1. The Core Idea
Legal and ethical issues in computing are about using technology and data in ways that follow
laws (enforced by courts) and morals/ethics (enforced by society and conscience).
Main areas: privacy, cybersecurity, intellectual property, and responsible AI.
2. Law vs. Ethics vs. Morals
| Law | Morals / Ethics |
|---|
| Enforced by | Courts and the state | Society and conscience |
| Breaking it means | Penalty (fine, prison) | Disapproval, no court case |
| Example | Stealing, killing, breach of contract | Kissing in public, eating while walking |
- Ethics: rules of right and wrong. Common principles: respect, honesty, responsibility, fairness, compassion, integrity, accountability, open-mindedness, civility.
- Three categories: Professional (employer/profession), Social (society), Personal (family and heritage).
- Moral dilemmas: conflicting principles, e.g. truth vs. protecting feelings, individual rights vs. public good.
3. Types and Classification of Law
| Classification | Meaning |
|---|
| Criminal law | Crimes = public wrongs. The state sues the offender on behalf of society. |
| Civil (private) law | Disputes between individuals or companies (contracts, sale of goods). |
| Public vs. Private | Public: government and society (constitutional, administrative). Private: relationships between individuals. |
| Substantive vs. Procedural | Substantive defines rights and duties. Procedural is how to enforce them. |
| National vs. International | Rules within a country vs. relations between countries. |
| Constitutional law | Supreme law. Structure of government (executive, legislature, judiciary) and citizens' basic rights. |
Why we need law: regulate behaviour, protect rights, set rules for trade, maintain order, deliver justice and peace.
4. Key Topics in Computing Law and Ethics
Privacy and Data Protection
- Laws: GDPR (EU), CCPA (California), HIPAA (US health data), Rwanda Data Protection Office.
- Privacy types: personal information, communication, bodily, territorial, informational.
- Key aspects: collection, usage, storage, sharing, consent (must be informed), transparency, access and control (right to be forgotten), security, accountability.
- Measures: encryption, secure authentication, anonymization.
Intellectual Property (IP)
| Type | Protects |
|---|
| Copyright | Original works: software code, music, literature, art |
| Patents | Inventions (exclusive rights to the inventor) |
| Trademarks | Brand names, logos, slogans |
| Fair use | Limited use of copyrighted material without permission |
Other Areas
- Cybersecurity: defending systems, networks and data. Covers ethical hacking, malware/phishing, and data breach duties (notification, mitigation).
- Cyber law: cybercrime, e-contracts (legally binding electronic agreements), jurisdiction (hard because the internet is global).
- AI and automation: bias and fairness, transparency, job displacement.
- Digital divide: unequal access to internet/ICT. Fixes: equity of access, accessible design.
- Net neutrality: ISPs must treat all data equally.
- Social media: harassment, bullying, misinformation and fake news.
5. Cybercrime and Computer Crime
- Cybercrime: crimes using computers and the internet (hacking, phishing, malware, online fraud).
- Phishing: tricking someone into giving sensitive data by posing as a legitimate business.
- Computer crime: broader. The computer is the target, the tool, or the repository of evidence (piracy, fraud, privacy violations, email abuse).
| Penetration attack | Denial of Service (DoS/DDoS) |
|---|
| How | Break in using known vulnerabilities | Overwhelm the system so it cannot function |
| Effect | Alter data, plant viruses/Trojans, use victim as launchpad | Does not alter or destroy resources |
| Sources | Insiders and hackers | Distributed attackers |
Prevention strategies
- Encrypt confidential data
- Access control software
- Audit trails in applications
- Data backups
- Anti-virus protection
- Strong physical locks
- Moral education
- Enforce and pass computer crime laws
6. Network Infrastructure and Standards
- Network infrastructure: hardware and software enabling communication between devices, apps, users and the internet.
- A switch connects devices. A router connects switches and networks.
- Standards: ISO/IEC 27001 and NIST guide firewalls, encryption and access controls to protect confidentiality and integrity.
7. Cybersquatting and Domain Names
Cybersquatting: registering a domain matching someone else's trademark, in bad faith, to profit from it.
| Type | Example |
|---|
| Brand squatting | Registering a popular brand's name as a domain and selling it to the owner |
| Typo squatting | "goolge.com" instead of "google.com" |
| Celebrity squatting | Registering a famous person's name to resell at a high price |
- Key features: bad faith intent, confusing similarity, illegality.
- Remedies: lawsuit under the ACPA (US); complaint under ICANN's UDRP; register trademarks and domains early; monitor new registrations.
- Domain name: human-readable address. DNS translates it to an IP address. Good names are relevant, short, simple, with no numbers or hyphens, and trademark-safe.
8. Professionalism and Codes of Ethics
Four pillars of professionalism
- Commitment — giving time and energy to what you believe in
- Integrity — honesty, incorruptibility
- Responsibility — roles, tasks and their consequences
- Accountability — answering for how you carried out your responsibilities
Three requirements of a professional
- Highly developed skills and deep knowledge of the domain.
- Autonomy — power in the relationship favours the professional (lawyer/client, doctor/patient).
- Observance of a code of conduct.
Four codes a professional follows
| Code | Source |
|---|
| Professional | Set by the profession; protects its image |
| Personal | Own morals from upbringing, culture, religion |
| Community | Local culture or religion; may be imposed by civil law |
| Institutional | Set by the employer; builds public confidence |
More to remember
- Objectives of ethical codes: Disciplinary, Advisory, Educational, Inspirational, Publicity.
- Professional bodies: ACM and IEEE.
- Conflict of interest: using a position for personal gain (representing a relative in court, hiring an unqualified friend, advising investment in your spouse's company).
- Harassment: creating a hostile or abusive environment. Discrimination: decisions that negatively affect someone based on traits like race, religion or sex.
- Whistleblowing: reporting illegal or unethical practices inside an organization.
9. Ethical Hacking
| # | Issue | Meaning |
|---|
| 1 | Legal compliance | Get proper authorization before testing |
| 2 | Client confidentiality | Do not misuse or share information found |
| 3 | Scope creep | Stay within the agreed scope of work |
| 4 | Disclosure | Report vulnerabilities promptly and responsibly |
| 5 | Conflict of interest | Avoid personal interests clashing with duties |
10. Policies and Accountability
- Acceptable Use Policy (AUP): rules for how technology may be used; covers acceptable behaviour, prohibited activities, consequences.
- Organizational policy: broader company rules on data security, system access, software and internet use.
- Accountability: being answerable for your actions through transparent processes, clear roles, documentation, and legal compliance.
- Virtual organizations: operate digitally with remote staff; need strong cybersecurity and collaboration tools.
11. Case Study Answers
Data breach caused by weak security: company's responsibilities
- Legal: notify affected people, compensate them, comply with data protection laws (e.g. GDPR).
- Ethical: be transparent, take accountability, rebuild customer trust.
Ethical hacker accesses customer data without permission
- This breaches authorization and scope rules.
- Prevent with: signed authorization/contract, clearly defined scope, NDA, monitoring and audit logs, following a code of ethics.
E-commerce company suffers a massive data breach
- Contain the breach, notify customers and regulators, compensate, fix the weaknesses, audit, and train staff.
12. Related Careers
Cybersecurity Analyst, IT Compliance Officer, Ethical Hacker / Penetration Tester, Data Privacy Officer,
IT Auditor, IT Law Consultant, Information Security Manager, Digital Forensics Analyst, IT Policy Analyst,
AI Ethics Consultant.
Study Tips
- Compare pairs: law vs. morals, criminal vs. civil, DoS vs. penetration, cybercrime vs. computer crime.
- Memorize lists: four pillars, four codes, five code objectives, five ethical hacking issues.
- Case studies: structure answers as legal responsibilities, then ethical responsibilities.