Ethics, Professionalism, and Governance: Case Study on Data Breach

This report presents an analysis of a case study where Maureen, an employee in a government department dealing with drug and alcohol abuse, misplaces a USB drive containing sensitive client data. The report applies the ACS Code of Ethics and Professional Conduct, along with Thomas White's ethical framework, to evaluate Maureen's actions. It considers the potential consequences, identifies stakeholders who would be benefited or harmed, and recommends that Maureen report the incident to her superiors and take measures to secure the data. The report emphasizes the importance of prioritizing public interest and maintaining ethical standards in handling confidential information, concluding that transparency and proactive measures are crucial in mitigating the risks associated with the data breach.

Ethics,
Professionalism
and
Governance
Running Head: BUSINESS LAW ASSIGNMENT 0
2 / 1 5 / 2 0 1 9
Student’s Name

Ethics, Professionalism and Governance
1
Contents
Introduction.................................................................................................................................. 2
ACS Code of Ethics 2
ACS Code of Professional Conduct: 5 Clauses 3
Applicable Legislation 4
Ethical Framework- Thomas White’s framework..........................................................................5
Who will be benefited? 5
Who will hurt? 5
Analyze The Actions....................................................................................................................6
Decision....................................................................................................................................... 6
Recommendations....................................................................................................................... 6

Ethics, Professionalism and Governance
2
Introduction
Ethics can be understood as basic values and morals, which governs the behavior of a person
(Bbc.co.uk, 2019). Ethics reflects positive values. Every person needs to follow ethical
principles, but when it comes to the professionals, it becomes more necessary. Informational
technology professionals are people who have an influence on the lives of many people. In such
a manner, to regulate the behavior of these professionals, the Australian Computer Society is
there. This institute provides certain codes on ethics and behavior of the professionals and
ensures that all the professionals perform their duties ethically.
In the presented report, the discussion will be focused on one of the case studies whereby a
person named Maureen forgot the official USB at home. Code of ethics and professional
conduct, which are applicable to this case study are mentioned below:-
ACS Code of Ethics
In the given case study, the ethical dilemma for Maureen is to deal with the situation where she
forgot the place where she kept the USB that consisted of most important and crucial data
related to her job. In order to make the ethical decision, Maureen needs to follow some key
values, which includes public interest, quality of life, and competence. These values are
discussed hereunder in detail.
The Primacy of the Public Interest: - According to the code of ethics provided by ACS,
the member of ACS needs to consider the interest of public over and above personal,
private, and sectional interest (Merkel and Burmeister, 2015). In addition to this the code
states that whenever there is a conflict, the matter has to be resolved giving the public
interest priority. In the given case, the subjective USB had a huge amount of crucial and
private information of people. Maureen was required to be extra careful about this. As
now she lost the USB, she should not hide this from seniors as she is working in a
government department and interest of the public at large is in doubt.
The Enhancement of Quality of Life: - ACS Code of ethics says that information and
communications technology is an industry that affects the lives of many people and can
do the same in a negative manner if a due and proper care is missing (Acs.org.au,
2014). By adopting the ethical approach, such negatives impacts can be minimized.
Considering the situation of Maureen, this is to state that the action performed by her
can have a huge impact on the lives of many. She, therefore, is required to understand
the perception of those people who can be affected by her negligence and should try to
enhance their quality of life. Maureen is required to take all the necessary measures to
find the USB and to prevent the unauthorized use of the same.
Competence:- According to this code of ethics, an ACS member is required to act
diligently and competently in favor of stakeholders. In the given case, people, data of
that was saved in the USB were the stakeholders. Their information such as details of
programme attendant by them, length of their treatment and clinic records saved in the
USB. If Maureen will not take the required steps to ensure the security of this data, the

Ethics, Professionalism and Governance
3
same can prove a breach of their personal information. Maureen’s relative can access
the USB and can use the information to defame the people named in the records.
ACS Code of Professional Conduct: 5 Clauses
ACS provides certain Code of Professional Conduct, which contains many clauses. Five out of
many clauses are stated as below which are most relevant for the provided case study:-
1. The Primacy of the Public Interest
(d) Esteem the intellectual property such as goodwill of other people.
(g) Attempt to preserve the privacy as well as the confidentiality of other’s information
As stated above Maureen is required to take the necessary steps to prevent the unauthorized
access to USB and now she should save the goodwill of subjective people.
2. Quality of Life:-
(c) Understand and pay proper respect to the perception of people who are affected by the
work. As stated above, Maureen needs to understand the perception of all the subjective
client in order to avoid the breach of the ACS Code of Professional Conduct.
3. Competence
(d) Respect and protect your stakeholders' proprietary interests;
According to the above clause, Maureen is required to prevent the information of clients
coming out in any mode as the same is confidential information.
Applicable Legislation
Section 2 of the Australian Public Service Commission states that every public officer and
employees should act in an ethical and accountable manner (Apsc.gov.au, 2019).
Ethical Framework- Thomas White’s framework
To take an ethical decision and resolve the ethical dilemma in the given case, Maureen needs
to consider the ethical framework provided by Thomas White (2018). According to this
framework, certain steps are required to be taken upon in cases of ethical dilemmas, which are
stated hereunder:-
1. Consideration of consequences: - According to the subjective framework, consequences
are required to be a review (Pdfs.semanticscholar.org, 2019). Here in the given case,
Maureen is required to check the consequences of her action on each of the parties
involved in the subjective circumstances. In order to check the consequences, Maureen
should think of the following:-
Who will be benefited?
If any of the people would have access to that USB, the same will be benefited
as the USB contains data of alcohol use of many people. One can use such data
to defame the others and in this manner, such a person will be benefited.

Ethics, Professionalism and Governance
4
Who will hurt?
First of all the clients would have hurt, as their reputation will be diminished. In
addition to this, their health-related confidential information can also be public
that can hurt them socially and economically.
Secondly, the department for which she is working will also be hurt as people
public would lose trust on the same.
At third, she herself can be hurt as her job will be in danger.
Analyze The Actions
After considering the consequences, Maureen is required to check the options available with her
in relation to the above mentioned ethical values and clauses. She can hide the whole incident
or can inform the same to the seniors of the organization. If she would share the incident, there
are chances that the unauthorized use of USB can be prevented but if she would hide the same,
she can save her job until the issue would not come in the eyes of management. However, in
hiding the incident, she will breach the moral principle, which she is required to perform.
Decision
According to the applicability of the studied framework on Maureen’s situation, it is beneficial for
her to inform the incident to the seniors of the organization instead of being worried about the
security of her job.
Recommendations
As the idol decision has been decided above, now the issue is to check the procedure and
reporting structure, which is required to be adopted by Maureen. The same is mentioned as
below:-
Based on the code of ethics, code of professional conduct and Australian Public Service
Commission, Maureen should act like an accountable person and should inform the
issue to the immediate senior or ethical committee of the organization (if any)
In addition to this, she should take the best measure to get the USB.
She should help the organization to develop advanced security to the server so that no
one can extract the data out of the same.

Ethics, Professionalism and Governance
5
References
ACS Code of Ethics
ACS Code of Professional Conduct
Acs.org.au. (2014) ACS Code of Professional Conduct Professional Standards Board Australian
Computer Society. [online] Available from: https://www.acs.org.au/content/dam/acs/rules-and-
regulations/Code-of-Professional-Conduct_v2.1.pdf [Accessed on 15/02/2019]
Apsc.gov.au. (2019) Go to top of page Section 2: Relationship with the public. [online] Available
from: https://www.apsc.gov.au/section-2-relationship-public [Accessed on 15/02/2019]
Bbc.co.uk. (2019). What is ethics? [online] Available from:
http://www.bbc.co.uk/ethics/introduction/intro_1.shtml [Accessed on 15/02/2019]
Merkel, R., and Burmeister, O. (2015) A code of ethics in IT: just lip service or something with
bite? [online] Available from: https://theconversation.com/a-code-of-ethics-in-it-just-lip-service-
or-something-with-bite-32807 [Accessed on 15/02/2019]
Pdfs.semanticscholar.org. (2019) Resolving an Ethical Dilemma. [online] Available from:
https://pdfs.semanticscholar.org/3d73/625476a04f787f3f056af333d368b50a6343.pdf [Accessed
on 15/02/2019]
White, T. (2018) Resolving an Ethical Dilemma. [online] Available from:
https://pdfs.semanticscholar.org/3d73/625476a04f787f3f056af333d368b50a6343.pdf [Accessed
08/05/18]