Privacy And Ethics Flashcards
Information that can be traced back to the individual - directly or indirectly through use of other information
-ex. Name, pictures, SSN, address, cell phone number, etc.
Private information
Informed consent and permission to collect and use identifying information
Privacy
Privacy vs. security
Privacy is about informed consent and permission to collect and use identifying information, while security is about safekeeping of the collected data
The right of individuals to be informed when their personal data is being collected and about how their data is or will be used
Notice
The ability of individuals to be informed of and oppose function creep whether within one firm or across firms who share information
Choice
The ability of individuals to control the terms and conditions under which their personal information is collected, managed, and utilized
Information privacy
The right of individuals to access their information
The right of individuals to correct any errors
Access
The responsibility of the firm to ensure private info safekeeping and to protect it from unauthorized access
Security
The responsibility of the organizations that collect and use private information to develop enforceable procedures to ensure that the above principles are upheld
Enforcement
Occurs when data collected for a stated or implied purpose (for which users gave consent) is reused for other unrelated objectives without the user consent
-pressure from competition contributes to this
Function creep
Principles on which judgements of “right or wrong” are based
Morals
Privacy
Informed consent and permission to collect and use identifying information
Access
The right of individuals to access their information
The right of individuals to correct any errors
Notice
The right of individuals to be informed when their personal data is being collected and about how their data is or will be used
Security
The responsibility of the firm to ensure private info safekeeping and to protect it from unauthorized access
Enforcement
The responsibility of the organizations that collect and use private information to develop enforceable procedures to ensure that the above principles are upheld
Information privacy
The ability of individuals to control the terms and conditions under which their personal information is collected, managed, and utilized
Function creep
Occurs when data collected for a stated or implied purpose (for which users gave consent) is reused for other unrelated objectives without the user consent
-pressure from competition contributes to this
Choice
The ability of individuals to be informed of and oppose function creep whether within one firm or across firms who share information
Two examples of function creeps
Eckerd drugstore chain - sending unsolicited promotions based on past prescriptions
Google gmail - analyzing content
Private information
Information that can be traced back to the individual - directly or indirectly through use of other information
-ex. Name, pictures, SSN, address, cell phone number, etc.
Principles of “right conduct”
Shared principles promoting “fairness” in social and business interactions
Ethics
Why is ethical behavior essential in business?
Probability of being caught for and consequences for behavior found to be unethical have increased
Adhering to the ethical standards of the community one operates in helps:
-gain goodwill in that community, avoid legal difficulties for the organization and its employees, avoid unfavorable publicity, promote consistent operations, foster good business practices
4 common ethical dilemmas
Truth vs. loyalty
Individual vs. community
Short term vs. long term
Justice vs. mercy
Ends-based thinking (utilitarian)
“Maximize benefit for the most”
Rule-based thinking (categorical imperative)
Would you apply this rule to everyone?
Care-based thinking (Golden Rule)
“Do unto others…”
Propagation of errors
Difficult to correct once errors spread
Who is will be held accountable for the damage done by incorrectly gathered, entered, or analyzed information?
“Propensity profiles”
Combining information from different sources to predict behavior
- targeted marketing
- police can profile people for investigation who show no signs of having committed any crime
Breach notification
What obligations does an organization have to notify stakeholders that their data might have been revealed? Depend on anything? Legal obligations (HIPAA)
5 components of Ethisphere’s EQ score
Ethics and compliance program Corporate citizenship and responsibility Culture of ethics Governance Leadership, innovation, and reputation
Ethics and compliance program Corporate citizenship and responsibility Culture of ethics Governance Leadership, innovation, and reputation
Components of ethisphere’s EQ score
Structure, responsibility, and resources Oversight and tone at the top Written standards Training and communication Due care Detection, monitoring and auditing Enforcement and discipline
Ethics and compliance program
Environmental stewardship Community involvement Corporate philanthropy Workplace impact and well-being Supply chain engagement and oversight The quality and effectiveness of the initiatives are considered in addition to stated and measurable goals, accountability and transparency.
Corporate citizenship and responsibility
Efforts to establish an ethical tone from the top and middle
Frequency with which culture is evaluated
Methods and outcomes associated with measuring a this
Culture of ethics
Availability and quality of systems designed to ensure strong corporate governance including oversight, governance principles and risk management
These criteria are modified as needed and as appropriate when reviewing private companies, partnerships, educational institutes and non-profits.
Governance
Measures the legal compliance and ethical track record, along with the company’s ethical reputation in the marketplace with key stakeholders such as employees and customers
Awards and accolades are taken into account but specific examples of leadership locally, nationally, and globally are also examined
Leadership, innovation, and reputation
Morals
Principles on which judgements of “right or wrong” are based
Ethics
Principles of “right conduct”
Shared principles promoting “fairness” in social and business interactions
Ethics and compliance program
Structure, responsibility, and resources Oversight and tone at the top Written standards Training and communication Due care Detection, monitoring and auditing Enforcement and discipline
Corporate citizenship and responsibility
Environmental stewardship Community involvement Corporate philanthropy Workplace impact and well-being Supply chain engagement and oversight The quality and effectiveness of the initiatives are considered in addition to stated and measurable goals, accountability and transparency.
Leadership, innovation, and reputation
Measures the legal compliance and ethical track record, along with the company’s ethical reputation in the marketplace with key stakeholders such as employees and customers
Awards and accolades are taken into account but specific examples of leadership locally, nationally, and globally are also examined
Culture of ethics
Efforts to establish an ethical tone from the top and middle
Frequency with which culture is evaluated
Methods and outcomes associated with measuring a this
Governance
Availability and quality of systems designed to ensure strong corporate governance including oversight, governance principles and risk management
Governance criteria are modified as needed and as appropriate when reviewing private companies, partnerships, educational institutes and non-profits.