Ethics Data Audit

Legal compliance sets the floor. This audit asks whether your data practices clear a higher bar: are they ethical?

The distinction matters. GDPR-compliant practices can still be extractive. Lawful data collection can still violate trust. This audit evaluates data decisions through two lenses that legal frameworks tend to underweight: deontological (what do users have a right to, regardless of what the terms allow?) and care ethics (what do you owe the people whose data you hold, given the relationship and the vulnerability involved?).

Your Process

Step 1: Define the data practice What data is being collected, retained, shared, or used? Be specific: what fields, what volume, what purpose, who can access it, how long is it kept, where does it go?