UPI Study › Courses › Ethics in Technology › Free lessons › Lesson 15.5 Free with a free account
Where Legal Compliance Ends and Genuine Ethical Responsibility Begins
Ethics in Technology · Chapter 15: Doing the Right Thing: Ethics, Media Responsibility, and Digital CitizenshipSection 15.5 · lesson 104 of 11615 min · free with a free account
Free preview
Create a free account to keep watching
It takes a minute and costs nothing. Your free account unlocks all of Chapter 1 and 3 more lessons of Ethics in Technology.
Lesson complete
Earn the 3 college credits for Ethics in Technology
Enrolling adds a quiz after each lesson, the graded work and the official transcript. Recommended for credit by NCCRS.
Next lesson: Creating Systems and Cultures That Encourage Employees to Behave Ethically →← Why Organizations Need Clear Distinctions Between Ethics, Morals, and Business ValuesNext lesson: Creating Systems and Cultures That Encourage Employees to Behave Ethically →
In this lesson
The legal-ethical matrix and the difference between compliance and integrity.
- Explain why legality and ethics are separate questions
- Classify actions on both dimensions of the legal-ethical matrix
- Compare compliance and integrity approaches
- Evaluate the 3 technology examples, with legal status assessed in context
Free study notes
Get this lesson's notes by email
The key points and 4 practice questions with answers, in your inbox. One email, free.
One email. Unsubscribe in one click.
Transcript
Everything said in the video, section by section (1,956 words). Read along, or search it.
Doing the Right Thing: Ethics, Media Responsibility, and Digital Citizenship
Where Legal Compliance Ends
Is an action legal? Is it right? These are related but different questions. This lesson explains why answering the first, does not automatically answer the second. Begin by identifying legal compliance, alongside the broader question of ethical responsibility. Then use a matrix, which classifies an action on two independent dimensions. One dimension concerns legality; the other concerns whether the action is ethically justified. The next objective compares organizational approaches, called compliance and integrity in this reading. The contrast asks whether legal requirements are the finish line, or a starting point. Finally, examine three technology patterns: difficult cancellation, dense privacy notices, and unnecessary data collection. Each creates ethical questions, about how an organization treats the users affected by its decisions. Their legality depends on applicable rules and facts. None is automatically legal everywhere. Keep both questions open, until the evidence and reasons for the judgment have been examined.
2 Questions
Legal Permission Does Not Settle Ethical Responsibility
Legal compliance means meeting applicable requirements, which a legal system is prepared to enforce. The source calls these requirements a floor, for organizational conduct rather than a complete ethical standard. Ethical responsibility asks what conduct is right, including obligations beyond bare legal permission. Punishment is therefore not the only reason, an organization might reject a harmful course of action. The two evaluations often agree. Agreement in many cases does not make them identical. Technology can expose a gap, when new capabilities develop before specific rules address their consequences. Collecting, combining, and analyzing personal data illustrate capabilities, whose effects may require independent ethical judgment. A missing technology-specific rule does not mean there are no applicable laws at all. Existing general rules may still address deception, personal information, or other conduct using the new capability. Establish legal requirements, and consider the right treatment of affected people. Neither an assumed legal gap nor a successful compliance check, supplies the whole ethical answer.
The Legal-Ethical Matrix
Evaluate Legality and Ethics on Independent Dimensions
The legal-ethical matrix separates two dimensions, instead of placing conduct on a single good-or-bad scale. Its rows distinguish legal from illegal conduct; its columns distinguish ethical from unethical conduct. The first category is legal and ethical, where both evaluations support the action. The second is legal and unethical, where legal permission coexists with an adverse ethical judgment. The third is illegal and ethical, where the conduct violates law but an ethical argument supports it. The fourth is illegal and unethical, where both evaluations count against the action. The disagreement categories show why substitution is misleading. Neither dimension can simply replace the other. This lesson emphasizes legal and unethical conduct, because it exposes the limits of minimum-only compliance. Calling an action illegal and ethical does not grant permission, or remove its possible legal consequences. The ethical judgment also needs reasons. A favorable label is not evidence by itself. Use the matrix to display a justified assessment, rather than treating its labels as automatic conclusions.
Read the 4 Cases
The Matrix Makes Differences Visible; It Does Not Prove Them
The source figure illustrates the four categories, with examples involving information and technology. For legal and ethical conduct, consider an appropriate response to a valid data-deletion request. The example assumes applicable law and good practice support that response, in the particular circumstances. For legal and unethical conduct, consider unnecessary collection, if applicable law actually permits it. For illegal and ethical conduct, the figure presents a security researcher disclosing a flaw to protect users. Its classification assumes an access law prohibits the conduct, but an ethical assessment finds it justified. That assumption needs examination; intending to protect people does not settle every disclosure's ethical status. The last example is stealing customer data, then selling it for personal profit. It represents conduct assessed as both illegal and unethical, rather than a conflict between the dimensions. These examples demonstrate the categories, without replacing the legal facts or ethical reasoning needed in practice. Always explain the conditions behind a placement, especially when the two evaluations diverge.
2 Organizational Approaches
Compliance Asks What Is Required; Integrity Asks What Is Right
A compliance approach asks what the organization is required to do, and focuses on meeting those requirements. In the reading's simplified contrast, the legal standard defines the minimum the organization tries to meet. Avoiding penalties, fines, and legal liability provides the typical motivation, for this approach. An integrity approach asks what is right, and considers the organization's chosen values and commitments. Its motivation includes maintaining trust, and acting consistently with the standard the organization says it holds. Those chosen standards can exceed what the law requires, rather than merely repeating legal requirements. In a gray area, a minimum-only test proceeds if the conduct is legally permitted. Integrity adds another question: should the organization proceed, even when permission exists? The contrast is a teaching model, rather than a claim that every compliance program excludes ethics. Real organizations can connect compliance and ethical judgment, within the same approach to responsible conduct. The issue is whether the decision rule stops at permission, or considers the reasons for acting.
Compliance Still Matters
An Integrity Approach Adds Judgment to Required Conduct
Compliance matters, because failing applicable legal requirements can create real consequences for an organization. The integrity approach therefore does not make compliance optional, or dismiss the importance of lawful conduct. Instead, it asks whether a successful compliance check should end the discussion about responsibility. Under a minimum-only rule, conduct is acceptable whenever it satisfies the actual legal requirements. That rule supplies no additional reason to reject an action, merely because it is ethically harmful. The blind spot is precisely the legal and unethical category, highlighted by the matrix. An integrity approach evaluates the harmful choice, using trust, values, commitments, and effects on people. A chosen value must still be examined, rather than assumed ethical because the organization prefers it. Likewise, higher ethical ambitions do not cancel legal obligations, or erase consequences for breaking them. Responsible conduct requires attention to both standards, without silently substituting one for the other. The contrast concerns an additional ethical commitment, beyond the claim that nothing legally prohibits the choice.
Technology Example 1
Making Cancellation Hard Can Undermine User Choice
The first technology example makes canceling a subscription, much harder than signing up for it. The design can frustrate a user who has decided to leave, rather than respecting that decision. The ethical concern is manipulation, through unequal effort and obstacles imposed on the cancellation choice. An organization might point to the existence of a cancellation route, as its defense. The reading asks whether that technical feature actually serves the purpose, of enabling usable choice. However, difficult cancellation can also violate applicable law; its legality must be established separately. The Federal Trade Commission has addressed cancellation obstacles, as potentially illegal dark-pattern practices. The legal and unethical classification therefore assumes an instance, where the actual requirements are satisfied. Even in that instance, permission alone does not explain why frustrating the user is justified. Ask how the design treats the affected person, rather than only whether some exit route exists. The ethical question concerns meaningful choice, while the legal question still requires the relevant facts.
Technology Example 2
Disclosure Should Support Understanding, Not Merely Exist
The second example concerns a privacy policy, written in dense and technical legal language. Users may formally agree, while understanding little about the information practices that affect them. The ethical concern is the distance between making a disclosure, and helping people understand it. A notice does useful work when users can recognize the choices, practices, and consequences involved. The mere existence of text does not prove that the organization has achieved that purpose. However, dense language is not automatically lawful. The applicable requirements still matter. Some privacy rules require clear, intelligible information, rather than allowing any wording that is technically disclosed. The conditional example therefore assumes the notice meets actual requirements, before evaluating its remaining ethical shortcomings. Under that assumption, the organization should still ask whether users meaningfully understand the agreement. The focus is thoughtful treatment of people, rather than using complexity to shield an unclear choice. Separate the legal conclusion from the ethical assessment, and justify both from the actual circumstances.
Technology Example 3
Permission Alone Does Not Justify Unnecessary Data Collection
The third example collects more personal information, than the product needs in order to function. Its defense claims current law permits the collection. That claim needs assessment in the actual situation. The ethical concern is disregarding the user's interest, in thoughtful handling of personal information. Legal permission alone does not explain why the extra collection is necessary, or why it treats users fairly. Yet unnecessary collection is not permitted everywhere; applicable data-minimization requirements may restrict it. The European Data Protection Board identifies data minimization, among the basic principles of the GDPR. This example belongs in the legal and unethical category, only if its legal assumption actually holds. When that assumption holds, there is still a broader responsibility to justify the information practice. Ask what the collection contributes, and how the organization's choice affects the people providing the data. The source's point is a gap between permission and responsibility, not a universal legal exemption. An integrity approach keeps evaluating the choice, after the required compliance assessment is complete.
The Explanation Test
Could the Choice Be Explained Openly to the Affected Users?
The three examples share a test, concerning how the organization explains its choice to affected users. Would it be comfortable explaining the decision openly, to the people who experience the consequences? For cancellation, explain why the design makes leaving much harder, than deciding to subscribe. For the privacy policy, explain whether people can understand the practices, they are being asked to accept. For extra collection, explain why the organization wants information, beyond what the product needs to function. A technical defense may fail to answer those practical questions, about the user's experience and interests. Open explanation helps identify the gap, between permission and thoughtful conduct. It is not a courtroom test, or a substitute for assessing the relevant legal requirements. Nor does comfort with a public explanation, prove that the decision is ethically justified. The explanation still needs reasons, which address the affected people rather than merely the organization's convenience. Use the prompt to strengthen accountability, while keeping the two dimensions of the matrix distinct.
5 Key Terms and Takeaways
Keep the Legal Standard and the Ethical Evaluation Distinct
The first key term is legal compliance: meeting applicable legal requirements, backed by enforcement. Ethical responsibility means considering what is right, beyond whether an alternative is legally prohibited. The legal-ethical matrix classifies conduct on two separate dimensions, of legality and ethical judgment. The compliance approach focuses on requirements and penalties; the integrity approach also examines chosen values and trust. Integrity can demand a higher standard, while continuing to respect the organization's legal obligations. The first takeaway separates the questions, including situations where technology develops before specific rules do. The second identifies the disagreement categories, where permission and ethical evaluation point in different directions. The third compares minimum-only compliance with integrity, without assuming real programs must exclude either concern. The fourth identifies the minimum-only blind spot: harmful conduct can be permitted by the actual requirements. The fifth uses technology examples, with their legal status assessed in context rather than assumed universally. Together, these terms and takeaways require reasons for a choice, beyond a bare claim of permission.
Review and Apply
Use Reasons to Explain Each Classification
The first review asks why legality and ethics cannot be treated as the same question. Explain enforceable legal requirements, alongside the broader assessment of right conduct and responsibilities. The second asks which quadrant matters most here: legal and unethical, because permission can coexist with harm. The third asks how the approaches differ, comparing required conduct with values and trust beyond the minimum. A good answer keeps compliance meaningful. It also explains what an integrity commitment adds. The fourth asks what a minimum-only rule misses: it does not reject conduct merely for being unethical. That omission matters when an action satisfies actual legal requirements, yet lacks an adequate ethical justification. The fifth links cancellation and privacy notices, through the difference between technical provision and useful purpose. Their conditional examples concern an available route or disclosure, that still fails to serve users meaningfully. Do not assume those features are lawful; establish the legal facts before giving the matrix classification. Then explain the ethical judgment separately, so each answer rests on its own evidence and reasons.
About Ethics in Technology at UPI Study
Ethics in Technology (Computer Science 195) is a self-paced online course of 116 video lessons in 15 chapters, from cybersecurity basics, privacy and surveillance to big data, hacking, malware, network defense, intellectual property, cybercrime, encryption, emerging technology and digital citizenship. It carries a NCCRS credit recommendation for 3 semester credits.
Every lesson transcript is free on pages like this one, and the videos are free with a free UPI Study account. Enrolling adds a practice quiz after each lesson, the graded work and final exam that earn the credit, lifetime access, and an official transcript on completion. UPI Study has helped over 130,000 students with college credits. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Enroll now → Course details Download the syllabus All Computer Science courses
Compare: Cybersecurity vs Ethics in Technology · Which ethics course?
Why take it here
Why students take Ethics in Technology with UPI Study
Where the credit goes
Universities that work with NCCRS
Ethics in Technology carries a NCCRS credit recommendation. These universities work with NCCRS; some are UPI Study's signed partners. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Thomas Edison State UniversitySigned partner
University of the PeopleSigned partner
Charter Oak State CollegeSigned partner
Strayer UniversitySigned partner
Columbia Southern UniversitySigned partner
Indiana TechSigned partner
Penn StateWorks with NCCRS
Southern New Hampshire UniversityWorks with NCCRS
SUNYWorks with NCCRS
+many more cooperating universitiesFind my college →Find my college → Not listed? Ask Athena in the corner of this page, or book a 15-minute call.
FAQ
Questions students ask us
About Where Legal Compliance Ends and Genuine Ethical Responsibility Begins
What is the difference between legal compliance and ethical responsibility?
What is the legal-ethical matrix?
What is the difference between a compliance approach and an integrity approach to business ethics?
Is it ethical to collect more personal data than an app needs if the law allows it?
About the Ethics in Technology course
How many college credits is Ethics in Technology?
How much does Ethics in Technology cost and what is included?
Which universities accept UPI Study credits?
How long does Ethics in Technology take?
How are the exams done?
How do my credits reach my college?
Ready for the full course? Earn 3 credits in Ethics in Technology.
116 video lessons, a quiz after each one, and the graded work that earns the credit. Recommended for credit by NCCRS.
3 credits · NCCRSEnroll →