Table 2 The ethical considerations for... | Emerald Publishing

Table 2

The ethical considerations for IoT usage in an SME based on the PAPA extension categories

	Motivation	Security
Implications for an individual employee	Why is IoT used and who does it benefit?	Can the data collection and processing affect the individual's employment?
Implications for an individual employee	Can the collected data be used to harm the employee (intentionally or unintentionally)?	Is the employee able to control the intrusiveness of data collection at work and off duty?
Implications for general management	What are the risks and benefits for each stakeholder of IoT?	How has the management ensured the employee's personal safety and position when deploying IoT?
Implications for general management	Are the benefits greater than risks to all stakeholders?	Is management allowed to practice personal profiling and decision-making based on the collected data?
Implications for data management	Which data are collected and why?	How is the intrusiveness of data collection managed and limited?
Implications for data management	What are the risks that data set can lead to?	How is the data collection and processing restricted to avoid negative consequences towards employees?
Implications for communication	How is the motivation for IoT use explained?	Are the employees thoroughly informed about the possible personal consequences of data collection and processing?
Implications for communication	How are benefits and risks explained in a transparent manner?	What precautionary measures have been taken to avoid harmful information sharing?
Implications for the regulatory environment and society	Are the actions based on not only the current regulations, but also best intentions and risk avoidance?	Does the company follow the current laws and regulations related to ensuring the employees' personal safety?
Implications for the regulatory environment and society	Does the IoT cause possible risks to any stakeholders, environment or society at large?	Does the company consider the ethical aspects in addition to the legal limitations?

	Motivation	Security
Implications for an individual employee	Why is IoT used and who does it benefit?	Can the data collection and processing affect the individual's employment?
Implications for an individual employee	Can the collected data be used to harm the employee (intentionally or unintentionally)?	Is the employee able to control the intrusiveness of data collection at work and off duty?
Implications for general management	What are the risks and benefits for each stakeholder of IoT?	How has the management ensured the employee's personal safety and position when deploying IoT?
Implications for general management	Are the benefits greater than risks to all stakeholders?	Is management allowed to practice personal profiling and decision-making based on the collected data?
Implications for data management	Which data are collected and why?	How is the intrusiveness of data collection managed and limited?
Implications for data management	What are the risks that data set can lead to?	How is the data collection and processing restricted to avoid negative consequences towards employees?
Implications for communication	How is the motivation for IoT use explained?	Are the employees thoroughly informed about the possible personal consequences of data collection and processing?
Implications for communication	How are benefits and risks explained in a transparent manner?	What precautionary measures have been taken to avoid harmful information sharing?
Implications for the regulatory environment and society	Are the actions based on not only the current regulations, but also best intentions and risk avoidance?	Does the company follow the current laws and regulations related to ensuring the employees' personal safety?
Implications for the regulatory environment and society	Does the IoT cause possible risks to any stakeholders, environment or society at large?	Does the company consider the ethical aspects in addition to the legal limitations?