MIS Chapter 3

Platform for Privacy Preferences (P3P)

A protocol that automatically communicates privacy policies between an electronic commerce Web site and visitors to that site. P3P enables visitors to determine the types of personal data that can be extracted by the sites they visit.

Privacy Policies/Privacy Codes

An organization's guidelines for protecting the privacy of its customers, clients, and employees.

Code of Ethics

Collection of principles intended to guide decision making by members of the organization

Data Aggregators

Companies that collect public data such as real estate records and published telephone numbers, in addition to nonpublic information such as Social Security numbers; financial data; and police, criminal, and motor vehicle records.

If you combine four standards you create....

Framework for Ethical Decision Making

Common Good Approach

Highlights the interlocking relationships that underlie all societies. This approach argues that respect and compassion for all others is the basis for ethical actions.

What is unethical is not necessarily _______.

Illegal

Privacy Issues

Involve collecting, storing, and disseminating information about individuals.

Accuracy Issues

Involve the authenticity, fidelity, and correctness of information that is collected and processed.

Property Issues

Involve the ownership and value of information.

The European Community Commission (ECC) of 1998

Issued guidelines to all of its member countries regarding the rights of individuals to access information about themselves. The EU data protection laws are stricter than the U.S. laws and therefore could create problems for the U.S.-based multinational corporations, which could face lawsuits for privacy violations.

Data Aggregators Examples

LexisNexis, ChoicePoint, Acxiom

Rights Approach

Maintains that an ethical action is the one that best protects and respects the moral rights of the affected parties.

Opt-Out Model of Informed Consent

Permits the company to collect personal information until the customer specifically requests that the data not be collected.

Fairness Approach

Posits that ethical actions treat all human beings equally, or, if unequally, then fairly, based on some defensible standard.

General Categories of Ethical Issues Related to IT

Privacy Issues Accuracy Issues Property Issues Accessibility Issues

Opt-In Model of Informed Consent

Privacy advocates prefer this model, which prohibits an organization from collecting any personal information unless the customer specifically authorizes it.

Five Steps in Ethical Decision Making

Recognize an ethical issue Get the facts Evaluate alternative actions Make a Decisions and Test It Act and Reflect on the Outcome of Decisions

Fundamental Tenets of Ethics (3)

Responsibility Accountability Liability

Accessibility Issues

Revolve around who should have access to information and whether a fee should be paid for this access.

Utilitarian Approach

States that an ethical action is the one that provides the most good or does the least harm.

Safe Harbor

The U.S. Department of Commerce, in consultation with the European Union, developed a "safe harbor" framework to regulate the way that the U.S. companies export and handle the personal data (e.g., names and addresses) of European citizens.

Ethics

The principles of right and wrong that individuals use to make choices that guide their behavior.

Profiling

The process of forming a digital dossier.

Privacy

The right to be left alone and to be free of unreasonable personal intrusions.

Information Privacy

The right to determine when, and to what extent, information about you can be gathered and/or communicated to others.

Electronic Surveillance

Using technology to monitor individuals as they go about their daily routines. Is conducted by employers, governments, and other institutions. Examples: Surveillance cameras in airports, subways, banks, and other public venues.

Four Widely Used Standards

Utilitarian Approach Rights Approach Fairness Approach Common Good Approach

Digital Dossier

data integrated from data gathered about you in a typical day