# data[].attributes.headline
HOWEVER, it can be considered unethical to gather information such as postal code and ID numbers which might not be related to identifying the target market, most especially without the informed consent of the customer.

# data[].attributes.subject
HOWEVER, it can be considered unethical to gather information such as postal code and ID numbers which might not be related to identifying the target market, most especially without the informed consent of the customer.

# data[].attributes.headline
 RA 10713 (Data Privacy Act of 2012) CHAPTER III SEC.11 (e) Retained only for as long as necessary for the fulfillment of the purposes for which the data was obtained or for the establishment, exercise or defense of legal claims, or for legitimate business purposes, or as provided by law

# data[].attributes.subject
 RA 10713 (Data Privacy Act of 2012) CHAPTER III SEC.11 (e) Retained only for as long as necessary for the fulfillment of the purposes for which the data was obtained or for the establishment, exercise or defense of legal claims, or for legitimate business purposes, or as provided by law

# data[].attributes.headline
CHAPTER III SEC.12 (c) The processing is necessary for compliance with a legal obligation to which the personal information controller is subject;

# data[].attributes.subject
CHAPTER III SEC.12 (c) The processing is necessary for compliance with a legal obligation to which the personal information controller is subject;

# data[].attributes.body
Collecting and storing transaction data in stores is essential for keeping track of history should issues, especially legal ones arise in the future. It adheres to Chapter III Section 12(c) of the Data Privacy Act of 2012.

Meanwhile, it is stated in CHAPTER III SEC. 11 (e) that information should only be retained until the fulfillment of the purposes for which it was obtained.

It may be safe to say that customers are aware that transaction history and details such as credit card number, date of transaction, items purchased, and their names.

# data[].attributes.headline
Consent to collect, store, and analyze personally identifiable information (PII) is NOT equal to consenting for it to be publicly available

# data[].attributes.subject
Consent to collect, store, and analyze personally identifiable information (PII) is NOT equal to consenting for it to be publicly available

# data[].attributes.body
5 Principles of Data Ethics for Business (hbs.edu)

# data[].attributes.headline
If you (customer) do not opt out within a “reasonable period of time”—generally about 30 days after the company mails the notice—then the company is free to share certain personal financial information.

# data[].attributes.subject
If you (customer) do not opt out within a “reasonable period of time”—generally about 30 days after the company mails the notice—then the company is free to share certain personal financial information.

# data[].attributes.body
U.S Security and Exchange Commission

PrivacyBrochure012902finalpaginated.indd (sec.gov)

# data[].attributes.headline
Know in which information you can opt out of sharing

# data[].attributes.subject
Know in which information you can opt out of sharing

# data[].attributes.headline
Obtain informed consent from the customer

# data[].attributes.subject
Obtain informed consent from the customer

# data[].attributes.headline
Explicitly state the purpose of collecting information

# data[].attributes.subject
Explicitly state the purpose of collecting information

# data[].attributes.headline
Necessity and Storing of Information Collected

# data[].attributes.subject
Necessity and Storing of Information Collected

# data[].attributes.body
In what way would the information be used?

What is/are the purpose(s) of the collected information?

Who would be able to view the collected information?'

For how long would the information be stored?

# data[].attributes.body
Did the credit card company clearly state how they would handle customer data?

# data[].attributes.body
Does the customer understand the agreement they signed?

# data[].attributes.body
Is the way the store handles data in accordance with the credit card company's policy?

# data[].attributes.body
A customer should learn about how their credit card company handles their information.

# data[].attributes.body
Tisetso might have an existing agreement with the credit card company that allows them to store information for marketing.

# data[].attributes.body
Customers might receive emails or messages about product offerings with their credit card which may be helpful.

# data[].attributes.body
Metrobank's privacy policy states that customer data is shared within the Metrobank Group and to "carefully selected third-party service providers" in informing the customer about products and services relevant to them.

It also states that the data is used for legal duties and settling claims or disputes.

# data[].attributes.body
Collecting unnecessary information for a specific purpose is NOT ethical.

# data[].attributes.body
An individual has ownership over their personal information.

It is UNLAWFUL and UNETHICAL to collect someone's personal data without their consent. (Harvard Business School, 2021)

# data[].attributes.attachment_link.readable_text
Data can be used to drive decisions and make an impact at scale. Yet, this powerful resource comes with challenges. How can organizations ethically collect, store, and use data? What rights must be upheld? The field of data ethics explores these questions and offers five guiding principles for business professionals who handle data.

What Is Data Ethics?

Data ethics encompasses the moral obligations of gathering, protecting, and using personally identifiable information and how it affects individuals.

"Data ethics asks, 'Is this the right thing to do?' and 'Can we do better?'" Harvard Professor Dustin Tingley explains in the Harvard Online course Data Science Principles.

Data ethics are of the utmost concern to analysts, data scientists, and information technology professionals. Anyone who handles data, however, must be well-versed in its basic principles.

For instance, your company may collect and store data about customers' journeys from the first time they submit their email address on your website to the fifth time they purchase your product. If you're a digital marketer, you likely interact with this data daily.

While you may not be the person responsible for implementing tracking code, managing a database, or writing and training a machine-learning algorithm, understanding data ethics can allow you to catch any instances of unethical data collection, storage, or use. By doing so, you can protect your customers' safety and save your organization from legal issues.

Here are five principles of data ethics to apply at your organization.

Free E-Book: A Beginner's Guide to Data & Analytics
Access your free e-book today.
DOWNLOAD NOW

5 Principles of Data Ethics for Business Professionals

1. Ownership

The first principle of data ethics is that an individual has ownership over their personal information. Just as it's considered stealing to take an item that doesn't belong to you, it's unlawful and unethical to collect someone's personal data without their consent.

Some common ways you can obtain consent are through signed written agreements, digital privacy policies that ask users to agree to a company's terms and conditions, and pop-ups with checkboxes that permit websites to track users' online behavior with cookies. Never assume a customer is OK with you collecting their data; always ask for permission to avoid ethical and legal dilemmas.

2. Transparency

In addition to owning their personal information, data subjects have a right to know how you plan to collect, store, and use it. When gathering data, exercise transparency.

For instance, imagine your company has decided to implement an algorithm to personalize the website experience based on individuals' buying habits and site behavior. You should write a policy explaining that cookies are used to track users' behavior and that the data collected will be stored in a secure database and train an algorithm that provides a personalized website experience. It's a user's right to have access to this information so they can decide to accept your site's cookies or decline them.

Withholding or lying about your company's methods or intentions is deception and both unlawful and unfair to your data subjects.

3. Privacy

Another ethical responsibility that comes with handling data is ensuring data subjects' privacy. Even if a customer gives your company consent to collect, store, and analyze their personally identifiable information (PII), that doesn't mean they want it publicly available.

PII is any information linked to an individual's identity. Some examples of PII include:

Full name

Birthdate

Street address

Phone number

Social Security card

Credit card information

Bank account number

Passport number

To protect individuals' privacy, ensure you're storing data in a secure database so it doesn't end up in the wrong hands. Data security methods that help protect privacy include dual-authentication password protection and file encryption.

For professionals who regularly handle and analyze sensitive data, mistakes can still be made. One way to prevent slip-ups is by de-identifying a dataset. A dataset is de-identified when all pieces of PII are removed, leaving only anonymous data. This enables analysts to find relationships between variables of interest without attaching specific data points to individual identities.

Data Privacy: 4 Things Every Business Professional Should Know

4. Intention

When discussing any branch of ethics, intentions matter. Before collecting data, ask yourself why you need it, what you'll gain from it, and what changes you'll be able to make after analysis. If your intention is to hurt others, profit from your subjects' weaknesses, or any other malicious goal, it's not ethical to collect their data.

When your intentions are good-for instance, collecting data to gain an understanding of women's healthcare experiences so you can create an app to address a pressing need-you should still assess your intention behind the collection of each piece of data.

Are there certain data points that don't apply to the problem at hand? For instance, is it necessary to ask if the participants struggle with their mental health? This data could be sensitive, so collecting it when it's unnecessary isn't ethical. Strive to collect the minimum viable amount of data, so you're taking as little as possible from your subjects while making a difference.

5 Applications of Data Analytics in Health Care

5. Outcomes

Even when intentions are good, the outcome of data analysis can cause inadvertent harm to individuals or groups of people. This is called a disparate impact, which is outlined in the Civil Rights Act as unlawful.

In Data Science Principles, Harvard Professor Latanya Sweeney provides an example of disparate impact. When Sweeney searched for her name online, an advertisement came up that read, "Latanya Sweeney, Arrested?" She had not been arrested, so this was strange.

"What names, if you search them, come up with arrest ads?" Sweeney asks in the course. "What I found was that if your name was given more often to a Black baby than to a white baby, your name was 80 percent more likely get an ad saying you had been arrested."

It's not clear from this example whether the disparate impact was intentional or a result of unintentional bias in an algorithm. Either way, it has the potential to do real damage that disproportionately impacts a specific group of people.

Unfortunately, you can't know for certain the impact your data analysis will have until it's complete. By considering this question beforehand, you can catch any potential occurrences of disparate impact.

Ethical Use of Algorithms

If your role includes writing, training, or handling machine-learning algorithms, consider how they could potentially violate any of the five key data ethics principles.

Because algorithms are written by humans, bias may be intentionally or unintentionally present. Biased algorithms can cause serious harm to people. In Data Science Principles, Sweeny outlines the following ways bias can creep into your algorithms:

Training: Because machine-learning algorithms learn based on the data they're trained with, an unrepresentative dataset can cause your algorithm to favor some outcomes over others.

Code: Although any bias present in your algorithm is hopefully unintentional, don't rule out the possibility that it was written specifically to produce biased results.

Feedback: Algorithms also learn from users' feedback. As such, they can be influenced by biased feedback. For instance, a job search platform may use an algorithm to recommend roles to candidates. If hiring managers consistently select white male candidates for specific roles, the algorithm will learn and adjust and only provide job listings to white male candidates in the future. The algorithm learns that when it provides the listing to people with certain attributes, it's "correct" more often, which leads to an increase in that behavior.

"No algorithm or team is perfect, but it's important to strive for the best," Tingley says in Data Science Principles. "Using human evaluators at every step of the data science process, making sure training data is truly representative of the populations who will be affected by the algorithm, and engaging stakeholders and other data scientists with diverse backgrounds can help make better algorithms for a brighter future."

Using Data for Good

While the ethical use of data is an everyday effort, knowing that your data subjects' safety and rights are intact is worth the work. When handled ethically, data can enable you to make decisions and drive meaningful change at your organization and in the world.
Are you interested in furthering your data literacy? Download our Beginner's Guide to Data & Analytics to learn how you can leverage the power of data for professional and organizational success.

# data[].attributes.attachment_link.title
5 Principles of Data Ethics for Business

# data[].attributes.attachment_link.description
Data ethics encompasses the moral obligations of gathering, protecting, and using personally identifiable information and how it affects individuals.

# data[].attributes.body
Clients should have a certain amount of control over how their data is collected and used.

Ask for permission BEFORE the act, not forgiveness after the act. (Texas A&M International University, 2022)

"..if someone is not aware that the information/ knowledge is being collected or of how it will be used, he/she has no opportunity to consent or with- hold consent for its collection and use." (Ethics and Information Technology, 2004)

Ethics in Data Mining (tamiu.edu)
Ethical issues in web data mining (tc-library.org)

# data[].attributes.body
The information gathered identifies groups and not individuals. Is this ethical?

# data[].attributes.body
Tisetso sells hardware and software to over 100,000 customers every year. In her 10-year experience, she had always kept customer billing information which includes postal codes, credit card numbers, ID numbers, etc.