◇ OpenCyber Academy
Bachelor's · Chapter 10 · English

Chapter 10 — Ethics and authorized practice

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 10 — Ethics and authorized practice

Lesson map

Lesson 10 published. Map, example, EX028.

flowchart TD
  N0["Learning outcomes"]
  N1["10.1 Children's interests"]
  N2["10.2 Authorised practice"]
  N3["10.3 Requests outside authority"]
  N4["10.4 Professional values"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX028"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["10.1 Children's interests"]
  N2["10.2 Authorised practice"]
  N3["10.3 Requests outside authority"]
  N4["10.4 Professional values"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX028"]

[Learning outcomes]
    |
    v
[10.1 Children's interests]
    |
    v
[10.2 Authorised practice]
    |
    v
[10.3 Requests outside authority]
    |
    v
[10.4 Professional values]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX028]

Learning outcomes

You will (1) apply ethical principles to work with children's data; (2) define the limits of authorised practice; (3) handle requests outside one's authority.

10.1 Children's interests

Elena studies ethics for work with children's data. Children may be less aware of risks and less able to exercise rights. Recital 38 of the GDPR says children merit specific protection, and Article 14 of the LGPD requires processing of children's data to be in their best interest. She writes that her work at the trust should always ask what is best for the children, not only what is lawful or convenient for adults. This becomes her working test for every decision. Lawful is not enough.

10.2 Authorised practice

During her placement Elena has access to synthetic data and to real system configurations, but not to real pupil records. Dr. Asante explains that authorised practice means doing only what her placement agreement allows. When a teacher offers to show her a real spreadsheet to help her understand a problem, she politely declines and asks for a synthetic example instead. She records the offer and her response in her placement log. The supervisor approves her response and supplies the synthetic data.

10.3 Requests outside authority

A head teacher asks Elena to check whether a parent's complaint about a data breach is justified by looking at email logs. Elena explains that investigating a complaint requires authority from the data protection lead and access she does not have. She refers the request to the lead and gives the head teacher the lead's contact details, so the parent's complaint is not left waiting. She learns that good intentions do not create authority, and that stepping outside her role could harm the people she wants to help and undermine trust in the investigation.

10.4 Professional values

Elena reflects on values: respect for children and families, honesty about risks, and humility about her own limits. She writes a short personal code for her placement. Dr. Asante encourages her to revisit it each year. He explains that professional codes in computing and data protection share these values, and that the habit of reflecting on them prepares students for difficult decisions that rules alone cannot resolve. Her reflective log records one dilemma each week, with what she decided and why.

Worked example

Elena centres children's best interests, declines a real spreadsheet, refers a complaint investigation to the data protection lead and writes a personal code of values.

Synthetic case. Placement events are synthetic; GDPR Recital 38 and LGPD Article 14 are real.

Errors and limits

Personal codes can be vague; tie each value to a concrete behaviour.

Exercises

Synthesis

Chapter 10 sets ethical limits. Chapter 11 studies operating systems.

Continue studying — chapter 10 of 40

← Chapter 09 (draft) · Course chapter index · Chapter 11 (draft) →