Ethical, Legal and Environmental Issues

What you'll learn

This revision guide covers the ethical, legal and environmental impacts of computer science that appear throughout the WJEC GCSE specification. You'll understand how technology affects society, learn the key legislation governing digital systems, and explore the environmental consequences of computing. These concepts appear in both exam papers, particularly in longer-answer questions worth 4-9 marks.

Key terms and definitions

Ethics — moral principles that govern how individuals and organisations should behave when using technology, considering what is right and wrong beyond legal requirements

Data Protection Act 2018 — UK law that controls how personal information is used by organisations, businesses and government, implementing GDPR requirements

Computer Misuse Act 1990 — legislation that makes unauthorised access to computer systems illegal, including hacking and spreading malware

Copyright, Designs and Patents Act 1988 — law protecting intellectual property, making it illegal to copy, modify or distribute copyrighted material without permission

E-waste — discarded electronic devices and components that contain hazardous materials and require proper disposal to prevent environmental damage

Digital divide — the gap between those who have access to modern information technology and those who do not, creating inequality

Carbon footprint — the total amount of greenhouse gases produced directly and indirectly by computing activities, measured in carbon dioxide equivalents

Accessibility — designing technology so it can be used by people with disabilities, ensuring equal access to digital services

Core concepts

Data protection and privacy

The Data Protection Act 2018 establishes eight principles that organisations must follow when processing personal data:

• Data must be processed lawfully, fairly and transparently
• Collected for specified, explicit and legitimate purposes
• Adequate, relevant and limited to what is necessary
• Accurate and kept up to date
• Kept for no longer than necessary
• Processed in a manner that ensures appropriate security
• The data controller is responsible for compliance
• Individuals have the right to access their personal data

Personal data includes any information that can identify a living individual: names, addresses, email addresses, photos, IP addresses, location data and biometric information.

Organisations must:

• Obtain consent before collecting personal data
• Explain how data will be used
• Allow individuals to access, correct or delete their data
• Report data breaches to the Information Commissioner's Office (ICO) within 72 hours
• Appoint a Data Protection Officer if processing large amounts of sensitive data

Privacy concerns in modern computing include:

• Social media platforms collecting browsing history and personal preferences for targeted advertising
• Smartphones tracking location data continuously
• Smart home devices recording conversations
• Websites using cookies to monitor user behaviour
• Facial recognition systems in public spaces
• Data mining revealing patterns about individuals without consent

Computer crime legislation

The Computer Misuse Act 1990 defines three main offences:

Unauthorised access (Level 1):

• Intentionally accessing computer material without permission
• Examples: guessing passwords, using someone else's account, viewing files you shouldn't access
• Maximum penalty: 2 years imprisonment

Unauthorised access with intent (Level 2):

• Gaining access to commit further crimes
• Examples: accessing bank systems to commit fraud, stealing personal data for identity theft
• Maximum penalty: 5 years imprisonment

Unauthorised modification (Level 3):

• Deliberately changing, deleting or corrupting data
• Examples: creating and distributing viruses, deleting files, DDoS attacks
• Maximum penalty: 10 years imprisonment

The Act was amended in 2015 to include:

• Creating or supplying tools for computer misuse
• Unauthorised acts causing serious damage to the economy, environment, national security or human welfare

Intellectual property rights

The Copyright, Designs and Patents Act 1988 protects creative works automatically from the moment of creation:

Protected materials include:

• Software and source code
• Websites and web content
• Databases
• Music, films and videos
• Books, articles and written works
• Photographs and artwork

Illegal activities under the Act:

• Copying software without a licence
• Downloading pirated films or music
• Using copyrighted images without permission
• Sharing licensed software with others
• Selling counterfeit software

Legal exceptions allow limited use without permission:

• Fair dealing for research or private study
• Quotation with proper attribution
• Parody or pastiche
• Text and data mining for non-commercial research

Creative Commons licences provide alternatives to full copyright, allowing creators to specify how others may use their work (e.g., attribution required, non-commercial use only, share-alike conditions).

Open source software is distributed with source code that can be viewed, modified and redistributed, contrasting with proprietary software where the source code remains confidential.

Environmental impact of computing

Energy consumption in computing:

• Data centres consume approximately 1% of global electricity
• Cryptocurrency mining requires enormous processing power
• Streaming video accounts for substantial internet traffic and energy use
• Manufacturing one computer uses equivalent energy to running it for 2+ years
• Always-on devices consume power even in standby mode

Reducing energy use:

• Cloud computing can be more efficient than individual servers
• Virtualisation reduces the number of physical machines needed
• Energy-efficient components (e.g., solid-state drives, LED monitors)
• Power management features (sleep mode, automatic shutdown)
• Renewable energy for data centres

E-waste problems:

Electronic devices contain:

• Toxic materials (lead, mercury, cadmium, beryllium)
• Precious metals (gold, silver, copper, platinum)
• Plastics that don't biodegrade

Improper disposal causes:

• Soil and water contamination
• Health risks in developing countries where e-waste is often sent
• Loss of valuable recyclable materials

Solutions:

• WEEE Directive requires manufacturers to provide recycling facilities
• Refurbishment and donation extends device lifespan
• Proper recycling recovers valuable materials
• Designing for repairability and upgradability
• Right to repair legislation

Ethical issues in computing

Artificial intelligence and automation:

• Job displacement as AI replaces human workers
• Algorithmic bias in decision-making systems
• Autonomous weapons raising moral questions
• Lack of transparency in machine learning decisions
• Accountability when AI systems make mistakes

Social media ethics:

• Spreading misinformation and fake news
• Cyberbullying and online harassment
• Echo chambers reinforcing extreme views
• Addiction and mental health impacts
• Manipulation through psychological techniques

Surveillance and monitoring:

• Workplace monitoring of employee communications and productivity
• Government surveillance programmes
• CCTV and facial recognition in public spaces
• Balance between security and privacy
• Use of personal data without meaningful consent

Censorship and freedom of expression:

• Internet filtering and content blocking
• Different standards across countries
• Platform decisions about acceptable content
• Net neutrality and equal access to information

Accessibility and inclusivity

Digital divide factors:

• Economic: inability to afford devices or internet connections
• Geographic: lack of infrastructure in rural or developing areas
• Educational: lack of digital literacy skills
• Age: older people less confident with technology
• Disability: barriers for users with impairments

Accessibility features required by law (Equality Act 2010):

• Screen readers for visually impaired users
• Keyboard navigation for users who cannot use a mouse
• Captions and transcripts for deaf users
• Adjustable text size and high-contrast modes
• Alternative text for images
• Consistent navigation and clear language
• Compatibility with assistive technologies

Web Content Accessibility Guidelines (WCAG) define standards:

• Perceivable: information presented in multiple ways
• Operable: interface components work with various inputs
• Understandable: content is clear and predictable
• Robust: compatible with current and future technologies

Benefits of accessibility:

• Legal compliance and avoiding discrimination claims
• Larger potential audience
• Improved usability for all users
• Better search engine optimisation
• Enhanced reputation and brand image

Stakeholder perspectives

Different groups have varying interests in computing issues:

Individuals want:

• Privacy protection
• Security of personal data
• Access to technology
• Freedom of expression

Businesses require:

• Ability to collect customer data for marketing
• Protection of intellectual property
• Flexibility in employee monitoring
• Cost-effective operations

Government needs:

• National security and crime prevention
• Economic growth through digital industries
• Protection of citizens
• Tax revenue from technology companies

Society benefits from:

• Equal access to information and services
• Environmental sustainability
• Ethical use of technology
• Employment opportunities

Conflicts arise when these interests clash, requiring balanced solutions and regulations.

Worked examples

Example 1: Data Protection Scenario (6 marks)

Question: A supermarket uses loyalty cards to track customer purchases. The data is used to send personalised offers but is also sold to insurance companies without customer knowledge. Discuss whether this complies with the Data Protection Act 2018.

Mark scheme answer:

The supermarket is not complying with the Data Protection Act 2018 for several reasons:

• The data is not being used in a transparent manner as customers are unaware their data is being sold (1 mark)
• Selling data to insurance companies is likely not a specified purpose when customers signed up for the loyalty card (1 mark)
• The supermarket has not obtained explicit consent for sharing data with third parties (1 mark)
• This violates the principle that data should be collected for specified, explicit and legitimate purposes only (1 mark)
• The supermarket could face fines from the Information Commissioner's Office (1 mark)
• To comply, they must inform customers and obtain consent before sharing data, or only use it for personalised offers as originally stated (1 mark)

Example 2: Environmental Impact (4 marks)

Question: Explain two ways that increased use of cloud storage can reduce the environmental impact of computing.

Mark scheme answer:

• Cloud providers can use large, efficient data centres rather than many individual computers, reducing overall energy consumption per user (2 marks: 1 for explanation, 1 for environmental benefit)

• Centralised resources can be powered by renewable energy sources more easily than individual devices, reducing carbon emissions (2 marks: 1 for explanation, 1 for environmental benefit)

Alternative acceptable answers:

• Reduces need for local storage devices/servers, decreasing e-waste
• Better utilisation through sharing resources among users
• Professional cooling systems more efficient than home/office setups

Example 3: Ethical Analysis (9 marks)

Question: A school wants to install facial recognition systems to automatically record attendance. Evaluate the ethical and legal considerations of this decision.

Mark scheme answer:

Legal considerations:

• Facial recognition processes biometric personal data under the Data Protection Act 2018, requiring explicit consent from parents/students (2 marks)
• The school must demonstrate it's necessary and proportionate to achieve the legitimate aim of recording attendance (1 mark)
• Alternative methods (registration) exist that are less invasive, making it difficult to justify legally (1 mark)

Ethical considerations:

• Privacy concerns: students are monitored constantly without ability to opt out (1 mark)
• Surveillance culture: normalising constant monitoring of young people (1 mark)
• Data security: risk of biometric data being breached or misused (1 mark)

Evaluation:

• While attendance tracking is legitimate, facial recognition is disproportionate to the goal (1 mark)
• The risks to privacy and student wellbeing likely outweigh the minor convenience benefit (1 mark)
• Overall, this would be difficult to justify both legally and ethically without compelling reasons (strong conclusion tying together points)

Common mistakes and how to avoid them

• Confusing the different Acts: Students mix up which law covers what. Remember: Data Protection = personal information, Computer Misuse = hacking/unauthorised access, Copyright = intellectual property and creative works

• Only describing one stakeholder perspective: Questions often ask you to "discuss" or "evaluate", requiring multiple viewpoints. Always consider individuals, businesses, and society when analysing ethical issues

• Vague statements about privacy: Saying "it invades privacy" without explaining how or why isn't sufficient. Specify exactly what data is collected, how it's used, and what the specific concern is

• Ignoring the command word: "Explain" needs reasons/mechanisms, "Discuss" needs multiple viewpoints, "Evaluate" needs weighing up and a justified conclusion. Read the question carefully

• Listing features without explaining impact: Don't just say "uses lots of energy" — explain the consequence (carbon emissions, climate change, resource depletion)

• Confusing ethical and legal: Something can be legal but unethical, or illegal but some might argue ethical. Make clear which you're discussing

Exam technique for "Ethical, Legal and Environmental Issues"

• Command word recognition: "Discuss" (4-6 marks) requires examining multiple perspectives; "Evaluate" (6-9 marks) needs weighing evidence and reaching a justified conclusion; "Explain" (2-4 marks) requires reasons and consequences

• Structure extended answers: For 6-9 mark questions, write in paragraphs covering different aspects. Use the point-evidence-explain structure and include a conclusion that directly addresses the question

• Name specific legislation: Don't write "the law" — use "Data Protection Act 2018", "Computer Misuse Act 1990" or "Copyright, Designs and Patents Act 1988" for full marks

• Real-world context: Apply concepts to the scenario given in the question. Generic answers score lower than those that engage with specific details provided

Quick revision summary

Computing creates ethical challenges around privacy, surveillance and AI bias. UK laws include the Data Protection Act 2018 (personal data protection), Computer Misuse Act 1990 (hacking offences), and Copyright, Designs and Patents Act 1988 (intellectual property). Environmental issues include energy consumption of data centres, e-waste from discarded devices, and carbon footprints. The digital divide creates inequality in technology access. Accessibility features ensure people with disabilities can use technology. Exam questions require multiple perspectives and specific legislation names for full marks.