ACM Code of Ethics and Professional Responsibility

In relation to Example 1:

Consider: Before releasing the code, Andre and the team need to consider the impact on relevant stakeholders, particularly individuals whose records are contained in the data sets. When data sets are linked, re-identification of individuals is a common risk, which could lead to harm. Andre would need to evaluate the merged data according to established anonymization metrics. Even more problematic, Andre would need to consider how the merged data sets could be linked with other unknown data collections to break the existing anonymity.

Analyze: Andres team had a moral (and almost certainly a legal) responsibility to protect the human subjects of their research. Although they worked with their ERB as part of this process, making the tool publicly availableeven while keeping the existing data privateintroduces unpredictable risks of data re-identification. Individuals who opt into such data sets could not be expected to anticipate the risk of using their data in this way.

Review: Prior to releasing the source code in any way, Quinns team should consult with their ERB regarding the risks. It is possible that the ERB members lack the technical expertise to determine that releasing the code is tantamount to releasing the merged data. Additionally, Quinn should consider alternative ways to do such peer review, such as making the code available only on request and under restricted terms.

Determine the principles that apply on the picture below

The actual principles have been removed so that you can determine these on your own. Please use the numbers in parentheses to list your answers. Principle (1)__warns against the harms that can be caused by data aggregation; Principle (2___ re-emphasizes this point by stressing that merging data can strip privacy guarantees in the original sets. This principle also suggests that the inaccuracies introduced by the bug must be fixed, and subjects must be adequately informed of the risks. In addition, the tool may facilitate the collection of data (such as metadata associated with the social networking activity) beyond the minimum amount necessary. Principle (3]____ also declares that the team must consider possible future risks associated with this tool and data use. In addition, Principles (4)_ and (5) obligate transparent communication with stakeholders, which would obligate informing both the ERB and all subjects of these risks. As such, publicly releasing the source code for this tool could cause harm and would be inadvisable. The use of social networking posts also raises concerns in regard to Principle (6) ___. Although these posts were publicly accessible, Andre's team had no reasonable belief that using the data in this way was authorized. Some individuals' posts may have been made public because they did not understand the system's privacy controls. Even those who knowingly made their posts public would not have considered that these posts would be linked to genetic records. Andre's attempt to seek peer review is consistent with the intent of Principles (7) __and (8) ___. In recognizing the potential for bugs in the tool, Andre sought input from other computing professionals; however, given the risks involved, a more discreet form that did not involve a completely public release would have been recommended. It is not clear whether Andre had sufficient training in data anonymization techniques; if not the guidance of Principle (9 ___ suggests that Andre should not have developed the tool without acquiring these technical competencies