← VCE Data Analysis

Analysing an ethical issue in a data scenario

Name the issue, identify the stakeholders affected and the harm done, link it to an APP, then recommend an action to fix it.

Understanding Analysing an ethical issue in a data scenario in VCE Data Analysis

What it does: Linking to an APP shows which rule is broken. APP 6 covers using or sharing personal information only for its primary purpose unless the person consents. A recommendation is a practical fix that deals with the cause of the harm. Deleting unneeded data and getting consent addresses the breach of APP 6. Start by naming the issue. Then identify who is affected and the harm, link it to an APP, and finish with a recommended action. Stakeholders are everyone affected by the issue. Here that includes the students whose data is exposed, their parents and the school responsible for the records.

Common mistakes: Sharing personal information without consent breaches APP 6 (use and disclosure), not APP 2 (anonymity and pseudonymity). The line should be APP: APP 6 (disclosure). Lower server costs is not a harm to the people affected by a leak. The harm should describe what happens to students and parents, such as identity theft risk.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

This module's key terms are also in a printable crossword (Modules 38–54) and word search (Modules 25–54).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A fitness app sells users' location data to advertisers without telling them. Which is the best first step when analysing this ethical issue?
Name the issue (misuse of personal data and lack of transparency)Recommend deleting the whole app straight away
Matches
Harm: the issue is unethical
↓
This does not describe the harm. It only repeats that the issue is bad instead of saying what damage happens to the stakeholders, such as identity theft or loss of trust.
Applying
Meanings
Term
Ethical issue analysis
Meaning
Name the issue, identify the stakeholders affected and the harm done, link it to an APP, then recommend an action to fix it.
Practice
Issue: App shares health data without consent
Testing
Gaps
: customers, the business
Check Answer
Spots
3Harm: Strangers see location
4APP: APP 2 (anonymity)

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Squirrel' badge — Module Hoarder, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Quick Questions

1. A fitness app sells users' location data to advertisers without telling them. Which is the best first step when analysing this ethical issue?
A. Name the issue (misuse of personal data and lack of transparency) ✓
B. Recommend deleting the whole app straight away
Start by naming the issue. Then identify who is affected and the harm, link it to an APP, and finish with a recommended action.
2. A school collects student health records. Who are the stakeholders affected if the records are leaked?
A. Students, parents and the school ✓
B. Only the person who found the leak
Stakeholders are everyone affected by the issue. Here that includes the students whose data is exposed, their parents and the school responsible for the records.
3. Which statement describes the harm in an ethical issue analysis?
A. The data was stored in a spreadsheet file
B. Students could face identity theft or embarrassment after a data breach ✓
Harm is the negative effect on stakeholders, such as identity theft, embarrassment, or loss of trust. How the data is stored is not a harm by itself.
4. A company keeps customer emails for years after they close their accounts. Which APP does this issue link to most closely?
A. APP 11: security and destruction of personal information ✓
B. APP 2: anonymity and pseudonymity
APP 11 requires organisations to destroy or de-identify personal information they no longer need. Keeping it for years breaches this.
5. A survey collects names for a sports club but the data is later used for marketing. Which APP is most relevant?
A. APP 11: security of personal information
B. APP 6: use or disclosure of personal information ✓
APP 6 says data should only be used for the purpose it was collected for. Using it for marketing breaks this rule.

Match the Pairs

Issue: lack of transparency → Names the ethical issue: people are not told how their data is collected, used or shared
Stakeholders: customers, staff, company → Identifies the people or groups who are affected by the issue or who have an interest in it
Link the issue to an Australian Privacy Principle that has been breached → APP 6: data used for a different purpose without consent
Recommend an action that fixes the issue and prevents the harm → Recommendation: delete unneeded data and ask for consent
Harm: the issue is unethical → This does not describe the harm. It only repeats that the issue is bad instead of saying what damage happens to the stakeholders, such as identity theft or loss of trust.
Recommendation: the issue is a problem → This is not a recommendation. It does not give an action to fix the issue, such as encrypting the data or telling users how their data is used.

Key Term

Ethical issue analysis
Name the issue, identify the stakeholders affected and the harm done, link it to an APP, then recommend an action to fix it.

Fill in the Blanks

1. Issue: data shared without consent Stakeholders: customers, the business
Hint: Type the analysis step label that names the people affected.
2. Issue: wrong marks stored for students Harm: students get an unfair result
Hint: Type the analysis step label that describes the damage done.
3. Issue: data kept when no longer needed Link: APP 11 (security of information)
Hint: Type the APP number about protecting and destroying or de-identifying personal information.
4. Issue: data used for a new purpose Link: APP 6 (use and disclosure)
Hint: Type the APP number about using or disclosing information only for its primary purpose.
5. Issue: identifiable data is being shared Recommend: anonymise the data first
Hint: Type the action word for removing identifying details as the fix.

Spot the Error

Question 1
A Issue: Shared without consent
B Who: App users
C Harm: Strangers see location
D APP: APP 2 (anonymity)
E Fix: Require opt-in consent
Line D — Sharing personal information without consent breaches APP 6 (use and disclosure), not APP 2 (anonymity and pseudonymity). The line should be APP: APP 6 (disclosure).
Question 2
A Issue: Student data was leaked
B Who: Students and parents
C Harm: Lower server costs
D APP: APP 11 (security)
E Fix: Encrypt stored records
Line C — Lower server costs is not a harm to the people affected by a leak. The harm should describe what happens to students and parents, such as identity theft risk.
Question 3
A Issue: Data encrypted twice
B Who: Customers
C Harm: Parcels sent astray
D APP: APP 10 (data quality)
E Fix: Check and update records
Line A — The issue named does not match the harm and fix. Parcels going astray come from outdated or inaccurate data, so the issue should be Outdated address data.
Question 4
A Issue: Hidden AI decisions
B Who: Bank's cleaning staff
C Harm: Cannot challenge outcome
D APP: APP 1 (transparency)
E Fix: Explain how AI decides
Line B — The stakeholders must be the people actually affected by the hidden AI decisions. The cleaning staff are not affected, so the line should name the loan applicants.
Question 5
A Issue: Company controls data
B APP: APP 7 (direct marketing)
C Who: Wearable users
D Harm: Cannot view own data
E Fix: Let users download data
Line B — The problem is that users cannot access their own data, which links to APP 12 (access). APP 7 is about direct marketing, so the line should be APP: APP 12 (access).

Student with a class code? Join your class →