Question

BASED ON NSPE PLEASE HELP ME TO KNOW IT IS RIGHT OR WRONG.

1) Word of a massive customer data breach, the name of the corporation involved and the name of the software engineer who discovered the data breach is leaked through social media. A major national news organization contacts the corporate public information office and is refused an interview. The national news organization then contacts the software engineer named in social media and she also refuses an interview. The software engineer involved is under no ethical obligation to discuss the data breach with the national news organization.

2) By refusing to make public statements about the data breach to a national news organization the software engineer is deceiving the public.

Answer 1

As per the NSPE code of ethics,

1. Section I.1 - NSPE Code of Ethics: Engineers, in the fulfillment of their professional duties, shall hold paramount the safety, health, and welfare of the public.
2. Section I.6. - NSPE Code of Ethics: Engineers, in the fulfillment of their professional duties, shall conduct themselves honorably, responsibly, ethically, and lawfully so as to enhance the honor, reputation, and usefulness of the profession.
3. Section II.1.d. - NSPE Code of Ethics: Engineers shall not permit the use of their name or associate in business ventures with any person or firm that they believe is engaged in fraudulent or dishonest enterprise.
4. Section II.1.e. - NSPE Code of Ethics: Engineers shall not aid or abet the unlawful practice of engineering by a person or firm.
5. Section II.4. - NSPE Code of Ethics: Engineers shall act for each employer or client as faithful agents or trustees.
6. Section III.1. - NSPE Code of Ethics: Engineers shall be guided in all their relations by the highest standards of honesty and integrity.
7. Section III.2.b.: Engineers shall not complete, sign, or seal plans and/or specifications that are not in conformity with applicable engineering standards. If the client or employer insists on such unprofessional conduct, they shall notify the proper authorities and withdraw from further service on the project.

In light of the points referenced above, it can be said that, the best course of action for the software engineer, would be to communicate the fact that the company might be involved in something illegal and corrective action needs to be taken. If the employer insists on carrying on with the unlawful activity, they should alert the proper authorities.

However, they are under no obligation to alert the media or the public.

As per Section III.3,"Engineers shall avoid all conduct or practice that deceives the public". However, this is limited to issuing statements that misrepresent or omit material facts. But then again they are not obliged to issue statements to the media. As such a refusal to issue public statement is not deception.