projects should define escalation conditions, such as low confidence, unusual cases, disagreement with expert judgment, potential participant harm, or a decision affecting rights or opportunities.

Disclosure and attribution

Research reports should disclose material AI use. Disclosure should state the system used, its role, the stage of research affected, the nature of human review, and any known limitations. AI tools should not be listed as authors because they cannot assume responsibility, consent to publication, or respond to allegations of misconduct. Human authors remain accountable for accuracy, originality, citations, confidentiality, and compliance with research standards. Disclosure is not a substitute for validation; it enables readers and reviewers to evaluate the work.

Generative AI: Productivity and Epistemic Risk

Generative AI can help researchers brainstorm search terms, create preliminary outlines, translate text, generate code templates, produce interview-protocol alternatives, and summarize documents. It may be particularly valuable where researchers face large volumes of material or work across languages. Yet its fluency can conceal weak reasoning. A generated literature review may combine real and nonexistent sources, flatten disagreements, or present a minority interpretation as consensus. A generated statistical script may run successfully while implementing an inappropriate test.

The proper role of generative AI is therefore assistive and contestable. Researchers may use it to propose possibilities, but they should independently establish the evidential basis of each important claim. Primary sources should be located and read. Code should be inspected, tested, and adapted. Synthetic examples should never be confused with empirical observations. Where generated text is substantially incorporated into a publication, the researcher must follow the relevant publisher and institutional disclosure requirements.

Prompt records can be treated as methodological material when they materially affect results. A prompt should specify the task, source boundaries, output format, uncertainty requirements, and prohibited inferences. For example, asking a model to “summarize these articles” is less controlled than instructing it to extract research questions, methods, sample characteristics, limitations, and direct quotations only when verified against the supplied documents.

Algorithmic Bias and Fairness

Bias can enter through sampling, measurement, labeling, historical practices, missing data, model design, deployment context, and human interpretation. A model trained on unequal historical decisions may reproduce those decisions. A language model may associate occupational competence with particular demographic groups because of patterns in its training data. A classifier may perform differently across groups because one group is underrepresented or because the target variable is measured differently.

Fairness is not a single technical property. Possible criteria include equal error rates, equal opportunity, demographic parity, calibration, and individual or group consistency. These criteria can conflict, particularly when groups have different base rates. Consequently, researchers must justify the fairness concept relevant to the research purpose rather than selecting a metric merely because it produces a favorable result.

Bias auditing should combine quantitative and qualitative methods. Quantitative analysis examines performance by subgroup, missingness, false positives, false negatives, and calibration. Qualitative inquiry asks whose categories are represented, whose experiences are absent, and whether the model's errors have unequal consequences. A system can have acceptable average accuracy while causing serious harm to a small or marginalized population.

Explainability, Interpretability, and Causal Restraint

An explanation is useful only if it answers a relevant question. Feature importance may indicate which variables influenced a prediction, but it does not necessarily show causation. A post hoc explanation can be unstable or misleading if it approximates rather than reveals the model's actual reasoning. Researchers should avoid claims such as “the model discovered the cause” when it identified only a predictive association.

Explainability requirements should be proportionate to consequence. A transparent baseline model may be preferable to a more accurate opaque model when decisions are high stakes and explanations are essential. In other contexts, a complex model may be acceptable if its performance is rigorously validated and its limitations are clearly communicated. Explanations should be tested with domain experts and, where relevant, with affected communities.

Intellectual Property, Authorship, and Research Integrity

AI-assisted research raises unresolved and context-dependent questions concerning copyright, database rights, licensing, trade secrets, and ownership of generated material. Researchers should not assume that publicly accessible content is freely reusable. They should review the terms governing datasets and software, retain evidence of permissions, and avoid uploading confidential manuscripts, proprietary code, or restricted data to systems lacking suitable protections.

Research integrity also concerns plagiarism and misrepresentation. Generated prose may reproduce distinctive language from training material or obscure the origin of an idea. Automatic paraphrasing does not eliminate the obligation to cite sources. Researchers must verify references rather than citing them because a model supplied them. Supervisors and institutions should distinguish legitimate assistance from outsourcing intellectual work that the researcher is expected to perform and understand.

Applied Case: AI-Assisted Qualitative Analysis of Public-Health Interviews

Background

The following is an illustrative case. A doctoral team studies how recently relocated families experience access to public-health services. The team has 180 transcribed interviews in three languages. To manage the volume, it proposes using a commercial language model to identify themes and generate summaries.

Situation and problem

The interviews contain indirect identifiers, descriptions of illness, immigration experiences, and references to small communities. The model provider's terms allow retention of submitted prompts for service improvement. Early testing shows that the model produces fluent summaries but sometimes interprets hesitation as agreement and translates culturally specific expressions literally. The team also discovers that the model assigns fewer “barrier” codes to interviews in one language.

Analysis

The project presents privacy, fairness, validity, and governance risks. Consent forms did not mention external AI processing. Removing names is insufficient because combinations of location, occupation, and family history may re-identify participants. The language disparity indicates that average agreement with human coding would conceal subgroup-specific error. Moreover, a summary is an interpretation, not a neutral compression of the interview.

Approach and solution

The team pauses external processing and consults its ethics committee and data-protection officer. It establishes a secure, locally controlled environment, uses a minimum necessary dataset, and conducts a renewed consent assessment. Researchers develop a codebook from close reading and pilot coding before asking the model to suggest candidate passages. Two trained human coders independently review all model suggestions, with complete human coding of a stratified sample from each language. Disagreements are recorded rather than silently resolved.

The team compares model performance by language, topic, and participant characteristics where ethically and statistically appropriate. It excludes the model from making final claims and uses participant and community advisers to assess whether summaries preserve meaning. The publication discloses the model's limited role, validation procedures, language-specific limitations, and the fact that no raw transcripts were sent to a public service.

Outcome

The model reduces the time required for initial document organization, but it performs poorly on culturally embedded expressions and indirect accounts of discrimination. Human researchers revise the codebook and retain several themes that the model failed to identify. The final analysis is slower than full automation would have been, but it is more defensible, transparent, and responsive to participants.

Learning points

The case demonstrates that efficiency is not the only outcome that matters. Data governance must precede tool use; subgroup validation is essential; qualitative meaning cannot be inferred from surface linguistic patterns alone; and human oversight must include genuine interpretive authority. The case also illustrates that a responsible decision may be to restrict AI to a narrow supporting function rather than reject it entirely or adopt it without conditions.

Common Failure Modes and Practical Controls

Several mistakes recur in AI-assisted research. Researchers may treat model output as a source rather than a hypothesis, report accuracy without examining subgroup error, omit tool versions and prompts, upload confidential data to public systems, or assume that a human glance constitutes validation. Another failure is automation bias: users accept machine recommendations because they appear objective or technically sophisticated. There is also deskilling, in which researchers lose the substantive competence needed to recognize a plausible but invalid result.

Practical controls include a written AI-use plan, data classification before upload, approved-tool lists, access restrictions, reproducible scripts, prompt and output logs, independent source verification, predefined stopping and escalation rules, subgroup error analysis, and periodic review by subject experts. Researchers should preserve the original data and human decisions so that AI-assisted findings can be audited. Where an AI system materially shapes an analysis, sensitivity analysis should examine whether conclusions change when the system is removed or replaced.

Professional and Regulatory Governance

Institutions should establish policies that differentiate permissible assistance, restricted uses, and prohibited uses. Policies should address research data, publication disclosure, examination and assessment, procurement, authorship, security, and incident reporting. Ethics review should ask not only whether participants face direct risk, but also whether automated processing changes the meaning of consent, confidentiality, or researcher responsibility.

Regulatory expectations increasingly emphasize risk management, transparency, human oversight, data governance, security, and accountability. Requirements differ across jurisdictions and sectors, so researchers must consult applicable law, institutional policy, funder conditions, and publisher guidance. Compliance, however, is a minimum standard. A legally permissible use may still be methodologically weak or ethically questionable.

Emerging Directions

Research is moving toward multimodal models, autonomous research agents, synthetic data, federated learning, foundation-model adaptation, and AI systems that search, code, analyze, and draft with limited intervention. These developments may increase productivity but also expand the chain of dependence and make responsibility harder to assign. Agentic systems can select tools, call external services, and generate intermediate outputs that researchers do not fully inspect.

Future research governance will therefore require stronger provenance systems, machine-readable audit trails, model and dataset documentation, evaluation benchmarks that include minority contexts, and methods for testing robustness under distribution shift. Researchers will also need new forms of methodological literacy: the ability to interrogate model behavior, assess uncertainty, understand data lineage, and communicate limitations to non-specialists. The enduring principle is that sophisticated automation does not reduce the need for judgment; it increases the need for informed judgment.

Best-Practice Protocol

Before using AI, define the research purpose, expected benefit, affected persons, and foreseeable harms. Confirm that the data may be processed by the selected system and that the use is consistent with consent and institutional approval. Choose the least powerful tool that adequately serves the task. Establish validation criteria in advance, including source verification, subgroup analysis, expert review, and reproducibility requirements. Record the model, version, prompts, inputs, outputs, settings, and human interventions. Keep humans responsible for interpretation and consequential decisions. Disclose material use in reports and preserve sufficient documentation for audit. Finally, review whether the AI contribution improved the research without displacing the intellectual and ethical responsibilities of the researcher.

Chapter Summary

AI and ML can support discovery, analysis, generation, and research operations, but their outputs are probabilistic and require independent evaluation. Responsible use depends on purpose-sensitive risk assessment, lawful and secure data governance, validation, subgroup fairness analysis, explainability appropriate to consequence, and meaningful human oversight. Generative AI is useful for proposing and organizing material but can hallucinate sources, reproduce bias, and generate plausible code or interpretations that are incorrect. Researchers must document tools and prompts, verify claims against reliable evidence, respect intellectual-property and confidentiality obligations, and disclose material AI use. The central governance principle is that AI may assist research, but responsibility for the validity, integrity, and consequences of research remains human.

Key Terms

Artificial intelligence: Computational systems designed to perform tasks associated with human intelligence.

Machine learning: Methods that learn patterns from data to produce predictions, classifications, or decisions.

Generative AI: AI that produces new text, code, images, audio, or other content.

Foundation model: A broadly trained model adaptable to many downstream tasks.

Training: Adjusting model parameters using data.

Inference: Producing an output from a trained model.

Hallucination: A fluent but unsupported, inaccurate, or fabricated AI output.

Validation: Determining whether a system is suitable and reliable for its intended purpose.

Verification: Checking whether a system has been implemented correctly.

Explainability: The extent to which a model's operation or output can be meaningfully understood.

Interpretability: The degree to which a model is intrinsically understandable.

Algorithmic bias: Systematic, unjustified differences in outputs or errors across people or groups.

Fairness: The ethical and technical treatment of relevant groups without unjustified disadvantage.

Data provenance: A record of the origin, transformation, permissions, and lineage of data.

Human oversight: Competent and empowered human review of AI processes and outputs.

Automation bias: Unwarranted reliance on an automated recommendation.

Prompt: An instruction or input supplied to a generative model.

Retrieval-augmented generation: Generation supported by retrieving external documents or data.

Reproducibility: The ability to repeat an analysis using the same materials and procedures.

Epistemic dependence: Reliance on a process whose production and limitations the researcher cannot adequately evaluate.

Review Questions

Short Answer Questions

1. Distinguish verification from validation in AI-assisted research.

2. What is algorithmic bias, and how can it enter a research model?

3. Why should AI-generated references be independently checked?

4. Define meaningful human oversight.

5. What information should normally be included in an AI-use disclosure?

Long Answer Questions

1. Explain how AI can support different stages of the research lifecycle and evaluate the risks associated with each stage.

2. Discuss the relationship among explainability, interpretability, predictive accuracy, and research accountability.

3. Develop a validation framework for using a generative AI system to assist qualitative data analysis.

4. Analyze the intellectual-property, privacy, authorship, and research-integrity issues created by generative AI.

5. Explain why fairness cannot be reduced to a single numerical metric in algorithmic research.

Analytical / Application Questions

1. A researcher uploads identifiable interview transcripts to a public language model and uses its summaries as findings. Identify the major risks and propose a revised workflow.

2. An image-classification model has high overall accuracy but substantially higher false-negative rates for one demographic group. How should the research team analyze and govern its use?

3. A generative model produces a polished literature review containing several nonexistent citations. Design a procedure for detecting, correcting, documenting, and disclosing the problem.

22. Multiple Choice Questions with Answers

Question 1

Which action best demonstrates meaningful human oversight of an AI-assisted research analysis?

A. Accepting every output after a quick visual inspection

B. Reviewing outputs against predefined criteria and having authority to reject or escalate them

C. Using the model with a more detailed prompt

D. Reporting only the model's average accuracy

Correct Answer: B. Reviewing outputs against predefined criteria and having authority to reject or escalate them

Question 2

A language model invents a journal article that appears plausible. This is best classified as:

A. Data provenance

B. Calibration

C. Hallucination

D. External validation

Correct Answer: C. Hallucination

Question 3

Which practice most directly improves the reproducibility of a material generative-AI contribution?

A. Deleting intermediate outputs after publication

B. Recording the system, version, prompts, settings, and human interventions

C. Using the most powerful available model

D. Replacing citations with generated summaries

Correct Answer: B. Recording the system, version, prompts, settings, and human interventions

Question 4

Why can high overall model accuracy conceal an ethical problem?

A. Accuracy always measures causation

B. Average performance can conceal unequal errors across groups

C. High accuracy prevents external validation

D. Accuracy is unrelated to model outputs

Correct Answer: B. Average performance can conceal unequal errors across groups

Question 5

Which statement about explainability is most accurate?

A. Feature importance automatically establishes causation

B. Every complex model is inherently interpretable

C. An explanation should answer a relevant question and should not be treated as proof of causation

D. Explainability eliminates the need for validation

Correct Answer: C. An explanation should answer a relevant question and should not be treated as proof of causation

Question 6

Before uploading confidential participant data to an AI service, the researcher should first:

A. Remove only participants' first names

B. Confirm data permissions, consent, security, retention, and institutional requirements

C. Ask the model to anonymize the data after upload

D. Assume public availability makes the data unrestricted

Correct Answer: B. Confirm data permissions, consent, security, retention, and institutional requirements

Question 7

In the illustrative qualitative case, why was language-specific testing necessary?

A. Different languages require different statistical significance levels

B. The model showed unequal coding performance across languages

C. Human coding is never appropriate for multilingual research

D. Translation automatically removes cultural meaning

Correct Answer: B. The model showed unequal coding performance across languages

Question 8

Which use of generative AI creates the greatest epistemic risk?

A. Suggesting alternative search terms for later evaluation

B. Correcting spelling in a private draft

C. Making unreviewed causal claims from participant data

D. Producing a preliminary outline

Correct Answer: C. Making unreviewed causal claims from participant data

Question 9

Why should AI systems not normally be listed as authors?

A. They cannot assume responsibility, consent to publication, or answer misconduct allegations

B. They cannot generate text

C. They are always less accurate than humans

D. They are prohibited from being used in research

Correct Answer: A. They cannot assume responsibility, consent to publication, or answer misconduct allegations

Question 10

Which governance response is most appropriate when an AI model performs poorly for a culturally specific subgroup?

A. Report only the aggregate result

B. Remove the subgroup from the dataset

C. Investigate the error, consult relevant expertise, revise or restrict use, and disclose the limitation

D. Increase automation so the model can decide consistently

Correct Answer: C. Investigate the error, consult relevant expertise, revise or restrict use, and disclose the limitation

Research Ethics & Computer Applications
Chapter 11 of 14

Research Ethics & Computer Applications

Chapter 12
Authorship, Publication Ethics, and Intellectual Property

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

12. Authorship, Publication Ethics, and Intellectual Property

Introduction and Context

Research is communicated through publications, software, datasets, patents, presentations, and other scholarly outputs. These outputs do more than report findings: they allocate credit, establish priority, influence careers, shape institutional reputation, and inform technological and public decisions. For that reason, research communication is an ethical activity rather than a merely technical final stage of research.

Publication ethics concerns the standards that govern the conduct, evaluation, dissemination, correction, and ownership of scholarly work. It asks who deserves authorship, how contributions should be recognized, how reviewers should behave, what constitutes plagiarism or data manipulation, and how errors should be corrected. Intellectual property concerns the legally protected interests associated with creations such as inventions, software, written works, databases, designs, and confidential information. Ethical publication and intellectual property management overlap, but they are not identical. A person may have a legal copyright interest without deserving academic authorship, and an author may be ethically responsible for a paper even when copyright is assigned to a publisher.

These issues are especially important in information technology research. IT projects commonly involve large teams, open-source components, software repositories, automated image and data processing, collaborative datasets, commercial sponsors, and artificial intelligence tools. The boundary between research contribution and technical support may therefore be difficult to define. Doctoral researchers must be able to make defensible decisions, document them transparently, and respond appropriately when misconduct or disagreement arises.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Distinguish authorship, contributorship, acknowledgment, and intellectual property ownership.

2. Apply principled criteria for assigning authorship and author order.

3. Explain plagiarism, fabrication, falsification, image manipulation, duplicate publication, and citation misconduct.

4. Evaluate ethical responsibilities in peer review and identify risks associated with predatory publishing.

5. Compare copyright, licensing, patents, trade secrets, and related forms of protection.

6. Design practical procedures for maintaining publication integrity in digital and collaborative research.

7. Explain the purpose of corrections, expressions of concern, and retractions.

8. Analyze publication and intellectual-property dilemmas in professional and doctoral research settings.

Credit, Responsibility, and the Meaning of Authorship

Authorship is both a form of credit and a form of accountability. An author is not simply the person who typed the manuscript or occupied the most senior position in a laboratory. Authorship normally requires a substantial intellectual contribution to the work, participation in drafting or critically revising the publication, approval of the final version, and willingness to accept responsibility for the integrity of the work. Different disciplinary bodies express these requirements in somewhat different language, but the central idea is consistent: authorship should reflect meaningful intellectual contribution and responsibility.

A useful distinction is between contribution and authorship. A programmer who implements a routine exactly as specified may have made important technical contributions but may not qualify as an author. By contrast, a researcher who designs the algorithm, justifies its methodological assumptions, interprets its performance, and helps revise the manuscript may qualify. Authorship should be discussed at the beginning of a project and revisited when the work changes.

Contributorship statements improve transparency by describing what each person did. Common contribution categories include conceptualization, methodology, software, data curation, formal analysis, investigation, visualization, supervision, project administration, funding acquisition, and writing. A contributorship statement does not eliminate the need for authorship criteria, but it helps distinguish genuine contributions from honorary or symbolic authorship.

Honorary, guest, or gift authorship occurs when a person is listed because of status, authority, friendship, funding influence, or institutional position without making a qualifying contribution. Ghost authorship occurs when a person who made a substantial contribution is omitted, including professional writers or undisclosed industry researchers. Both practices distort the scholarly record. They can conceal conflicts of interest and make accountability difficult.

Author order has no universal meaning. In some fields the first author performed most of the research and writing; in others, alphabetical order is customary, while the last author may be the senior investigator. Teams should agree explicitly on the meaning of order and record the decision. The corresponding author coordinates communication with the journal and commonly takes responsibility for submission accuracy, disclosure of conflicts, author approval, and responses after publication. Corresponding authorship does not transfer all responsibility from the other authors.

Disputes should be addressed through documented discussion, institutional procedures, or an independent research-integrity office. Journals are usually not well placed to decide complex employment or contribution disputes. Changes in authorship after submission should be supported by written consent from all affected authors and should never be used to pressure a junior researcher.

Publication Ethics as a System of Research Integrity

Publication ethics is best understood as a system rather than a list of prohibitions. It includes responsible study design, accurate record keeping, fair attribution, honest presentation, independent evaluation, transparent correction, and respect for legal and contractual obligations. Several frameworks are useful in practice.

The responsible-publication cycle begins with planning. Researchers should agree on authorship expectations, data-management responsibilities, disclosure requirements, target journals, intellectual-property arrangements, and procedures for resolving disagreements. During research, they should preserve original data, document analysis decisions, maintain version histories, and distinguish exploratory from confirmatory analyses. During writing, they should verify quotations, citations, figures, permissions, and author approval. During review and after publication, they should respond honestly to criticism and correct material errors.

A risk-based approach is particularly useful in doctoral research. At each stage, researchers can ask: What could mislead readers? Who could be harmed? What evidence supports this claim? Who owns or controls the data and software? What information must be disclosed? What independent check could detect an error? These questions convert general ethical principles into operational safeguards.

Plagiarism and Unattributed Borrowing

Plagiarism is the presentation of another person's words, ideas, structure, data, code, images, or creative expression as one's own without appropriate acknowledgment. It includes verbatim copying, close paraphrasing, translation without attribution, mosaic plagiarism, and reuse of distinctive ideas. Text-matching software can identify possible overlap, but similarity is not itself proof of plagiarism. Properly cited quotations, standard technical phrases, references, and legitimately shared methods may produce similarity without misconduct.

Self-plagiarism, or redundant text reuse, involves presenting substantial previously published material as new without disclosure. Limited reuse of technical descriptions may be reasonable when transparently identified and permitted, but substantial undisclosed duplication can mislead readers and violate copyright or journal policy. Good practice includes taking careful notes, marking copied text during drafting, citing sources at the point of use, and preserving the distinction between one's own interpretation and a source's argument.

Fabrication, Falsification, and Questionable Research Practices

Fabrication is making up data, observations, participants, experiments, or results. Falsification is manipulating research materials, procedures, data, images, or reporting so that the research record is misrepresented. Examples include deleting inconvenient observations without justification, changing labels, inventing performance measures, or reporting an experiment that was not conducted.

Not every error is misconduct. Honest mistakes, justified exclusion criteria, failed experiments, and statistically weak findings are part of research. The ethical distinction depends on intent, recklessness, transparency, and the effect on the research record. Questionable practices that may not meet the formal definition of misconduct can still damage integrity. These include selective reporting, p-hacking, undisclosed changes to hypotheses, inappropriate exclusion of outliers, and overstating causal conclusions.

Researchers should preserve raw data, analysis scripts, laboratory or system logs, preregistered protocols where appropriate, and records of deviations from the original plan. Reproducible computational environments, code review, independent replication, and audit trails are especially valuable in IT research.

Image and Digital-Object Manipulation

Digital images are data when they represent experimental results, medical scans, screenshots of system output, or visual evidence. Adjustments that improve legibility may be acceptable if applied equally across the image, disclosed when relevant, and incapable of changing the interpretation. Cropping, contrast adjustment, color balancing, or removal of irrelevant background may be permissible under journal rules.

Unethical manipulation includes selectively enhancing a feature, deleting a band or data point, duplicating part of an image, splicing unrelated results without clear demarcation, or presenting a processed image as an original. The same principle applies to charts, diagrams, code outputs, and generated illustrations. Researchers should retain original files, use non-destructive editing, label composites, and provide processing details. Artificial intelligence tools that generate or modify images require particular caution because they can introduce content that was not observed.

Duplicate, Redundant, and Salami Publication

Duplicate publication occurs when substantially the same work is published more than once without transparent justification. Redundant publication can waste reviewer and reader resources, distort evidence syntheses, and create an inflated record of productivity. Salami publication divides one coherent study into multiple papers with insufficiently distinct research questions or contributions.

Related outputs are not automatically unethical. A conference paper may legitimately be expanded into a journal article if the journal permits it, the earlier work is cited, the new contribution is substantial, and overlap is disclosed. Secondary publication in another language or for a different audience may also be acceptable under explicit conditions. The relevant question is whether readers and editors can understand the relationship among the outputs.

Citation Ethics

Citations should enable readers to identify intellectual influences and verify claims. Citation manipulation includes fabricating references, citing sources not read, misrepresenting a source's conclusion, excessive self-citation, coercive citation, and reciprocal citation agreements designed to inflate metrics. References should be relevant, accurate, sufficiently current for the claim, and balanced across competing perspectives.

Authors should cite original sources where feasible, distinguish primary evidence from reviews, and avoid using citations merely as decoration. Reviewers and editors must not demand irrelevant citations to increase journal or personal metrics. In computational research, citation may also be due to software, datasets, benchmarks, pretrained models, protocols, and open-source projects.

Peer Review: Confidentiality, Fairness, and Independence

Peer review is a quality-control and improvement process, not an opportunity to acquire ideas or exercise personal power. Reviewers should accept assignments only when they possess suitable expertise and have enough time to provide a careful assessment. They should disclose conflicts of interest and decline when personal, financial, institutional, or competitive interests could compromise independence.

Review materials are confidential. A reviewer must not share a manuscript, use unpublished ideas, copy methods, contact authors without permission, or submit the work to an automated tool whose privacy terms are unknown. Reviews should evaluate the work rather than the identity, nationality, gender, institution, or reputation of the authors. Criticism should be specific, evidence-based, and professional.

Editors have additional responsibilities. They must select appropriate reviewers, protect confidentiality, manage conflicts, investigate credible allegations, and avoid using editorial influence to advance personal interests. Artificial intelligence can assist with screening or language support, but automated decisions may reproduce bias, expose confidential manuscripts, or obscure accountability. Human oversight remains essential.

Predatory Publishing and the Evaluation of Venues

Predatory publishing refers to deceptive or exploitative publishing practices that prioritize fees over genuine editorial and peer-review services. Warning signs include aggressive unsolicited invitations, false claims about indexing or impact factors, unclear fees, implausibly broad scope, unverifiable editorial boards, fake metrics, promises of guaranteed acceptance, and poor transparency about peer review or archiving. A journal should not be labeled solely because it charges a fee; legitimate open-access journals may charge article-processing fees and still maintain rigorous standards.

Researchers should verify a journal's publisher, editorial policies, ownership, peer-review process, indexing claims, archiving arrangements, correction policy, license terms, and fee schedule. Institutional librarians, disciplinary associations, recognized indexing services, and established journal directories can assist evaluation. Doctoral candidates should resist the pressure to publish rapidly in venues that cannot protect the scholarly record or provide credible review.

Intellectual Property in Research and Computing

Intellectual property law varies by jurisdiction, contract, and type of work. Researchers should obtain institutional or legal advice for high-value or disputed matters. The main categories are related but distinct.

Copyright protects original expression fixed in a tangible or digital form, including articles, software source code, documentation, photographs, graphics, and some database structures. It generally does not protect ideas, facts, mathematical principles, or methods as such. Ownership may belong to the creator, employer, institution, funder, or another party under employment, collaboration, or publishing agreements. Copyright assignment to a publisher may limit later reuse, whereas a license grants specified permissions without necessarily transferring ownership.

Open licenses make reuse conditions explicit. Permissive software licenses commonly allow reuse with conditions such as attribution and preservation of notices. Copyleft licenses may require derivative software to be distributed under the same or compatible terms. Creative Commons licenses regulate reuse of creative works; conditions may include attribution, noncommercial use, or prohibition of derivatives. License compatibility matters: combining components with incompatible obligations can make distribution unlawful or ethically improper. Researchers must maintain a dependency inventory and comply with notices and license terms.

Patents protect qualifying inventions, subject to jurisdiction-specific requirements such as novelty, inventive step or non-obviousness, and industrial applicability or utility. Public disclosure before filing can damage patent rights in many jurisdictions. Consequently, researchers planning commercialization should coordinate publication with a technology-transfer office before presenting or depositing code. A patent does not automatically prove that an invention is ethically valuable, safe, or commercially successful; it is a legal exclusion right with defined scope.

Trade secrets protect valuable confidential information when reasonable measures are taken to keep it secret. Confidential algorithms, datasets, source code, and business processes may qualify, but disclosure through a paper, repository, thesis, or conference can destroy secrecy. Confidentiality agreements and data-use agreements should be reviewed before research begins.

Data ownership and access are particularly complex. A dataset may contain copyright interests, privacy restrictions, contractual limitations, database rights, or ethical obligations to participants. The ability to access data does not imply the right to redistribute it. Researchers should document provenance, consent conditions, de-identification, retention periods, access controls, and permitted secondary uses.

A Practical Integrity Workflow

A research group can operationalize these principles through a publication and IP protocol:

1. At project initiation, record expected contributions, provisional authorship, funding sources, conflicts, ownership, confidentiality, and intended outputs.

2. During research, preserve raw data, source code, versions, metadata, permissions, and decision logs.

3. Before drafting, identify related publications, patent deadlines, license obligations, and restrictions on data or images.

4. During writing, use citation management carefully, verify every reference, distinguish results from interpretation, and disclose reuse.

5. Before submission, obtain approval from all authors, check figures and supplementary files, confirm ethical approvals, disclose conflicts, and review journal legitimacy.

6. During peer review, maintain confidentiality and respond to criticism with evidence rather than concealment.

7. After publication, monitor for errors, preserve artifacts, share materials where lawful and ethical, and issue corrections when necessary.

This workflow is strengthened by version-control systems, reproducible notebooks, continuous integration tests for research software, checksum-protected archives, data dictionaries, and controlled-access repositories. Tools support integrity but do not replace judgment. A perfectly versioned false result remains false, and a similarity score cannot determine authorship or intent.

Corrections, Expressions of Concern, and Retractions

The scholarly record should be corrected in proportion to the problem. A minor typographical error may require a simple correction. A substantive but non-invalidating error may require an erratum or corrigendum. An expression of concern alerts readers that a publication is under investigation when the available evidence is unresolved. Retraction is appropriate when findings are unreliable because of major error, fabrication, falsification, plagiarism, unethical research, or other serious defects. Retraction is not necessarily a punishment; its primary purpose is to prevent reliance on an unreliable record.

Retractions should be linked clearly to the original article, explain the reason, and preserve the publication history rather than silently deleting the work. Authors who discover a serious error should notify the editor promptly. Concealing an error generally causes greater harm than acknowledging it. Subsequent papers should cite the corrected status where relevant.

Illustrative Case: The Distributed Analytics Study

Background

A doctoral team develops a machine-learning system for detecting equipment failures from industrial sensor data. The project involves a doctoral student, a faculty supervisor, an industrial partner, a data engineer, and a research software developer. The team prepares a journal article and plans to release a cleaned dataset and source code.

Situation and Problem

The supervisor proposes listing the industrial partner's director as an author because the company supplied access to the data. The data engineer, who designed the cleaning pipeline and identified serious measurement bias, is told that acknowledgment is sufficient. The software developer discovers that the manuscript's performance graph contains a duplicated curve created during figure assembly. The team also learns that the source code incorporates a library under a license incompatible with the proposed redistribution. Finally, the industrial contract treats the sensor data as confidential and requires review before publication.

Analysis

Data access alone does not establish authorship, although the director might qualify if they made a substantial intellectual contribution, helped interpret the research, participated in manuscript revision, approved the final version, and accepted responsibility. The data engineer's methodological design and analysis are strong evidence of a qualifying contribution. The duplicated curve must be corrected, and the original figure and processing history should be examined to determine whether the error affects the conclusions. The code cannot be released until license obligations and contractual restrictions are resolved. The team's publication schedule must therefore be adjusted rather than used to justify concealment.

Approach and Solution

The team holds a documented authorship meeting using contribution categories. It agrees that the doctoral student, supervisor, and data engineer qualify as authors; the software developer qualifies after contributing to interpretation and manuscript revision; and the director is acknowledged unless further intellectual participation occurs. The corresponding author obtains written approval from all authors.

The team restores the figure from original files, conducts an independent analysis, and discloses the correction in the submission if needed. A legal and technology-transfer review identifies a compatible replacement library and removes restricted components. The industrial partner reviews the manuscript only for confidentiality and contractual compliance, not for suppression of unfavorable results. The team releases a synthetic example and an access-controlled version of the real data, together with documentation describing limits on reuse.

Outcome

The article is submitted later than planned but with a transparent contribution statement, corrected figures, lawful software terms, and a clear data-access procedure. The research record is more credible, and each participant's responsibility is visible.

Learning Points

The case demonstrates that authorship is not a reward for rank or access; technical work can be intellectually substantive; publication deadlines do not override accuracy; software licenses and contracts affect dissemination; and transparency is often the most practical way to resolve competing obligations.

Challenges, Limitations, and Professional Responsibilities

Publication systems face structural pressures. Hiring and promotion may reward publication counts, journal prestige, citation metrics, or rapid output, creating incentives for salami publication, honorary authorship, exaggerated claims, and predatory venues. Global differences in law, disciplinary conventions, language, and institutional power can make apparently simple rules difficult to apply. Junior researchers may fear retaliation when challenging a supervisor, while collaborators may disagree about ownership across countries.

No checklist can resolve every case. Authorship criteria require interpretation, and legal rights depend on jurisdiction and contract. Similarity detection, image-forensics software, and AI-based screening produce indicators rather than final judgments. Institutions should therefore provide confidential advice, independent investigation, whistleblower protection, authorship mediation, data-management support, and training that treats integrity as a continuing professional responsibility.

Researchers should also consider fairness beyond formal compliance. They should recognize invisible labor, avoid exploiting students or technical staff, make accessibility and reproducibility reasonable goals, and disclose relationships that could influence interpretation. Responsible scholarship protects not only the reputation of a publication but also the people, communities, and systems affected by its claims.

Current Developments and Emerging Issues

Generative AI is changing writing, coding, translation, image creation, peer review, and literature discovery. AI systems should not be listed as authors because they cannot accept responsibility, approve a final manuscript, or disclose conflicts. Human users remain responsible for accuracy, confidentiality, bias, citations, and intellectual-property compliance. Policies differ by venue, so use of AI assistance should be disclosed when required, and confidential manuscripts or restricted data should not be entered into unapproved systems.

Open science is expanding the use of preprints, open data, open code, registered reports, transparent peer review, and persistent identifiers. These practices can improve reproducibility but also create risks involving privacy, premature dissemination, licensing, and version confusion. Research evaluation is increasingly moving toward responsible assessment that values data, software, mentoring, replication, and societal contribution alongside journal metrics. Researchers must understand both the opportunities and the governance requirements of these developments.

Best Practices for Doctoral Researchers

A doctoral researcher should maintain an authorship and contribution record from the beginning of a project, use version control for code and manuscripts, retain unaltered source files, and document all image and data processing. Every borrowed idea, quotation, dataset, software package, model, and figure should be traceable to its source and permission status. Before submission, the researcher should verify author approval, conflicts, ethical approvals, funder requirements, licenses, confidentiality constraints, and the credibility of the journal.

When uncertain, the safest response is not concealment but consultation. Discuss the issue with a supervisor who is not directly involved, research-integrity personnel, a librarian, an institutional review body, or a technology-transfer specialist. Responsible publication is a collective practice, but each researcher remains accountable for the claims and materials they place in the scholarly record.

Chapter Summary

Authorship combines scholarly credit with responsibility and should be based on meaningful intellectual contribution, participation in manuscript development, final approval, and accountability. Contributorship statements clarify individual roles, while honorary and ghost authorship distort the record. Publication ethics requires honest reporting, appropriate citation, confidential and fair peer review, transparent handling of overlap, and prompt correction of serious errors. Plagiarism, fabrication, falsification, deceptive image manipulation, duplicate publication, and citation manipulation undermine research integrity even when they do not all have identical legal consequences.

Intellectual property management requires distinguishing copyright, licenses, patents, trade secrets, and data-access rights. IT researchers must address software dependencies, algorithmic artifacts, contracts, privacy, and AI-assisted production. A practical integrity workflow begins with contribution and ownership agreements, continues through documented and reproducible research, and extends to peer review, publication, correction, and possible retraction. Ethical judgment, institutional support, and transparent documentation are essential because tools and checklists cannot replace professional responsibility.

Key Terms

Authorship: Scholarly credit accompanied by responsibility for a publication.

Contributorship: A transparent description of the specific roles performed by each project participant.

Corresponding author: The author who manages communication with the journal and coordinates submission-related responsibilities.

Honorary authorship: Listing a person as an author despite the absence of a qualifying contribution.

Ghost authorship: Omitting a person who made a substantial contribution to the work.

Plagiarism: Presenting another person's words, ideas, data, code, or creative work without appropriate attribution.

Self-plagiarism: Reusing substantial previously published material without adequate disclosure.

Fabrication: Inventing data, observations, participants, experiments, or results.

Falsification: Manipulating research materials, procedures, data, or reporting to misrepresent the record.

Image manipulation: Altering a research image or digital object in a way that misleads interpretation or conceals evidence.

Duplicate publication: Publishing substantially the same work more than once without transparent justification.

Citation manipulation: Using citations deceptively to inflate metrics, misrepresent evidence, or exert improper influence.

Peer review: Independent scholarly evaluation of research before or after publication.

Predatory publishing: Deceptive publishing activity that prioritizes fees or output over credible editorial and review services.

Copyright: Legal protection for original expression fixed in a tangible or digital form.

Open license: A license that grants specified permissions for reuse subject to stated conditions.

Patent: A jurisdiction-specific legal right that can exclude others from exploiting a qualifying invention for a limited period.

Trade secret: Confidential information protected through reasonable measures because it has economic value.

Retraction: A formal notice that a publication is unreliable and should not be treated as part of the valid scholarly record.

Expression of concern: A public notice indicating that a publication is under investigation or has unresolved reliability concerns.

Review Questions

Short Answer Questions

1. What two dimensions of responsibility are represented by authorship?

2. How does contributorship improve transparency in collaborative research?

3. Distinguish fabrication from falsification.

4. Why is a similarity score insufficient by itself to establish plagiarism?

5. What is the main purpose of a retraction?

Long Answer Questions

1. Explain a defensible process for assigning authorship and author order in a multidisciplinary IT project.

2. Discuss the ethical responsibilities of authors, reviewers, and editors in maintaining publication integrity.

3. Compare copyright, open licensing, patents, and trade secrets in relation to software and research outputs.

4. Analyze the relationship among duplicate publication, salami publication, citation manipulation, and research evaluation pressures.

5. Describe a complete integrity workflow for a doctoral project involving sensitive data, software, and multiple collaborators.

Analytical / Application Questions

1. A researcher removes several sensor readings because they reduce model accuracy but does not report the removal. Determine whether this is an error, questionable practice, or falsification, and justify your assessment.

2. A journal asks a reviewer to upload a confidential manuscript to an external AI tool for rapid language assessment. What ethical and governance questions should the reviewer ask before complying?

3. A research team wants to release code containing components with incompatible licenses while an industry agreement restricts data redistribution. Develop a publication and dissemination strategy that protects both research integrity and legal obligations.

22. Multiple Choice Questions with Answers

Question 1

Which combination most appropriately supports authorship in a collaborative research project?

A. Holding a senior institutional position and approving the budget

B. Providing routine technical assistance and being acknowledged

C. Making a substantial intellectual contribution, revising the manuscript, approving the final version, and accepting responsibility

D. Providing access to data without participating in interpretation or writing

Correct Answer: C. Making a substantial intellectual contribution, revising the manuscript, approving the final version, and accepting responsibility

Question 2

A researcher discovers that a performance curve in a published figure was accidentally duplicated during figure assembly. What is the most responsible first response?

A. Delete the original article from all repositories

B. Notify the editor, investigate whether conclusions are affected, and seek an appropriate correction

C. Leave the figure unchanged because the error was unintentional

D. Create a new analysis without documenting the original error

Correct Answer: B. Notify the editor, investigate whether conclusions are affected, and seek an appropriate correction

Question 3

Which action is most clearly an example of falsification?

A. Reporting a statistically insignificant result

B. Changing labels and selectively deleting observations to produce a preferred result

C. Using a standard statistical method described in a textbook

D. Repeating an experiment after equipment failure

Correct Answer: B. Changing labels and selectively deleting observations to produce a preferred result

Question 4

Why should a reviewer avoid entering a confidential manuscript into an unapproved AI system?

A. AI systems cannot perform language correction

B. The manuscript may be exposed, retained, or processed in ways that breach confidentiality

C. Peer review must always be conducted anonymously by humans only

D. AI systems are legally classified as authors

Correct Answer: B. The manuscript may be exposed, retained, or processed in ways that breach confidentiality

Question 5

Which statement best distinguishes copyright from a patent?

A. Copyright protects qualifying inventions, while patents protect literary expression

B. Copyright generally protects original expression, while patents may protect qualifying inventions

C. Copyright and patents protect exactly the same subject matter

D. Neither copyright nor patents apply to software-related research

Correct Answer: B. Copyright generally protects original expression, while patents may protect qualifying inventions

Question 6

A paper substantially repeats an earlier publication but does not cite or disclose the earlier work. This is most likely:

A. Transparent secondary publication

B. Duplicate or redundant publication

C. Permissible self-citation

D. A patent filing

Correct Answer: B. Duplicate or redundant publication

Question 7

Which is a warning sign of a potentially predatory journal?

A. Clear peer-review procedures and transparent fees

B. A stated correction and retraction policy

C. Guaranteed acceptance, unverifiable editorial claims, and aggressive unsolicited invitations

D. Archiving through a recognized repository

Correct Answer: C. Guaranteed acceptance, unverifiable editorial claims, and aggressive unsolicited invitations

Question 8

A dataset is publicly accessible online. What follows ethically from that fact?

A. Anyone may redistribute it without restriction

B. The dataset automatically becomes public domain

C. Researchers may use it without checking privacy, licensing, provenance, or contractual restrictions

D. Public access does not eliminate the need to check permissions and use conditions

Correct Answer: D. Public access does not eliminate the need to check permissions and use conditions

Question 9

What is the primary purpose of an expression of concern?

A. To permanently erase an article from the scholarly record

B. To alert readers to unresolved reliability concerns while an investigation proceeds

C. To reward authors who correct minor typographical errors

D. To transfer copyright to the journal

Correct Answer: B. To alert readers to unresolved reliability concerns while an investigation proceeds

Question 10

A software developer designs the data-cleaning pipeline, identifies measurement bias, interprets the results, and substantially revises the manuscript. What is the strongest ethical conclusion?

A. The developer can only be acknowledged because software work never supports authorship

B. The developer likely meets authorship criteria, subject to final approval and responsibility

C. The developer must be the sole author

D. The developer should be omitted to avoid conflicts with the supervisor

Correct Answer: B. The developer likely meets authorship criteria, subject to final approval and responsibility

Research Ethics & Computer Applications
Chapter 12 of 14

Research Ethics & Computer Applications

Chapter 13
Ethics of Large-Scale, Networked, and Emerging Technologies

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

13. Ethics of Large-Scale, Networked, and Emerging Technologies

Introduction and Context

Large-scale and networked technologies have altered the conditions under which information is collected, interpreted, exchanged, and acted upon. Big-data infrastructures combine heterogeneous records from platforms, sensors, transactions, public agencies, and research systems. The Internet of Things (IoT) places computation in homes, factories, vehicles, cities, and medical devices. Biometrics transforms bodily characteristics into identifiers. Blockchain distributes records across institutions, while digital twins connect physical processes to continuously updated computational models. Autonomous systems increasingly make or recommend decisions with limited human intervention.

These technologies are not ethically significant merely because they are technically powerful. Their significance arises from the relationships they create among individuals, organizations, communities, states, and the environment. They redistribute visibility, authority, risk, and responsibility. A sensor network may improve transport efficiency while making ordinary movement continuously observable. A predictive model may assist diagnosis while reproducing historical inequalities. An immutable ledger may strengthen accountability while preserving an error or exposing personal information indefinitely.

The central challenge is therefore not simply whether a technology works. Researchers and practitioners must ask: Who defines the problem? Whose data and values are embedded? Who benefits, who bears risk, who can contest a decision, and who remains responsible when systems interact in unexpected ways? This chapter develops a framework for evaluating such questions across interconnected technologies and jurisdictions.

Learning Objectives

By the end of this chapter, doctoral students should be able to:

1. Explain the ethical characteristics of large-scale, networked, and emerging technologies.

2. Distinguish privacy, security, safety, fairness, accountability, and sustainability concerns.

3. Apply ethical theories and socio-technical frameworks to complex technology systems.

4. Evaluate risks associated with big data, IoT, biometrics, blockchain, digital twins, autonomy, surveillance, and dual-use research.

5. Design governance, assurance, and research practices appropriate to cross-border infrastructures.

6. Critically assess trade-offs rather than treating innovation or compliance as sufficient ethical justification.

Why Scale and Interconnection Change the Ethical Problem

Traditional information systems often had identifiable users, bounded databases, and relatively predictable purposes. Large-scale systems are different in four important respects. First, they aggregate data across contexts. A location trace collected for navigation can later support advertising, policing, insurance, or employment decisions. This is known as contextual integrity: information appropriate in one setting may become inappropriate when transferred to another.

Second, networked systems create emergent effects. The ethical outcome may not be attributable to one component. A biased data source, a poorly designed model, an operational policy, and an automated interface can collectively produce discriminatory results even when no single element appears intentionally discriminatory. Third, scale magnifies harm. A small error repeated across millions of records can deny access to services, misidentify people, or distort public knowledge. Finally, technical and institutional dependencies make responsibility difficult to locate. Cloud providers, data brokers, application developers, public agencies, and end users may each control only part of a system.

A useful analytical distinction is between data ethics and technology ethics. Data ethics concerns collection, quality, inference, use, sharing, retention, and deletion. Technology ethics additionally concerns system architecture, affordances, power relations, labor, environmental costs, institutional purposes, and social consequences. Consent is important but cannot resolve every issue: a person may consent to data collection without understanding future inferences, and a bystander may be observed without having any practical opportunity to consent.

Ethical Lenses for Complex Systems

Several ethical traditions provide complementary perspectives. A deontological approach asks whether actions respect duties and rights, such as privacy, autonomy, equality, and non-discrimination. A consequentialist approach assesses likely benefits and harms, including harms to groups and future generations. Virtue ethics asks what qualities institutions should embody—such as honesty, prudence, justice, and accountability. Care ethics emphasizes dependence, vulnerability, relationships, and the needs of people who cannot effectively protect themselves. Justice-oriented approaches examine the distribution of benefits, burdens, recognition, and decision-making power.

These theories should not be reduced to a single scoring exercise. In practice, they reveal tensions. A citywide facial-recognition system might produce security benefits under a consequentialist analysis, yet violate autonomy and democratic freedom under a rights-based analysis. A blockchain record may increase institutional accountability but conflict with duties to correct personal information. Ethical analysis should make such conflicts explicit and identify which values are non-negotiable in the relevant context.

A practical socio-technical assessment can proceed through six questions:

  • What data, models, infrastructures, and human practices constitute the system?
  • Which people and communities are affected directly or indirectly?
  • What purposes are authorized, and what secondary uses are foreseeable?
  • Where can error, bias, coercion, manipulation, or failure occur?
  • Who has power to inspect, challenge, correct, suspend, or terminate the system?
  • Are benefits, burdens, and environmental costs distributed fairly?

This approach extends privacy impact assessment into a broader algorithmic and social impact assessment. It also supports a precautionary response where consequences are potentially severe, irreversible, or difficult to observe.

Big Data and the Ethics of Inference

Big data is characterized not only by volume, velocity, and variety but also by the capacity to generate inferences. An inference may be statistically plausible while being ethically unjustified. For example, a system may infer health status, political preference, financial vulnerability, or emotional condition from apparently innocuous traces. The individual may never have supplied the sensitive attribute, yet the inference can affect opportunities.

Important risks include function creep, re-identification, data-quality errors, proxy discrimination, opaque profiling, and unequal data representation. De-identification reduces some risks but is not an absolute guarantee when datasets can be linked. Data minimization should therefore be interpreted as limiting collection, granularity, retention, access, and use—not merely removing names.

Ethically responsible big-data research requires a defensible purpose, proportionality, documented provenance, quality evaluation, access controls, retention limits, and procedures for correcting harmful outcomes. Researchers should distinguish descriptive statistics from predictive claims and predictive accuracy from social validity. A model can be accurate on a benchmark and still be inappropriate if the target label reflects institutional prejudice or if deployment changes the behavior being predicted.

The Internet of Things: Continuous Observation and Distributed Responsibility

IoT devices collect information from environments that were previously difficult to monitor. Smart meters, wearable devices, industrial sensors, connected toys, and medical equipment can improve efficiency and safety. They also create persistent observation, security vulnerabilities, and ambiguous ownership of data. A household device may record visitors, children, employees, or neighbors who did not purchase or configure it.

The ethical design of IoT requires security by default, transparent indicators of sensing, meaningful control over data flows, local processing where feasible, and long-term support for updates. In safety-critical settings, cybersecurity is an ethical obligation because compromised devices can cause physical harm. Manufacturers should communicate the operational life of devices and not treat unsupported legacy equipment as solely the user’s responsibility.

IoT also raises labor and institutional concerns. Workplace sensors can improve ergonomics but become tools for intrusive productivity surveillance. Smart-city systems can optimize traffic while shifting public space toward measurable efficiency. Governance must therefore include community participation and clear limits on secondary use, not merely technical encryption.

Biometrics and the Politics of the Body

Biometric systems use physiological or behavioral characteristics—such as facial structure, fingerprints, voice, gait, or iris patterns—to identify or verify individuals. Unlike passwords, biometrics are difficult to replace after compromise. Their use can therefore create durable risks. Performance may vary across demographic groups, lighting conditions, age, disability, and context. Even a technically accurate system may be ethically unacceptable when used for continuous identification without democratic authorization.

Biometric governance should distinguish one-to-one verification from one-to-many identification, voluntary authentication from compelled scanning, and controlled access from public-space monitoring. It should require necessity, proportionality, strict retention rules, independent testing, human review, and effective remedies. Researchers must be cautious when constructing biometric datasets from publicly available images: public accessibility does not establish informed consent for a new purpose.

The deepest concern is not only misidentification but the normalization of an environment in which anonymity becomes difficult. This can chill expression, association, protest, and ordinary movement. A rights-based assessment may consequently reject some uses even where accuracy is high.

Blockchain, Immutability, and Institutional Trust

Blockchain systems distribute transaction validation across a network and use cryptographic techniques to create a tamper-resistant record. They can support provenance, supply-chain coordination, credential verification, and shared records among organizations that do not fully trust one another. Yet “immutable” records create ethical complications. Incorrect, defamatory, or personal information may be difficult to amend. Public ledgers can expose transaction patterns, and governance may be controlled by technically powerful participants rather than by all affected stakeholders.

Ethical evaluation should ask whether decentralization is genuinely needed, whether a permissioned architecture would reduce risk, what information belongs on-chain, and how correction, dispute resolution, and identity recovery will work. Smart contracts automate rules but do not eliminate interpretation or responsibility. Code may execute an agreement that is legally invalid, socially harmful, or based on inaccurate external data. Oracles that connect blockchains to real-world information become important points of trust and failure.

Blockchain projects should avoid treating cryptographic integrity as equivalent to social legitimacy. A record can be secure and still be unjust, misleading, or improperly obtained.

Digital Twins and Autonomous Systems

A digital twin is a computational representation of a physical object, process, or environment that is updated through data connections. In manufacturing, health care, energy, and urban planning, digital twins can support simulation, maintenance, and scenario analysis. Their ethical risks include inaccurate representation, unauthorized surveillance, model dependence, and the mistaken belief that a model is the system itself. A twin of a person or community may encode sensitive assumptions and influence decisions without adequate participation.

Autonomous systems range from recommendation engines to robots and vehicles. Autonomy is not binary; it describes the degree to which a system selects and executes actions without immediate human direction. Ethical design must specify the operational domain, acceptable failure modes, escalation procedures, monitoring requirements, and authority to intervene. Human oversight is meaningful only when the human has sufficient information, time, competence, and actual power to stop the system. A nominal “human in the loop” who merely approves automated outputs is not an adequate safeguard.

Responsibility should be allocated across designers, deployers, operators, owners, and institutions. Safety cases, independent testing, incident reporting, audit logs, and post-deployment monitoring are essential, especially when systems learn or adapt after release.

Surveillance, Dual Use, and the Limits of Intent

Surveillance involves systematic observation for purposes such as security, management, research, or commercial personalization. Its ethics depend on purpose, visibility, power asymmetry, necessity, and the possibility of refusal. Mass surveillance can produce chilling effects even when no individual is directly punished. Predictive policing, employee monitoring, and platform tracking may also transform correlations into interventions that disproportionately burden already scrutinized communities.

Dual-use research has legitimate civilian applications but can also enable harm. Examples include cyber tools, synthetic biology, advanced analytics, autonomous capabilities, and vulnerability research. The ethical issue is not solved by classifying work as either beneficial or dangerous. Researchers should assess misuse pathways, downstream actors, publication detail, access controls, staged release, red-team testing, and incident response. Oversight should be proportionate and should not suppress responsible inquiry unnecessarily.

A responsible innovation approach combines anticipation, reflection, inclusion, and responsiveness. It asks researchers to consider plausible futures, engage affected publics, disclose uncertainty, and modify or halt projects when evidence of unacceptable harm emerges.

Environmental and Cross-Border Responsibilities

Digital infrastructures consume energy, water, minerals, land, and labor. Data centers, network equipment, sensors, and electronic waste produce environmental effects that may be geographically distant from users. Energy efficiency alone is insufficient if efficiency encourages uncontrolled expansion. Ethical assessment should consider full life-cycle impacts: extraction, manufacturing, operation, maintenance, replacement, recycling, and disposal.

Cross-border infrastructures complicate jurisdiction, accountability, and rights. Data may be collected in one country, processed in another, stored in a third, and used to make decisions affecting people worldwide. Laws may conflict regarding privacy, access, localization, research ethics, and government authority. Organizations should map data flows, identify responsible entities, establish contractual and technical safeguards, and provide remedies that are accessible across borders. Ethical governance should not exploit jurisdictions with weaker protections.

International collaboration also requires attention to data colonialism: the extraction of data, knowledge, or biological information from communities without fair participation, recognition, or benefit sharing. Local expertise and community governance are not obstacles to research quality; they are conditions of legitimacy.

An Integrated Governance Framework

An effective governance program should operate across the technology life cycle.

Before development, define the social purpose, affected groups, prohibited uses, legal and ethical constraints, environmental objectives, and exit conditions. Conduct data protection, algorithmic impact, security, and human-rights assessments where appropriate.

During design, apply privacy and security by design, minimize data, document assumptions, test representative conditions, and include accessibility and community perspectives. Establish decision logs and model documentation that record data provenance, intended use, limitations, and known failure modes.

Before deployment, conduct independent validation, adversarial testing, bias assessment, safety review, and operational rehearsals. Specify who can authorize use, who monitors performance, how incidents are reported, and how affected people appeal or obtain correction.

After deployment, monitor drift, disparate impacts, security events, environmental performance, and changing social conditions. Audit not only model outputs but also institutional use. A technically sound system can become harmful when incentives, policies, or contexts change.

At retirement, delete or archive data responsibly, revoke access, manage residual copies, decommission devices safely, and communicate the end of service. Ethical responsibility extends beyond launch; withdrawal without transition planning can harm dependent users.

Governance should be supported by independent oversight, protected whistleblowing, procurement standards, professional codes, and meaningful sanctions. Transparency should be calibrated: publishing source code or data may create security or privacy risks, while secrecy prevents accountability. The goal is contestability—enough information and institutional access for qualified parties to understand, challenge, and remedy system impacts.

Illustrative Case Study: A Cross-Border Smart Port

Background

A fictional international port authority, Meridian Port, proposes a smart-port platform combining IoT cameras and sensors, biometric worker access, digital twins of cargo operations, predictive analytics, and a permissioned blockchain for shipment records. The platform will be operated by a consortium involving the port authority, logistics firms, a cloud provider, and customs agencies in three countries.

Situation and Problem

The consortium claims that the system will reduce congestion, improve safety, and detect illicit shipments. However, worker representatives report that facial recognition may be used for attendance and disciplinary monitoring. Small logistics firms fear exclusion from the blockchain network. Environmental groups question energy and equipment impacts. Data collected in one country may be analyzed in another under different legal protections. A pilot also shows that the predictive safety model produces more alerts for contractors working night shifts, although the reason is unclear.

Analysis

The proposed system combines several ethical risks. Purpose expansion could turn safety sensors into labor surveillance. Biometric errors could deny access to workers, while immutable records could preserve incorrect allegations. The digital twin may optimize throughput by externalizing pollution or increasing work intensity. The safety model’s unequal alerts may reflect historical reporting practices rather than actual risk. Cross-border processing makes it unclear which institution must respond to complaints. Finally, distributed responsibility may allow each participant to claim that another organization controls the relevant decision.

Approach and Strategy

The consortium establishes an independent oversight board with worker, community, security, environmental, and small-business representation. It separates identity verification from continuous identification and prohibits public-space facial recognition. Biometric templates are stored in a tightly controlled system and are not placed on the blockchain. The blockchain stores only limited shipment attestations, while amendable off-chain records support correction and dispute resolution.

The predictive model is redesigned to use operational factors rather than historical disciplinary labels. Its performance is evaluated separately by shift, employment status, and task. Alerts trigger human investigation rather than automatic sanctions. The digital twin includes pollution and worker-safety indicators, not only throughput. Data-flow agreements define roles, retention periods, cross-border access, incident notification, and remedies. The pilot is limited, independently audited, and subject to a suspension condition if harms cannot be reduced.

Outcome

The revised system produces slower initial deployment but improves trust and reduces unnecessary biometric collection. Some efficiencies are retained through sensor-based scheduling, while the safety model is used as a decision-support tool rather than an enforcement mechanism. The case demonstrates that ethical governance may alter the architecture and business model, not simply add a notice or compliance document.

Learning Points

The case illustrates five lessons: system purpose must be bounded; data minimization is architectural; fairness requires examining labels and institutional practices; cross-border accountability must be assigned explicitly; and environmental and labor impacts belong within technology evaluation.

Challenges and Common Mistakes

A frequent mistake is to treat informed consent as a complete ethical solution. Consent may be coerced, uninformed about inference, or unavailable to bystanders. Another is to rely on accuracy as the main measure of legitimacy. Accuracy does not address whether the target is appropriate, whether errors are distributed fairly, or whether the intervention is justified.

Organizations also confuse explainability with accountability. A technically interpretable model does not guarantee a remedy, and a highly complex model can still be governed responsibly through documentation, testing, monitoring, and appeal. Checklists may create false assurance when they are completed without changing incentives or authority. Finally, ethics is often introduced too late. Once infrastructure, procurement contracts, and institutional dependence are established, redesign becomes expensive and politically difficult.

Current Developments and Best Practices

Emerging practice is moving toward continuous assurance rather than one-time certification. This includes model and data inventories, algorithmic impact assessments, provenance tools, confidential computing, privacy-enhancing technologies, secure multiparty computation, federated learning, and carbon-aware computing. These tools can reduce particular risks but are not substitutes for governance. Privacy-enhancing computation, for example, may protect data during processing while leaving the purpose of processing unjustified.

Best practice includes:

  • establish a clearly documented public or organizational purpose;
  • minimize collection, retention, linkage, and identifiability;
  • test systems across relevant demographic, geographic, and operational conditions;
  • maintain security updates, access controls, audit trails, and incident response;
  • provide understandable notice, human review, correction, appeal, and remedy;
  • include affected communities and independent experts in governance;
  • measure environmental and labor impacts across the life cycle;
  • assign responsibility contractually and institutionally across the supply chain;
  • reassess systems when models, data, laws, or social conditions change; and
  • define conditions under which a system must be paused, redesigned, or retired.

Chapter Summary

Large-scale and emerging technologies create ethical challenges because they combine data, automation, infrastructure, institutions, and power at unprecedented scale. Big data raises concerns about inference, re-identification, quality, and proxy discrimination. IoT creates continuous observation and distributed security responsibility. Biometrics can compromise bodily privacy and normalize identification. Blockchain strengthens record integrity but complicates correction and governance. Digital twins and autonomous systems require careful attention to representation, human oversight, failure, and responsibility. Surveillance and dual-use research demand proportionality, anticipation, and safeguards against misuse. Environmental effects and cross-border data flows extend responsibility beyond organizational and national boundaries.

A mature ethical approach is socio-technical and life-cycle based. It combines rights, consequences, justice, care, security, sustainability, participation, transparency, contestability, and remedy. Ethical governance is not a barrier added after innovation; it is part of responsible system design, deployment, monitoring, and retirement.

Key Terms

Big data: Large, diverse, and rapidly generated datasets used for analysis, prediction, or decision-making.

Contextual integrity: The principle that information flows should be appropriate to the social context in which they occur.

Inference: A conclusion derived from data, whether or not the individual directly supplied the inferred attribute.

Function creep: Expansion of data or technology use beyond the original authorized purpose.

Internet of Things: A network of physical objects equipped with sensors, software, and communication capabilities.

Biometrics: Identification or verification based on physiological or behavioral characteristics.

Re-identification: Linking supposedly de-identified data to an identifiable person or group.

Blockchain: A distributed record system that uses consensus and cryptographic techniques to resist unauthorized alteration.

Smart contract: Software that automatically executes predefined rules, often on a blockchain.

Digital twin: A computational representation of a physical object, process, or environment updated through data connections.

Autonomous system: A system capable of selecting or executing actions with limited immediate human direction.

Contestability: The practical ability to understand, challenge, correct, or appeal a technology-mediated decision.

Dual-use research: Research with legitimate beneficial applications that may also enable harmful uses.

Surveillance: Systematic observation or monitoring of people, activities, or environments.

Proxy discrimination: Discrimination produced through variables that indirectly represent protected or sensitive characteristics.

Data minimization: Limiting data collection, detail, access, linkage, retention, and use to what is necessary.

Privacy by design: Incorporating privacy protections into system architecture and development from the outset.

Algorithmic impact assessment: A structured evaluation of social, legal, ethical, and operational effects of an automated system.

Data colonialism: Extraction and control of data from communities without equitable participation, recognition, or benefit.

Life-cycle assessment: Evaluation of environmental and social effects from production through operation, disposal, or retirement.

Review Questions

Short Answer Questions

1. Why can consent alone be insufficient for ethical big-data processing?

2. Distinguish biometric verification from biometric identification.

3. What ethical problem is created by blockchain immutability?

4. Define meaningful human oversight in an autonomous system.

5. Why should environmental effects be assessed across a technology’s life cycle?

Long Answer Questions

1. Explain how scale, interconnection, and institutional dependency transform ordinary technology risks into socio-technical ethical problems.

2. Compare rights-based, consequentialist, justice-oriented, and care-ethics approaches to public facial recognition.

3. Discuss ethical requirements for designing and deploying an IoT system in a workplace.

4. Analyze the relationship between model accuracy, fairness, data quality, and institutional accountability.

5. Develop a life-cycle governance framework for a cross-border digital-twin project.

Analytical / Application Questions

1. A university proposes using wearable sensors to predict student stress and automatically refer students to counseling. Evaluate the proposal using contextual integrity, data minimization, fairness, consent, and contestability.

2. A blockchain-based health-record system cannot delete erroneous entries. Recommend an architecture and governance process that preserves accountability while enabling correction and privacy.

3. An autonomous port-security system produces disproportionate alerts for migrant contractors. Diagnose possible technical and institutional causes and propose a responsible innovation response.

22. Multiple Choice Questions with Answers

Question 1

Which feature most distinguishes the ethical challenge of big data from simple data collection?

A. The use of computer hardware

B. The ability to generate consequential inferences across contexts

C. The existence of file storage

D. The presence of user passwords

Correct Answer: B. The ability to generate consequential inferences across contexts

Question 2

Why is a public facial-recognition system ethically problematic even when its accuracy is high?

A. Accuracy prevents all accountability

B. High accuracy makes encryption impossible

C. Continuous identification may undermine autonomy and freedom of association

D. Facial recognition cannot be used for verification

Correct Answer: C. Continuous identification may undermine autonomy and freedom of association

Question 3

Which design choice best addresses the correction problem associated with blockchain?

A. Store all personal information permanently on-chain

B. Remove all governance procedures

C. Use amendable off-chain records with limited on-chain attestations

D. Permit unrestricted public access to transaction details

Correct Answer: C. Use amendable off-chain records with limited on-chain attestations

Question 4

What makes human oversight meaningful in an autonomous system?

A. A human is named as responsible after an incident

B. A human can understand, evaluate, and stop the system in time

C. A human signs an automated decision without review

D. The system is described as experimental

Correct Answer: B. A human can understand, evaluate, and stop the system in time

Question 5

Which example best illustrates function creep?

A. Encrypting sensor data during transmission

B. Deleting data after a defined retention period

C. Using navigation data later to assess insurance risk without adequate authorization

D. Testing a model on representative data

Correct Answer: C. Using navigation data later to assess insurance risk without adequate authorization

Question 6

In the smart-port case, why was the safety model redesigned?

A. It used no data at all

B. Its historical labels and alerts could reproduce institutional bias

C. It was stored on a permissioned blockchain

D. It measured environmental pollution directly

Correct Answer: B. Its historical labels and alerts could reproduce institutional bias

Question 7

What is the main ethical significance of cross-border data processing?

A. Data automatically becomes anonymous across borders

B. Different jurisdictions may impose conflicting protections and remedies

C. Cross-border processing eliminates organizational responsibility

D. International processing always violates privacy

Correct Answer: B. Different jurisdictions may impose conflicting protections and remedies

Question 8

Which statement about privacy-enhancing technologies is most accurate?

A. They make any data use ethically justified

B. They eliminate the need for governance

C. They can reduce certain exposure risks but do not justify an improper purpose

D. They prevent all inference from data

Correct Answer: C. They can reduce certain exposure risks but do not justify an improper purpose

Question 9

A predictive model is equally accurate across two groups but causes substantially more harmful interventions for one group. What does this show?

A. Accuracy alone is insufficient for ethical evaluation

B. The model is necessarily fair

C. The data must be de-identified

D. The system has no institutional effects

Correct Answer: A. Accuracy alone is insufficient for ethical evaluation

Question 10

Which practice best reflects responsible dual-use research governance?

A. Publishing every operational detail immediately

B. Ignoring downstream actors because the research purpose is beneficial

C. Assessing misuse pathways and applying proportionate access and release controls

D. Prohibiting all research with possible harmful applications

Correct Answer: C. Assessing misuse pathways and applying proportionate access and release controls

Research Ethics & Computer Applications
Chapter 13 of 14

Research Ethics & Computer Applications

Chapter 14
Strategic Leadership, Digital Transformation, and Future Governance

Doctorate in Information Technology
Research Ethics & Computer Applications   •   Doctorate

14. Strategic Leadership, Digital Transformation, and Future Governance

Introduction and Context

Research ethics is often discussed as a system of rules governing individual conduct: researchers must avoid fabrication, protect participants, disclose conflicts, and acknowledge sources. At doctoral and organizational levels, however, ethical performance cannot be secured through individual compliance alone. It is shaped by leadership decisions, institutional incentives, data architectures, procurement practices, research cultures, and the capacity to anticipate technological and social change. Strategic leadership therefore becomes a central condition of research integrity.

Digital transformation intensifies this responsibility. Universities, laboratories, public agencies, and technology firms increasingly use cloud platforms, artificial intelligence, automated decision systems, digital identity, large-scale analytics, and interconnected research infrastructures. These systems create opportunities for better evidence, faster discovery, and broader participation, but they also create new forms of opacity, surveillance, exclusion, dependency, and harm. Governance must consequently extend beyond retrospective compliance toward continuous oversight and anticipation.

This chapter examines how leaders can build responsible research cultures while managing digital transformation. It connects integrity training, governance maturity, ethics audits, responsible innovation, stakeholder engagement, environmental-social-governance considerations, AI regulation, horizon scanning, and anticipatory governance. The central argument is that ethical governance is not an administrative obstacle to innovation. It is an organizational capability that improves legitimacy, resilience, research quality, and public value.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the relationship between strategic leadership, research integrity, digital transformation, and governance.

2. Distinguish compliance-based governance from values-based and anticipatory approaches.

3. Apply a governance maturity model to assess an organization’s ethical capabilities.

4. Design an integrity-training and ethics-audit programme suitable for digitally enabled research.

5. Evaluate responsible innovation through stakeholder, ESG, risk, and impact perspectives.

6. Analyze emerging AI-regulatory and technological developments without treating regulation as a substitute for ethical judgment.

7. Construct a practical horizon-scanning and anticipatory-governance process.

Leadership as an Ethical and Institutional Practice

Strategic leadership is the capacity to define direction, allocate resources, shape culture, and make decisions under uncertainty. In research organizations, ethical leadership has three connected dimensions. First, leaders must model integrity through their own decisions. Second, they must design systems that make responsible conduct possible. Third, they must create conditions in which concerns can be raised without retaliation.

A leader who publicly supports research integrity but rewards only rapid publication, high grant income, or commercial deployment may unintentionally produce misconduct. This illustrates the difference between espoused values and enacted values. Espoused values are the principles an organization claims to support; enacted values are revealed by promotion criteria, budget decisions, deadlines, performance indicators, and responses to failure. A mature ethical culture aligns the two.

Research culture is also influenced by power. Doctoral researchers, junior staff, contract workers, and community participants may be dependent on senior investigators. Ethical leadership therefore requires attention to voice, procedural fairness, authorship, supervision, workload, and access to complaint mechanisms. The relevant question is not simply whether a policy exists, but whether a person with less institutional power can use it safely and effectively.

Three leadership responsibilities are especially significant:

  • Sense-making: interpreting technological, legal, social, and environmental developments and explaining their implications to the organization.
  • System design: embedding ethical checkpoints, accountability, documentation, and escalation routes into workflows.
  • Stewardship: protecting long-term public trust rather than maximizing short-term outputs.

These responsibilities place ethics within strategy. A decision to adopt an automated research platform, for example, is also a decision about data ownership, vendor dependence, explainability, cybersecurity, workforce skills, and future institutional autonomy.

From Compliance to Governance Maturity

Compliance asks whether an organization meets specified rules. Governance asks how authority, accountability, participation, evidence, and corrective action are organized. Compliance remains necessary, but it is insufficient when technologies or research practices develop faster than formal rules.

A useful governance maturity model has five stages. The stages are analytical rather than universal, and an organization may occupy different stages in different domains.

Stage 1: Ad hoc and reactive

Ethical decisions depend on individual judgment. Policies are incomplete, responsibilities are unclear, and incidents are handled after harm occurs. Training is usually occasional and records are fragmented.

Stage 2: Policy-oriented

The organization has formal policies, ethics committees, approval procedures, and mandatory training. Governance is primarily document-driven. The main weakness is that policies may not influence operational decisions.

Stage 3: Managed and integrated

Ethics is incorporated into project planning, procurement, data management, information security, human-resource processes, and performance review. Responsibilities are assigned, risks are recorded, and monitoring is routine.

Stage 4: Measured and adaptive

The organization uses indicators, audits, incident learning, stakeholder feedback, and comparative benchmarking. Controls are adjusted when evidence indicates that they are ineffective or create unintended consequences.

Stage 5: Anticipatory and transformative

The organization considers second-order effects, uncertain futures, contested values, and systemic impacts before deployment. It experiments responsibly, includes affected communities, and preserves the ability to revise, pause, or abandon a technology.

Maturity should not be confused with bureaucracy. A mature organization may have fewer but better controls because it understands where risk is concentrated. It also avoids the opposite error: assuming that sophisticated technology automatically produces sophisticated governance.

A governance assessment can examine six dimensions: leadership commitment, policy coherence, operational integration, competence and training, transparency and participation, and learning capacity. Each dimension can be rated using evidence rather than assertion. For example, leadership commitment may be demonstrated by protected ethics budgets, documented decisions, and executive responses to reported concerns, not merely by a values statement.

Building a Responsible Research Culture

Integrity training is most effective when it is continuous, role-specific, and connected to real decisions. A generic online module may communicate definitions, but it rarely prepares a principal investigator to manage authorship disputes, a data engineer to assess re-identification risk, or a procurement officer to question a vendor’s opaque algorithm.

A robust training architecture contains four layers. The first is foundational orientation covering research misconduct, informed consent, privacy, conflicts of interest, data stewardship, authorship, responsible reporting, and speaking-up mechanisms. The second is role-based learning. Researchers working with human data require different instruction from software developers, supervisors, ethics reviewers, or technology buyers. The third is case-based deliberation, in which participants examine ambiguous situations and defend decisions. The fourth is reflective learning after incidents, near misses, audits, or regulatory change.

Training should be evaluated at several levels: participation, comprehension, behavioral application, and organizational outcomes. Completion rates alone are weak evidence. More useful indicators include the quality of data-management plans, the timeliness of disclosures, the accessibility of reporting channels, and the reduction of repeated errors.

A responsible culture also requires psychological safety. Reporting systems should offer confidentiality where appropriate, protect complainants from retaliation, provide fair investigation, and distinguish honest error from reckless or deceptive conduct. Excessively punitive environments can drive problems underground, whereas environments without accountability can normalize misconduct. Ethical leadership balances learning with proportionate responsibility.

Ethics Audits and Assurance in Digital Research

An ethics audit is a structured examination of whether an organization’s practices, controls, and outcomes conform to ethical commitments and applicable requirements. It is broader than an ethics review of one research protocol. An audit may examine the entire life cycle of data or technology: collection, labeling, storage, analysis, sharing, deployment, monitoring, retention, and deletion.

An effective audit begins by defining scope. Relevant questions include: What people, communities, environments, or institutions may be affected? Which decisions are automated or assisted by software? What data are sensitive or inferential? Which suppliers control infrastructure or models? What evidence supports claims of accuracy, fairness, security, and benefit?

The audit process normally includes:

1. Mandate and scope: establish authority, objectives, independence, and boundaries.

2. Evidence collection: review policies, logs, consent materials, model documentation, contracts, training records, impact assessments, and complaints.

3. Stakeholder inquiry: obtain perspectives from researchers, technical staff, participants, affected groups, and oversight bodies.

4. Risk and gap analysis: compare actual practice with ethical principles, institutional requirements, and legal obligations.

5. Findings and recommendations: classify issues by severity, likelihood, reversibility, and affected populations.

6. Remediation and follow-up: assign owners, deadlines, resources, and verification methods.

Audits have limitations. They may become performative exercises, focus on easily measured controls, or privilege the organization’s perspective. Independence, triangulation, random sampling, and follow-up are therefore essential. An audit should not certify that a system is permanently ethical; it should establish what was examined, what remains uncertain, and what must change.

Responsible Innovation and Stakeholder Engagement

Responsible innovation asks not only whether an innovation can be developed, but whether it should be developed, for whom, under what conditions, and with what capacity for correction. A widely used analytical approach considers anticipation, reflection, inclusion, and responsiveness.

Anticipation examines possible effects, including indirect and long-term consequences. Reflection questions the values, assumptions, limitations, and distributional effects embedded in a project. Inclusion gives relevant stakeholders meaningful opportunities to influence decisions, not merely to endorse predetermined plans. Responsiveness ensures that the organization can modify goals, methods, or deployment in light of evidence and public concerns.

Stakeholder engagement is not equivalent to consultation. Consultation may collect opinions while leaving authority unchanged. Meaningful engagement clarifies who decides, what influence participants have, how disagreements will be handled, and how contributions will be acknowledged. Stakeholder mapping should include not only funders and institutional leaders but also data subjects, marginalized communities, operational staff, future users, non-users, and groups likely to bear risks without receiving benefits.

Digital participation can broaden access, but it can also exclude people with limited connectivity, language barriers, disabilities, or concerns about surveillance. Hybrid engagement, accessible materials, compensation for community expertise, and transparent feedback reports can improve legitimacy.

ESG and the Public Value of Digital Transformation

Environmental, social, and governance considerations provide a useful strategic lens, although ESG should not replace research ethics. Environmental concerns include energy consumption, hardware supply chains, electronic waste, water use in infrastructure, and the environmental costs of repeated computation. Social concerns include accessibility, labor conditions, discrimination, privacy, community effects, and the distribution of benefits and burdens. Governance concerns include accountability, corruption prevention, transparency, board or executive oversight, auditability, and grievance mechanisms.

The ESG lens is valuable because it expands attention beyond immediate project performance. A high-performing digital system may still be unacceptable if it relies on exploitative labor, increases exclusion, or transfers environmental costs to vulnerable communities. At the same time, ESG metrics can oversimplify morally significant issues. An organization may report a numerical diversity indicator while failing to address power or discrimination. Leaders should therefore combine quantitative indicators with qualitative inquiry and stakeholder evidence.

For doctoral researchers, ESG also raises methodological questions. What is the unit of analysis: the algorithm, project, organization, supply chain, or life cycle? Which impacts are direct, indirect, cumulative, or displaced? What evidence supports a claim of sustainability? Such questions prevent ethical language from becoming a branding exercise.

AI Regulation and Algorithmic Accountability

Artificial intelligence creates distinctive governance challenges because systems may be trained on data whose provenance is uncertain, produce probabilistic outputs, change through updates, and influence decisions at scale. Accountability can become fragmented among developers, deployers, data providers, managers, and vendors.

AI governance should address at least the following areas: purpose and necessity, data provenance, privacy and consent, representativeness, bias and discrimination, security, explainability, human oversight, performance monitoring, contestability, intellectual property, environmental impact, and incident response. The level of control should be proportionate to risk. A system used to recommend library resources does not require the same governance as one influencing employment, health, education, credit, or public services.

Regulatory approaches increasingly emphasize risk classification, documentation, transparency, human oversight, impact assessment, and duties for providers or deployers. Yet legal compliance is only a baseline. A system can be legally permissible and still be socially harmful, epistemically unreliable, or inconsistent with institutional values. Conversely, excessive procedural requirements may discourage beneficial research or create barriers for smaller organizations. Strategic leaders must therefore interpret regulation within a broader framework of rights, professional duties, public interest, and organizational accountability.

Human oversight must be substantive rather than symbolic. A human who cannot understand, question, override, or investigate an automated recommendation is not exercising meaningful oversight. Organizations should define escalation thresholds, maintain records of interventions, test for automation bias, and ensure that affected persons have avenues for explanation and appeal.

Horizon Scanning and Anticipatory Governance

Horizon scanning is a disciplined search for emerging developments that may create opportunities, risks, or governance gaps. It differs from prediction. Prediction attempts to state what will happen; horizon scanning identifies signals, uncertainties, and plausible developments that deserve attention.

A practical scanning cycle begins by defining a domain, such as synthetic media, quantum computing, neurotechnology, biometric identification, or autonomous research systems. Analysts then collect signals from scientific publications, patents, standards, legislation, incident reports, expert communities, procurement activity, and public discourse. Signals are assessed for novelty, credibility, potential impact, time horizon, and uncertainty. They are clustered into themes and translated into strategic questions.

Scenario analysis can then explore multiple futures rather than a single forecast. For each scenario, leaders may ask: Which values are threatened? Which stakeholders gain or lose power? What capabilities would be needed? Which decisions are reversible? What early indicators would justify action?

Anticipatory governance converts this inquiry into present action. Possible measures include controlled pilots, sunset clauses, independent review, data and model documentation, red-teaming, contingency plans, investment in expertise, and explicit stop criteria. The principle of reversibility is particularly important. Where consequences may be severe or difficult to undo, organizations should require stronger evidence and slower deployment.

Anticipatory governance does not mean attempting to control the future completely. It means increasing the capacity to notice change, deliberate under uncertainty, and adjust before harm becomes entrenched.

An Integrated Strategic Framework

A university or technology organization can integrate these ideas through a Responsible Digital Transformation Cycle:

1. Define public purpose. State the problem, intended beneficiaries, values, and non-negotiable constraints.

2. Map systems and stakeholders. Identify data flows, dependencies, affected communities, suppliers, decision points, and possible externalities.

3. Assess risk and maturity. Examine ethical, legal, technical, environmental, and social risks alongside governance capability.

4. Deliberate and design safeguards. Use interdisciplinary review, stakeholder engagement, proportional controls, and documented alternatives.

5. Pilot under controlled conditions. Limit scope, monitor outcomes, preserve human intervention, and establish stop criteria.

6. Deploy with accountability. Assign ownership, publish appropriate information, provide complaint and appeal routes, and maintain audit trails.

7. Monitor, learn, and revise. Review incidents, disparities, environmental effects, user feedback, and emerging regulation.

8. Retire or transform. Decommission systems safely when they no longer serve their purpose or cannot be governed adequately.

The cycle is iterative rather than linear. New evidence may require returning to purpose definition or stakeholder mapping. A mature organization also records why alternatives were rejected, because decision rationale is essential for later review.

Illustrative Case: A University Research Platform for Predictive Student Support

Background

A fictional university proposes an AI platform to identify students who may need academic support. The system would combine learning-management activity, assessment performance, attendance, and requests for assistance. Advisers would receive risk indicators and contact selected students.

Situation and problem

The university expects earlier intervention and improved retention. However, students and staff are concerned about privacy, stigmatization, inaccurate predictions, unequal effects on part-time and disabled students, and the possibility that commercial vendors may reuse data. The project team initially proposes rapid deployment because the model performs well on historical data.

Analysis

A governance review identifies several issues. Historical data reflect earlier institutional practices and may encode unequal treatment. The target variable—such as withdrawal or low grades—is not identical to a student’s need for support. Students have limited understanding of how their data will be used, and advisers may treat the risk score as an authoritative judgment. The system’s benefits are uncertain, while reputational and psychological harms could be difficult to reverse.

The maturity assessment places the university at the managed stage for data protection but at a policy-oriented stage for algorithmic accountability. It has an ethics committee and privacy policy, but no established process for monitoring disparate impact or contesting an automated recommendation.

Approach and strategy

The university establishes a cross-functional governance group including students, advisers, disability specialists, data-protection staff, researchers, and technical personnel. It narrows the purpose from predicting failure to identifying opportunities for voluntary support. Sensitive variables are examined for necessity, and the vendor contract prohibits secondary use and requires audit cooperation. The model is piloted with a small group, with transparent notices and an option to decline where feasible.

Advisers receive training that the indicator is a prompt for conversation, not a diagnosis. Students can request an explanation, correction of data, or review of an intervention. The university defines performance measures beyond predictive accuracy, including false-positive patterns, participation, student experience, equity outcomes, and adviser override rates. A review date and suspension criteria are established before launch.

Outcome

The pilot demonstrates that the model identifies some students who benefit from support, but it also produces more false positives among students with irregular attendance patterns. Rather than expanding immediately, the university revises the data inputs, strengthens communication, and continues a limited pilot. The project is judged successful not because automation was maximized, but because the institution learned before normalizing a potentially harmful practice.

Learning points

The case illustrates that technical performance is only one part of responsible innovation. Purpose definition, stakeholder participation, human judgment, contestability, vendor governance, equity monitoring, and reversibility are equally important. It also demonstrates the value of treating uncertainty as a reason for disciplined learning rather than as a justification for either careless deployment or automatic rejection.

Challenges, Risks, and Common Strategic Errors

Organizations commonly mistake policy volume for governance quality. Numerous committees can create diffusion of responsibility, especially when no executive has authority to resolve conflicts. Another error is ethics washing: presenting a project as responsible through principles or publicity without changing incentives, data practices, or decision rights.

Metrics can also distort conduct. If researchers are rewarded solely for publications, patents, or speed, they may underreport negative results, avoid difficult stakeholder engagement, or treat review as an obstacle. Conversely, an excessive emphasis on risk avoidance can suppress beneficial experimentation and concentrate innovation in less accountable environments.

Other risks include vendor opacity, inadequate documentation, cybersecurity failures, model drift, institutional dependence on proprietary systems, consultation fatigue, and inequitable distribution of research burdens. International projects introduce additional complexity involving differing legal regimes, cultural expectations, data transfers, and power imbalances between institutions.

Leaders should avoid several false dichotomies: innovation versus ethics, human judgment versus automation, regulation versus flexibility, and measurement versus values. Responsible strategy usually requires combining these elements. The practical challenge is to make trade-offs explicit, justify them with evidence, and provide mechanisms for correction.

Current Developments and Emerging Directions

Several developments are reshaping governance. Generative AI is increasing the need for provenance, disclosure, assessment redesign, intellectual-property analysis, and verification of synthetic content. Foundation models are raising questions about concentration of infrastructure, training-data accountability, and downstream uses that developers cannot fully control. Digital twins, immersive environments, biometric systems, and autonomous laboratory platforms are expanding the scope of data and agency concerns.

Regulatory convergence is unlikely to produce identical global rules. Organizations will need interoperable governance practices that can satisfy different legal contexts while maintaining a consistent ethical baseline. Standards, assurance methods, model documentation, algorithmic impact assessments, and independent audits may become more important, but their credibility will depend on competence and independence.

There is also growing interest in environmental accounting for computation, community data governance, participatory technology assessment, and institutional mechanisms for responsible discontinuation. These developments reinforce a central lesson: governance must be designed for change, not only for stable technologies and known risks.

Best Practices for Strategic Leaders

Effective leaders should:

  • connect integrity to budgets, incentives, promotion, procurement, and research planning;
  • assign clear accountability while preserving independent ethical review;
  • use role-specific, case-based, and continuous training;
  • assess governance maturity with evidence and repeat the assessment;
  • conduct ethics audits that examine outcomes, not merely documents;
  • engage affected stakeholders early and disclose how their input influenced decisions;
  • apply proportionate controls based on impact, uncertainty, and reversibility;
  • require documentation of data, models, assumptions, limitations, and decisions;
  • establish monitoring, appeal, incident-response, and system-retirement mechanisms;
  • use horizon scanning to prepare for plausible futures rather than relying on forecasts alone.

Chapter Summary

Strategic leadership is a foundation of research integrity because organizational incentives, systems, and power relationships strongly influence individual conduct. Digital transformation expands both the benefits and the ethical risks of research, requiring governance that integrates policy, technical controls, stakeholder participation, and institutional learning.

The governance maturity model provides a way to distinguish reactive compliance from integrated, measured, and anticipatory capability. Integrity training should be continuous and role-specific, while ethics audits should examine complete digital life cycles and verify actual outcomes. Responsible innovation emphasizes anticipation, reflection, inclusion, and responsiveness. ESG analysis broadens attention to environmental, social, and governance effects, but must be supported by substantive evidence rather than symbolic reporting.

AI governance requires attention to purpose, data, fairness, explainability, human oversight, security, contestability, and accountability. Horizon scanning and anticipatory governance help organizations respond to uncertainty through scenarios, pilots, safeguards, reversibility, and continuous learning. The strategic objective is not to eliminate all risk, but to ensure that innovation remains purposeful, accountable, inclusive, and capable of correction.

Key Terms

Anticipatory governance: Governance that prepares for uncertain futures through foresight, deliberation, experimentation, and adaptive action.

Algorithmic accountability: The assignment of responsibility for the design, operation, effects, and review of algorithmic systems.

Automation bias: The tendency to overtrust or defer to automated outputs, even when human judgment should question them.

Digital transformation: Organizational change enabled by digital technologies, data, redesigned processes, and new forms of service or research.

ESG: Environmental, social, and governance factors used to evaluate organizational impacts and responsibilities.

Ethics audit: A systematic examination of ethical commitments, practices, controls, evidence, and outcomes.

Governance maturity: The extent to which governance is formalized, integrated, measured, adaptive, and anticipatory.

Horizon scanning: The systematic identification and assessment of emerging developments, signals, risks, and opportunities.

Integrity culture: Shared norms, incentives, practices, and expectations that support honest and responsible conduct.

Meaningful human oversight: Human supervision with sufficient authority, competence, information, and ability to intervene.

Model drift: Change in a model’s performance or behavior as data, contexts, or relationships change over time.

Psychological safety: A condition in which people can raise concerns, admit errors, or question decisions without fear of unfair retaliation.

Responsible innovation: Innovation conducted with attention to anticipation, reflection, inclusion, responsiveness, and public value.

Reversibility: The capacity to pause, modify, undo, or retire a decision or technological system without disproportionate harm.

Research integrity: Commitment to honesty, rigor, transparency, accountability, and respect in research.

Stakeholder engagement: Structured involvement of affected or interested parties in decisions, design, oversight, and evaluation.

Values-in-practice: The principles demonstrated by actual incentives, resource decisions, procedures, and responses to problems.

Vendor governance: Controls governing the selection, contracting, monitoring, auditing, and termination of external technology providers.

Review Questions

Short Answer Questions

1. Why is individual compliance insufficient for achieving organizational research integrity?

2. Identify and briefly explain the five stages of the governance maturity model.

3. What are the four dimensions of responsible innovation discussed in this chapter?

4. Why is technical accuracy insufficient for judging an AI system’s acceptability?

5. Distinguish horizon scanning from prediction.

Long Answer Questions

1. Explain how strategic leaders can align espoused ethical values with enacted organizational values.

2. Discuss the design and limitations of ethics audits in digitally enabled research environments.

3. Analyze how ESG considerations can expand the evaluation of digital transformation.

4. Describe an integrated governance approach for AI used in high-impact institutional decisions.

5. Explain how anticipatory governance supports responsible innovation under uncertainty.

Analytical / Application Questions

1. A university plans to deploy an AI system that predicts doctoral completion. Apply the Responsible Digital Transformation Cycle to identify governance questions, safeguards, and stop criteria.

2. An organization has extensive ethics policies but repeated data-management failures. Diagnose its likely governance maturity and propose a twelve-month improvement plan.

3. A vendor refuses to disclose details of a proprietary research algorithm while promising high accuracy. Develop a leadership decision that balances innovation opportunity, accountability, stakeholder rights, and institutional risk.

22. Multiple Choice Questions with Answers

Question 1

Which condition most clearly indicates that an organization has moved beyond policy-oriented governance?

A. It has published a general statement of ethical principles.

B. It requires all researchers to sign an annual compliance declaration.

C. It integrates ethical controls into procurement, data management, and performance processes.

D. It establishes a committee that meets only after incidents occur.

Correct Answer: C. It integrates ethical controls into procurement, data management, and performance processes.

Question 2

What is the primary weakness of evaluating integrity training only through completion rates?

A. Completion rates are difficult to calculate.

B. Completion does not demonstrate behavioral application or improved outcomes.

C. Completion rates focus too much on stakeholder participation.

D. Completion prevents role-specific training from being offered.

Correct Answer: B. Completion does not demonstrate behavioral application or improved outcomes.

Question 3

Which audit practice best reduces the risk that an ethics audit becomes performative?

A. Restricting evidence to organizational policy documents

B. Using independent review, stakeholder evidence, and follow-up verification

C. Measuring only the number of employees trained

D. Avoiding documentation of unresolved uncertainty

Correct Answer: B. Using independent review, stakeholder evidence, and follow-up verification

Question 4

A project team invites communities to comment after all major design decisions have been finalized. Which responsible-innovation dimension is most compromised?

A. Inclusion

B. Prediction

C. Automation

D. Retirement

Correct Answer: A. Inclusion

Question 5

Why should AI governance distinguish between a recommendation and a diagnosis in the student-support case?

A. Recommendations never require human review.

B. A diagnosis is always legally prohibited.

C. Treating a probabilistic indicator as a definitive judgment can cause unjustified interventions.

D. Recommendations cannot be evaluated for accuracy.

Correct Answer: C. Treating a probabilistic indicator as a definitive judgment can cause unjustified interventions.

Question 6

Which example best demonstrates meaningful human oversight?

A. A staff member formally approves every automated output without reviewing it.

B. A manager can understand, question, override, and investigate an automated recommendation.

C. A vendor retains exclusive authority to change the model.

D. A system displays a human-readable interface but provides no appeal route.

Correct Answer: B. A manager can understand, question, override, and investigate an automated recommendation.

Question 7

What is the central purpose of horizon scanning?

A. To guarantee accurate predictions of future events

B. To identify emerging signals, uncertainties, and issues requiring strategic attention

C. To replace stakeholder engagement with expert judgment

D. To ensure that all new technologies are adopted quickly

Correct Answer: B. To identify emerging signals, uncertainties, and issues requiring strategic attention

Question 8

Which decision best reflects the principle of reversibility?

A. Deploying a high-impact system universally before monitoring begins

B. Using a limited pilot with suspension criteria and a defined review date

C. Avoiding documentation because a system may later be discontinued

D. Allowing a vendor to determine when the system should be retired

Correct Answer: B. Using a limited pilot with suspension criteria and a defined review date

Question 9

Why can ESG reporting fail to provide adequate ethical assurance?

A. ESG has no relationship to organizational governance.

B. Quantitative indicators can conceal power relations, discrimination, or poorly distributed impacts.

C. Environmental issues are unrelated to digital infrastructure.

D. Stakeholders cannot contribute to ESG assessment.

Correct Answer: B. Quantitative indicators can conceal power relations, discrimination, or poorly distributed impacts.

Question 10

An organization rewards publication speed while discouraging disclosure of negative findings. What does this most directly illustrate?

A. Alignment between espoused and enacted values

B. A mature anticipatory culture

C. A conflict between performance incentives and research integrity

D. Successful stakeholder inclusion

Correct Answer: C. A conflict between performance incentives and research integrity

Research Ethics & Computer Applications
Chapter 14 of 14