← VCE Data Analytics U4O2

Ethical issue: data collection and use

Collecting only the data needed for security and using it as people expect. Over-collection or hidden monitoring of staff or customers, without clear consent, is an ethical issue.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 138, WA Computer Science ATAR Year 11 — Cyber Security — Module 170

Understanding Ethical issue: data collection and use in VCE Data Analytics U4O2

What it does: Collecting only login events is a narrow, justified scope that matches the security purpose. Monitoring only happens after the customer has agreed, so the use of data matches what they expect. Ethical monitoring is open and limited to a clear purpose. Hidden monitoring without clear consent breaks the trust of staff. Login and failed sign-in logs are directly related to security. Reading private messages goes beyond what security needs. notified=False means staff do not know they are being monitored, so there is no transparency or consent. Over-collection is the mistake: collecting everything when only transaction data is needed is unethical.

Common mistakes: The loop should only collect the items in the needed list. Also collecting photos is over-collection, which is an ethical issue. The line should be collect(item). The condition is reversed. Monitoring would start when staff have NOT consented. It should be IF staffConsent = TRUE THEN.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Ethical issue: data collection and use to a class →

This module's key terms are also in a printable crossword (Modules 135–150) and word search (Modules 115–150).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A shop's security system records customers' faces, shopping habits and phone locations when it only needs to detect theft. What is the ethical issue?
Over-collection: more data is collected than is needed for securityUnder-collection: not enough data is collected to stop theft
Matches
collect_data(customer, scope="all") # for fraud checks
↓
The scope is far wider than fraud checks need. The organisation should collect only the data necessary for that security purpose.
Applying
Meanings
Term
Ethical data collection
Meaning
Collecting only the data needed for security and using it as people expect. Over-collection or hidden monitoring of staff or customers, without clear consent, is an ethical issue.
Practice
needed ← "login times"
Testing
Gaps
IF consent = THEN stopMonitoring
Check Answer
Spots
2FOR EACH item IN needed
3 collect(item, photos)

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Angelfish' badge — Reef Perfectionist, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. A shop's security system records customers' faces, shopping habits and phone locations when it only needs to detect theft. What is the ethical issue?
A. Under-collection: not enough data is collected to stop theft
B. Over-collection: more data is collected than is needed for security ✓
Collecting more personal data than the security purpose needs is over-collection. It raises ethical issues even if the data is stored safely.
2. Which approach to staff monitoring is more ethical?
A. Secretly logging staff keystrokes and personal browsing
B. Telling staff what is monitored and why, and getting their consent ✓
Ethical monitoring is open and limited to a clear purpose. Hidden monitoring without clear consent breaks the trust of staff.
3. An organisation collects customer data for fraud detection, then uses it to target ads without telling customers. Is this ethical?
A. No, the data is used in a way people did not expect ✓
B. Yes, once data is collected it can be used for any purpose
People expect data to be used for the purpose it was collected. Using it for an unexpected purpose without consent is an ethical issue.
4. Which statement about consent is correct?
A. Consent should be clear and informed, so people know what is collected and why ✓
B. Consent is valid when it is hidden in a long policy that no one is told about
Clear consent means people understand what data is collected and how it will be used. Buried or hidden terms do not give real consent.
5. Which is an example of ethical data collection for a school's network security?
A. Logging login times and failed sign-in attempts to spot attacks ✓
B. Recording students' private messages and personal web history
Login and failed sign-in logs are directly related to security. Reading private messages goes beyond what security needs.

Match the Pairs

collect_data(user, scope="all") → Over-collection: gathering far more personal data than the security purpose needs, which raises an ethical issue.
monitor(staff, notified=False) → Hidden monitoring: watching staff activity without telling them, which breaches their reasonable expectations.
Ethical collection limits data to what the security purpose needs. → collect_data(user, scope="login_events")
Consent means people are told about monitoring and agree to it first. → if consent_given(customer): monitor(customer)
collect_data(customer, scope="all") # for fraud checks → The scope is far wider than fraud checks need. The organisation should collect only the data necessary for that security purpose.
monitor(staff, notify=False) # secret tracking → Staff are monitored secretly with no notice or consent. They should be told what is monitored and why.

Key Term

Ethical data collection
Collecting only the data needed for security and using it as people expect. Over-collection or hidden monitoring of staff or customers, without clear consent, is an ethical issue.

Fill in the Blanks

1. IF consent = FALSE THEN stopMonitoring
Hint: Type the Boolean value that means the person has not agreed to being monitored.
2. collect ONLY data that is necessary
Hint: Type the word for data that is really needed for the security purpose.
3. over ← dataCollected > dataNeeded
Hint: Type the comparison operator that shows more data was collected than was needed.
4. IF actualUse ≠ expectedUse THEN flagIssue
Hint: Type the operator meaning not equal, used when data is used in a way people did not expect.
5. IF staffConsent = TRUE THEN monitorEmail
Hint: Type the Boolean value showing that staff have clearly agreed before they are monitored.

Spot the Error

Question 1
A needed ← [loginTime, device]
B FOR EACH item IN needed
C collect(item, photos)
D END FOR
Line C — The loop should only collect the items in the needed list. Also collecting photos is over-collection, which is an ethical issue. The line should be collect(item).
Question 2
A IF staffConsent = FALSE THEN
B startMonitoring(staff)
C ELSE
D DISPLAY "No monitoring"
Line A — The condition is reversed. Monitoring would start when staff have NOT consented. It should be IF staffConsent = TRUE THEN.
Question 3
A HIDE privacyNotice
B IF customer.agrees = TRUE THEN
C collectData(customer)
Line A — Customers must be shown the privacy notice before their data is collected. Hiding it means they cannot give informed consent. The line should be DISPLAY privacyNotice.
Question 4
A retention ← 90
B age ← daysSinceCollected(log)
C IF age > retention THEN
D keepForever(log)
Line D — Data that is no longer needed should be deleted once the retention period passes. Keeping it forever is over-collection in time. The line should be delete(log).
Question 5
A FOR EACH acct IN workAccounts
B logActivity(personalPhone)
C END FOR
Line B — Staff monitoring should be limited to work accounts. Logging a personal phone goes beyond what is needed and is unethical. The line should be logActivity(acct).

Student with a class code? Join your class →