Online service providers —such as AOL, Facebook, Google, Microsoft, and Twitter—significantly shape the informational environment and influence users’ experiences and interactions within it. There is a general agreement on the centrality of OSPs in information societies, but little consensus about what principles should shape their moral responsibilities and practices. In this article, we analyse the main contributions to the debate on the moral responsibilities of OSPs. By endorsing the method of the levels of abstract, we first analyse the moral responsibilities (...) of OSPs in the web. These concern the management of online information, which includes information filtering, Internet censorship, the circulation of harmful content, and the implementation and fostering of human rights. We then consider the moral responsibilities ascribed to OSPs on the web and focus on the existing legal regulation of access to users’ data. The overall analysis provides an overview of the current state of the debate and highlights two main results. First, topics related to OSPs’ public role—especially their gatekeeping function, their corporate social responsibilities, and their role in implementing and fostering human rights—have acquired increasing relevance in the specialised literature. Second, there is a lack of an ethical framework that can define OSPs’ responsibilities, and provide the fundamental sharable principles necessary to guide OSPs’ conduct within the multicultural and international context in which they operate. This article contributes to the ethical framework necessary to deal with and by endorsing a LoA enabling the definition of the responsibilities of OSPs with respect to the well-being of the infosphere and of the entities inhabiting it. (shrink)

The “privacy paradox” refers to the discrepancy between the concern individuals express for their privacy and the apparently low value they actually assign to it when they readily trade personal information for low-value goods online. In this paper, I argue that the privacy paradox masks a more important paradox: the self-management model of privacy embedded in notice-and-consent pages on websites and other, analogous practices can be readily shown to underprotect privacy, even in the economic terms favored by its advocates. The (...) real question, then, is why privacy self-management occupies such a prominent position in privacy law and regulation. Borrowing from Foucault’s late writings, I argue that this failure to protect privacy is also a success in ethical subject formation, as it actively pushes privacy norms and practices in a neoliberal direction. In other words, privacy self-management isn’t about protecting people’s privacy; it’s about inculcating the idea that privacy is an individual, commodified good that can be traded for other market goods. Along the way, the self-management regime forces privacy into the market, obstructs the functioning of other, more social, understandings of privacy, and occludes the various ways that individuals attempt to resist adopting the market-based view of themselves and their privacy. Throughout, I use the analytics practices of Facebook and social networking sites as a sustained case study of the point. (shrink)

International observers and critics often attack China's Internet policy on the basis of liberal values. If China's Internet is designed and built on Confucian values that are distinct from, and sometimes incompatible to, liberal values, then the liberalist critique ought to be reconsidered. In this respect, Mary Bockover's “Confucian Values and the Internet: A Potential Conflict” appears to be the most direct attempt to address this issue. Yet, in light of developments since its publication in 2003, it is time to (...) re-examine this issue. In this paper, I revisit Bockover’s argument and show why it fails. Using social media as an example, I offer an alternative argument to show why the Internet remains largely incompatible with Confucian values. I end this paper by suggesting how to recontextualise the Confucian way of life and to redesign social media in accordance to Confucian values in the information society. (shrink)

The re-use of publicly available (personal) data for originally unanticipated purposes has become common practice. Without such secondary uses, the development of many AI systems like large language models (LLMs) and ChatGPT would not even have been possible. This chapter addresses the ethical implications of such secondary processing, with a particular focus on data protection and privacy issues. Legal and ethical evaluations of secondary processing of publicly available personal data diverge considerably both among scholars and the general public. While some (...) of these uses are met with opposition and criticism, others are quite unanimously viewed as unproblematic. Often, proponents and opponents of such practices invoke the same ethical and legal standards for their opposite conclusions. This state of affairs shows that other considerations besides the public availability of data must play a role. It calls for a theoretical clarification of the additional criteria that should guide decisions about the (legally informed) ethical acceptability of re-processing practices. In order to make a contribution towards this goal, the present chapter maps the ongoing debate and systematises the existing contributions around three lines of argument: a consent-centred position, an approach that focuses on the distinction between data and information, and finally a line of argument that focuses on the contextual norms that govern the flows of information. The chapter further relates these arguments to three underlying conceptions of privacy and data protection: rights-based, structural and contextual, and discusses the advantages and disadvantages of each position in the light of concrete examples. It concludes by arguing for a mixed approach that combines core elements of the structural and contextual approaches. The chapter aims to contribute to existing research in the fields of data, AI and research ethics, and to reconnect the debate with ethical and legal scholarship on privacy and data protection. In doing so, it aims to make a theoretical contribution towards refining existing conceptions of privacy and data protection in order to make them more fit to ‘drive our digital world’ as far as the use of publicly available data is concerned. (shrink)

This article argues that the self-management of one’s privacy is impossible due to privacy externalities. Privacy externalities are the negative by-product of the services offered by some data controllers, whereby the price to ‘pay’ for a service includes not just the provision of the user’s own personal data, but also that of others. This term, related to similar concepts from the literature on privacy such as ‘networked privacy’ or ‘data pollution’, is used here to bring to light the incentives and (...) exploitative dynamics behind a phenomenon which, I demonstrate, benefits both the user and the data controller to the detriment of third-party data subjects. Building on these novel elements and on the relevant concepts and examples found in the existing literature, this article draws a comprehensive picture of the phenomenon, and offers two promising paths to address it—better enforcing the principle of data protection by design and by default, and relying on the framework of joint controllership. (shrink)

Within a given conversation or information exchange, do privacy expectations change based on the technology used? Firms regularly require users, customers, and employees to shift existing relationships onto new information technology, yet little is known as about how technology impacts established privacy expectations and norms. Coworkers are asked to use new information technology, users of gmail are asked to use GoogleBuzz, patients and doctors are asked to record health records online, etc. Understanding how privacy expectations change, if at all, and (...) the mechanisms by which such a variance is produced will help organizations make such transitions. This paper examines whether and how privacy expectations change based on the technological platform of an information exchange. The results suggest that privacy expectations are significantly distinct when the information exchange is located on a novel technology as compared to a more established technology. Furthermore, this difference is best explained when modeled by a shift in privacy expectations rather than fully technology-specific privacy norms. These results suggest that privacy expectations online are connected to privacy offline with a different base privacy expectation. Surprisingly, out of the five locations tested, respondents consistently assign information on email the greatest privacy protection. In addition, while undergraduate students differ from non-undergraduates when assessing a social networking site, no difference is found when judging an exchange on email. In sum, the findings suggest that novel technology may introduce temporary conceptual muddles rather than permanent privacy vacuums. The results reported here challenge conventional views about how privacy expectations differ online versus offline. Traditionally, management scholarship examines privacy online or with a specific new technology platform in isolation and without reference to the same information exchange offline. However, in the present study, individuals appear to have a shift in their privacy expectations but retain similar factors and their relative importance—the privacy equation by which they form judgments—across technologies. These findings suggest that privacy scholarship should make use of existing privacy norms within contexts when analyzing and studying privacy in a new technological platform. (shrink)

Purpose The purpose of this paper is to lay out an approach to addressing the problem of privacy protection in the global digital environment based on the importance that information has to improve users’ informational self-determination. Following this reasoning, this paper focuses on the suitable way to provide user with the correct amount of information they may need to maintain a desirable grade of autonomy as far as their privacy protection is concerned and decide whether or not to put their (...) personal data on the internet. Design/methodology/approach The authors arrive at this point in their analysis by qualitative discourse analysis of the most relevant scientific papers and dossiers relating to privacy protection. Findings The goal of this paper is twofold. The first is to illustrate the importance of privacy by default and informed consent working together to protect information and communication technology users’ privacy. The second goal is to develop a suitable way to administrate the mentioned “informed consent” to users. Originality/value To fulfil this purpose, the authors present a new concept of informed consent: active “informed consent” or “Opt-in” model by layers. “Opt-in” regimens have already been used with cookies but never with 2.0 applications, as, for instance, social network sites. (shrink)

The increasingly ubiquitous use of technology has led to the concomitant rise of intensified data collection and the ethical issues associated with the privacy and security of that data. In order to address the question of how these ethical concerns are discussed in the literature surrounding the subject, we examined articles published in IEEE Security and Privacy, a magazine targeted towards a general, technically-oriented readership spanning both academia and industry. Our investigation of the intersection between the ethical and technological dimensions (...) of privacy and security is structured as a bibliometric analysis. Our dataset covers all articles published in IEEE Security and Privacy since its inception in 2003 to February 06, 2014. This venue was chosen not only because of its target readership, but also because a preliminary search of keywords related to ethics, privacy, and security topics in the ISI Web of Knowledge and IEEE Xplore indicated that IEEE Security and Privacy has published a preponderance of articles matching those topics. In fact, our search returned two-fold more articles for IEEE Security and Privacy than the next most prolific venue. These reasons, coupled with the fact that both academia and industry are well-represented in the authorship of articles makes IEEE Security and Privacy an excellent candidate for bibliometric analysis. Our analysis examines the ways articles in IEEE Security and Privacy relate ethics to information technology. Such articles can influence the development of law, policy and the future of information technology ethics. We employed thematic and JK-biplot analyses of content relating privacy and ethics and found eight dominant themes as well as the inter-theme relationships. Authors and institutional affiliations were examined to discern whether centers of research activity and/or authors dominated the overall field or thematic areas. Results suggest avenues for future work in critical areas, especially for closing present gaps in the coverage of ethics and information technology privacy and security themes particularly in the areas of ethics and privacy awareness. (shrink)

Informed consent may be unobtainable in online contexts. This article examines the difficulties of obtaining informed consent online through a Facebook case study. It is proposed that there are at least two ways informed consent could be waived in research: first, if the data are public, and second, if the data are textual. Accordingly, the publicness of the Facebook News Feed is considered. Taking account of the wide availability of Facebook users’ data, and reflecting on how public those users perceive (...) their information to be, this paper argues that some Facebook data are properly viewed as public to semi-public in nature. A second issue is whether the Facebook News Feed data collection ought to be classified as document-based or human subjects research. Since the Facebook News Feed involves social interaction that may elicit ‘ethically important moments’, this paper proposes that observing it may constitute human subjects research. While informed consent is desirable for human subjects research, it is suggested that Facebook News Feed observations are comparable to observational research in a public space, and thus waiving informed consent in this online setting could be justifiable. (shrink)

The findings of our experiments showed that social network sites such as Google Plus, Facebook, and Twitter, have the ability to acquire knowledge about their users’ movements not only within SNSs but also beyond SNS boundaries, particularly among websites that embedded SNS widgets such as Google’s Plus One button, Facebook’s Like button, and Twitter’s Tweet button. In this paper, we analysed the privacy implication of such a practice from a moral perspective by applying Helen Nissenbaum’s decision heuristic derived from her (...) contextual integrity framework in order to answer the question of whether or not an online user’s privacy is being violated by this practice. (shrink)

When we talk about things like the 'lost art of letter-writing' or the 'digital communications revolution,' what do we mean? What do we lose and what do we gain as we move towards digital ways of being in the world? Critically engaging with many of the canonical writers in the philosophy of technology , and following what has been termed the 'empirical turn' in that discipline, this thesis answers such questions by means of a philosophical, comparative study of epistolary technics (...) and praxis in the early nineteenth and 21st centuries, making use of Romantic era archival letters and related materials to compare and contrast our own, Internet-enabled experience of communicating over distance. In so doing, it seeks to contribute towards our understanding of the ways in which information and communication technologies influence humanity by taking a long-view of many of the more radical claims for the ways in which the Internet effects change in culture, society and self. The thesis is structured thematically, with chapters examining the experience of distance and presence in these two periods, the potential for meaningful engagements by way of communicative media, the technological reconfiguration of social networks, and shifts in the public/private distinction. In its conclusions it is broadly sympathetic to the somewhat pessimistic positions of Heidegger and Borgmann, finding evidence and supplying argument to support the notion that the Internet does in some circumstances serve to diminish our meaningful involvements with the world and each other. It is, however, critical of many of the more extreme arguments for the substantive impact of the Internet, which very often lean too heavily towards naive technological determinism, neglect the social shaping of technology, overemphasise the radical novelty of the Internet, or simply deny or downplay many of its undoubted benefits. (shrink)

Informed consent may be unobtainable in online contexts. This article examines the difficulties of obtaining informed consent online through a Facebook case study. It is proposed that there are at least two ways informed consent could be waived in research: first, if the data are public, and second, if the data are textual. Accordingly, the publicness of the Facebook News Feed is considered. Taking account of the wide availability of Facebook users’ data, and reflecting on how public those users perceive (...) their information to be, this paper argues that some Facebook data are properly viewed as public to semi-public in nature. A second issue is whether the Facebook News Feed data collection ought to be classified as document-based or human subjects research. Since the Facebook News Feed involves social interaction that may elicit ‘ethically important moments’, this paper proposes that observing it may constitute human subjects research. While informed consent is desirable for human subjects research, it is suggested that Facebook News Feed observations are comparable to observational research in a public space, and thus waiving informed consent in this online setting could be justifiable. (shrink)