Case Study : Engineering Ethics

Case study: Smart homes for older people with disabilities


Case Study

1. Activity: Technical analysis – Before the ethical questions can be considered, the students might consider a number of immediate technical questions that will help inform the discussion on ethical issues. A sample data set or similar technical problem could be used for this analysis. For example:

    • Is it possible to ascertain whether a breach has actually happened and data has been accessed?
  • A thorough investigation should take place to determine whether a breach had occurred. There should be an analysis taken of the system logs, the network trafficking and other data records.
    • What data may have been compromised?
  • It can include personal details such as financial, health records, video and audio records.
    • Is a breach of this kind preventable, and could it be better prevented in the future?
  • This could be preventable if there were measures in place for any vulnerabilities. The improvement of safeguarding data and privacy can be done with stronger / lengthy encryptions, regular security audits and patch / update of software and firmware.
    • Has the security been subject to a hack or is the data not secure?
  • Determining whether the breach resulted from deliberate hacking or inherent security flaws is essential for ethical assessment. Regardless of the cause, there's an ethical duty to promptly rectify security vulnerabilities and implement robust measures to prevent unauthorised access to residents' data.
    • Has the problem now been rectified, and all data secured?
  • Engineers must prioritise restoring system integrity and implementing necessary security measures to prevent further unauthorised access. Transparent communication with stakeholders regarding actions taken is essential for maintaining trust and accountability.

2. Activity: Identify legal and ethical issues. The students should reflect on what might be the immediate ethical concerns of this situation. This could be done in small groups or a larger classroom discussion.

Possible prompts:

    • Is there a risk that the breach comprised the residents’ personal details, financial information or even allowed remote and secret control of cameras? What else could have been compromised and what are the risks of these compromises? Are certain types of data more risky when breached than others? Why?
  • There is a significant risk that the breach may have compromised residents' personal details, financial information, and even granted unauthorised access to surveillance cameras, posing severe privacy and security concerns. Personal and financial data breaches can lead to identity theft, financial fraud, and invasion of privacy. Video and audio recordings being accessed without consent can infringe upon residents' autonomy and dignity, exacerbating the ethical implications.
    • What are the legal implications if there has been a breach? Do you, as a software engineer, have any duty to the residents at this point?
  • Legal implications may include violations of data protection regulations, potential lawsuits, and regulatory fines. As a software engineer responsible for the integrity of the system, there is an ethical duty to prioritize the well-being and rights of the residents. This includes promptly addressing the breach, mitigating harm, and complying with legal obligations regarding data protection and privacy.
    • At the stage where the breach and its potential implications are unknown, should you tell the community and, if so, what should you say? Some residents aren’t always able to understand the technology or how it works, so they may be unlikely to recognise the implications of situations like this. Should you worry that it might cause them distress or create distrust in the integrity of the whole system if the possible data breach is revealed?
  • Transparency is essential in decision-making, but it must be balanced with the potential impact on the community. While residents deserve to be informed about potential risks to their privacy and security, communication should be tailored to their level of understanding. It is crucial to provide clear and accurate information about the situation, potential risks, and steps being taken to address the breach. However, engineers should be mindful of causing unnecessary distress or undermining trust in the system, particularly among residents who may not fully grasp the technical complexities involved.
    • At the stage where the breach and its potential implications are unknown, is there anyone else you should inform? What should you tell them? Are there any risks you may be able to mitigate immediately? How?
  • Apart from the residents, relevant stakeholders such as regulatory authorities, data protection agencies, and the organisation overseeing the smart home community should be informed about the potential breach. Prompt notification allows for coordinated efforts to investigate the breach, mitigate risks, and implement necessary safeguards.It may include temporarily disabling affected smart appliances, enhancing network security measures, and conducting forensic analysis to identify the extent of the breach.
    • Who owns the data collected on a person living in a smart home? What should happen to it after that person dies?
  • While the data may be generated by residents' interactions with smart devices, it is typically stored and managed by the entity providing the smart home services. There should be clear policies and agreements outlining data ownership, usage, and retention periods, with residents retaining control over their personal information. After a resident's death, considerations include respecting their privacy preferences and ensuring secure deletion or anonymisation of their data in compliance with applicable regulations and contractual obligations.



Comments

Popular posts from this blog

Multi-Sensor Health Monitor - Arduino Project

Copywriting using pixels

MIDI Instrument