Computer science security research and human subjects: emerging considerations for research ethics boards

Ethics governance development: The case of the Menlo Report

The 2012 Menlo Report was an effort in which a group of computer scientists, US government funders, and lawyers produced ethics guidelines for research in information and communications technology (ICT). Here we study Menlo as a case of what we call ethics governance in the making, finding that this process examines past controversies and enrols existing networks to connect the everyday practice of ethics with ethics as a form of governance. To create the Menlo Report, authors and funders relied on bricolage work with existing, available resources, which significantly shaped both the report's contents and impacts. Report authors were motivated by both forward- and backward-looking goals: enabling new data-sharing as well as addressing past controversies and their implications for the field's body of research. Authors also grappled with uncertainty about which ethical frameworks were appropriate and made the decision to classify much network data as human subjects data. Finally, the Menlo Report authors attempted to enrol multiple existing networks in governance through appeals to local research communities as well as taking steps towards federal rulemaking. The Menlo Report serves as a case study in how to study ethics governance in the making: with attention to resources, adaptation, and bricolage, and with a focus on both the uncertainties the process tries to repair, as well as the new uncertainties the process uncovers, which will become the site of future ethics work.

First do no harm: An exploration of researchers' ethics of conduct in Big Data behavioral studies

Research ethics has traditionally been guided by well-established documents such as the Belmont Report and the Declaration of Helsinki. At the same time, the introduction of Big Data methods, that is having a great impact in behavioral research, is raising complex ethical issues that make protection of research participants an increasingly difficult challenge. By conducting 39 semi-structured interviews with academic scholars in both Switzerland and United States, our research aims at exploring the code of ethics and research practices of academic scholars involved in Big Data studies in the fields of psychology and sociology to understand if the principles set by the Belmont Report are still considered relevant in Big Data research. Our study shows how scholars generally find traditional principles to be a suitable guide to perform ethical data research but, at the same time, they recognized and elaborated on the challenges embedded in their practical application. In addition, due to the growing introduction of new actors in scholarly research, such as data holders and owners, it was also questioned whether responsibility to protect research participants should fall solely on investigators. In order to appropriately address ethics issues in Big Data research projects, education in ethics, exchange and dialogue between research teams and scholars from different disciplines should be enhanced. In addition, models of consultancy and shared responsibility between investigators, data owners and review boards should be implemented in order to ensure better protection of research participants.

Working Through Ethics Review of Big Data Research Projects: An Investigation into the Experiences of Swiss and American Researchers

The employment of Big Data as an increasingly used research method has introduced novel challenges to ethical research practices and to ethics committees (ECs) globally. The aim of this study is to explore the experiences of scholars with ECs in the ethical evaluation of Big Data projects. Thirty-five interviews were performed with Swiss and American researchers involved in Big Data research in psychology and sociology. The interviews were analyzed using thematic coding. Our respondents reported lack of support from ECs, absence of appropriate expertise among members of the boards, and lack of harmonized evaluation criteria between committees. To implement ECs practices we argue for updating the expertise of board members and the institution of a consultancy model between researchers and ECs.

Digital Trespass: Ethical and Terms-of-Use Violations by Researchers Accessing Data From an Online Patient Community

With the expansion and popularity of research on websites such as Facebook and Twitter, there has been increasing concern about investigator conduct and social media ethics. The availability of large data sets has attracted researchers who are not traditionally associated with health data and its associated ethical considerations, such as computer and data scientists. Reliance on oversight by ethics review boards is inadequate and, due to the public availability of social media data, there is often confusion between public and private spaces. In addition, social media participants and researchers may pay little attention to traditional terms of use. In this paper, we review four cases involving ethical and terms-of-use violations by researchers seeking to conduct social media studies in an online patient research network. These violations involved unauthorized scraping of social media data, entry of false information, misrepresentation of researcher identities of participants on forums, lack of ethical approval and informed consent, use of member quotations, and presentation of findings at conferences and in journals without verifying accurate potential biases and limitations of the data. The correction of these ethical lapses often involves much effort in detecting and responding to violators, addressing these lapses with members of an online community, and correcting inaccuracies in the literature (including retraction of publications and conference presentations). Despite these corrective actions, we do not regard these episodes solely as violations. Instead, they represent broader ethical issues that may arise from potential sources of confusion, misinformation, inadequacies in applying traditional informed consent procedures to social media research, and differences in ethics training and scientific methodology across research disciplines. Social media research stakeholders need to assure participants that their studies will not compromise anonymity or lead to harmful outcomes while preserving the societal value of their health-related studies. Based on our experience and published recommendations by social media researchers, we offer potential directions for future prevention-oriented measures that can be applied by data producers, computer/data scientists, institutional review boards, research ethics committees, and publishers.

Ethics and Phishing Experiments

Phishing is a fraudulent form of email that solicits personal or financial information from the recipient, such as a password, username, or social security or bank account number. The scammer may use the illicitly obtained information to steal the victim's money or identity or sell the information to another party. The direct costs of phishing on consumers are exceptionally high and have risen substantially over the past 12 years. Phishing experiments that simulate real world conditions can provide cybersecurity experts with valuable knowledge they can use to develop effective countermeasures and prevent people from being duped by phishing emails. Although these experiments contravene widely accepted informed consent requirements and involve deception, we argue that they can be conducted ethically if risks are minimized, confidentiality and privacy are protected, potential participants have an opportunity to opt out of the research before it begins, and human subjects are debriefed after their participation ends.

Quantifying the Twitter Influence of Third Party Commercial Entities versus Healthcare Providers in Thirteen Medical Conferences from 2011 - 2013

Introduction

Twitter channels are increasingly popular at medical conferences. Many groups, including healthcare providers and third party entities (e.g., pharmaceutical or medical device companies) use these channels to communicate with one another. These channels are unregulated and can allow third party commercial entities to exert an equal or greater amount of Twitter influence than healthcare providers. Third parties can use this influence to promote their products or services instead of sharing unbiased, evidence-based information. In this investigation we quantified the Twitter influence that third party commercial entities had in 13 major medical conferences.

Methods

We analyzed tweets contained in the official Twitter hashtags of thirteen medical conferences from 2011 to 2013. We placed tweet authors into one of four categories based on their account profile: healthcare provider, third party commercial entity, none of the above and unknown. We measured Twitter activity by the number of tweet authors per category and the tweet-to-author ratio by category. We measured Twitter influence by the PageRank of tweet authors by category.

Results

We analyzed 51159 tweets authored by 8778 Twitter account holders in 13 conferences that were sponsored by 5 medical societies. A quarter of all authors identified themselves as healthcare providers, while only 18% could be identified as third party commercial entities. Healthcare providers had a greater tweet-to-author ratio than their third party commercial entity counterparts (8.98 versus 6.93 tweets). Despite having less authors and composing less tweets, third party commercial entities had a statistically similar PageRank as healthcare providers (0.761 versus 0.797).

Conclusion

The Twitter influence of third party commercial entities (PageRank) is similar to that of healthcare providers. This finding is interesting because the number of tweets and third party commercial entity authors required to achieve this PageRank is far fewer than that needed by healthcare providers. Without safety mechanisms in place, the Twitter channels of medical conferences can devolve into a venue for the spread of biased information rather than evidence-based medical knowledge that is expected at live conferences. Continuing to measure the Twitter influence that third parties exert can help conference organizers develop reasonable guidelines for Twitter channel activity.

Detecting, preventing, and responding to "fraudsters" in internet research: ethics and tradeoffs

Internet-based health research is increasing, and often offers financial incentives but fraudulent behavior by participants can result. Specifically, eligible or ineligible individuals may enter the study multiple times and receive undeserved financial compensation. We review past experiences and approaches to this problem and propose several new strategies. Researchers can detect and prevent Internet research fraud in four broad ways: (1) through the questionnaire/instrument (e.g., including certain questions in survey; and software for administering survey); (2) through participants' non-questionnaire data and seeking external validation (e.g., checking data for same email addresses, usernames, passwords, and/or fake addresses or phone numbers; (3) through computer information, (e.g., IP addresses and cookies), and 4) through study design (e.g., avoid lump sum compensation and interviewing participants). These approaches each have pros and cons, and raise ethical, legal, and logistical questions, given that ethical tensions can emerge between preserving the integrity of research vs. protecting the privacy and confidentiality of study respondents. While past discussions concerning the ethics of online research have tended to focus on the participants' ability to trust the researchers, needs now arise to examine researchers' abilities to trust the participants. This analysis has several critical implications for future practice, policy, and research.