CDEF study plan
CDEF · Give each week a clear focus.
8 weeks · About 6 hours per week
Foundations of Data Ethics and Ethical Theory
Define and contrast the major normative ethical theories (consequentialism, deontology, virtue ethics, care ethics, contractualism) in your own written words, listing the decision rule each theory supplies for a data-handling dilemma.
Map each ethical theory to at least two concrete data-practice scenarios (e.g., re-identifying a dataset, selling inferred profiles) and explain which theory condemns or permits the act and why.
Distinguish descriptive ethics, normative ethics, and applied ethics, and classify ten data-ethics claims you encounter in news coverage into those categories.
Explain the concepts of informed consent, moral residue, and conflicting duties as they arise when ethical obligations collide with business goals.
Your checkpoint
A one-page comparative table of five ethical theories with decision rules and two applied data scenarios per theory, plus a 300-word reflection on which theory best handles a conflict-of-duties case you chose.
Foundations of Data Ethics and Ethical Theory & Privacy, Data Protection, and Individual Rights
Identify the ethical values underlying privacy (dignity, autonomy, contextual integrity) and explain how each differs from the purely legal notion of compliance.
Apply Nissenbaum's contextual integrity framework to three data flows and judge which violate contextual norms of appropriateness or distribution.
Distinguish the categories of personal data, sensitive data, pseudonymized data, and anonymized data, and explain why anonymization claims require scrutiny.
Analyze how secondary use, data brokerage, and purpose limitation interact, and argue for or against a specific secondary-use practice.
Your checkpoint
A 500-word contextual-integrity analysis of one real data flow (actor, attribute, sender, recipient, transmission principle) with an explicit ethical verdict and the norms it breaches.
Privacy, Data Protection, and Individual Rights
Explain the data-subject rights typically granted by modern data-protection regimes (access, rectification, erasure, portability, objection) and describe one practical obstacle to each.
Evaluate the ethical limits of consent as a legitimizing basis, including consent fatigue, dark patterns, and the problem of group harms that individuals cannot consent away.
Compare individual-rights and collective/group privacy approaches, and argue when group-level protections are ethically required.
Assess trade-offs between privacy and utility in a specific case (e.g., contact tracing, fraud detection) and justify a proportionate design.
Your checkpoint
A decision memo of 600 words evaluating a privacy-versus-utility trade-off, naming the rights engaged, the safeguards proposed, and the residual harms accepted.
Fairness, Bias, and Non-Discrimination in Data and Algorithms
Distinguish the main fairness definitions (demographic parity, equalized odds, predictive parity, calibration, individual fairness) and state the conditions under which each is appropriate.
Demonstrate the mathematical impossibility of satisfying several fairness criteria simultaneously under unequal base rates, and explain the practical implication for model selection.
Trace how bias enters each stage of the data lifecycle (problem formulation, collection, labeling, feature engineering, modeling, deployment) and name a mitigation for each stage.
Identify proxy variables and historical bias in a dataset description, and justify which variables you would remove or reweight.
Your checkpoint
A bias-audit worksheet on a publicly described dataset or model: stage-by-stage bias risks, chosen fairness metric with justification, and a documented trade-off between fairness and accuracy.
Fairness, Bias, and Non-Discrimination in Data and Algorithms & Transparency, Explainability, and Accountability
Explain the difference between transparency, interpretability, and explainability, and match each to the stakeholder who needs it (affected individual, regulator, developer, auditor).
Compare inherently interpretable models with post-hoc explanation methods, and state the fidelity and stability risks of post-hoc explanations.
Analyze the right to explanation as an ethical and legal demand, including when explanations are owed and what content makes one meaningful.
Assign accountability across roles (data owner, model developer, deployer, auditor) for a harmful automated decision, and identify where accountability gaps arise.
Your checkpoint
A stakeholder-explanation matrix mapping four audiences to the type of explanation each needs, the content required, and the accountability owner, illustrated with one automated-decision case.
Data Governance, Stewardship, and Security Ethics & Regulatory and Legal Landscape for Data Ethics
Draft the core components of a data-governance framework: roles, data classification, retention, access control, provenance, and audit trails, and explain the ethical rationale for each.
Compare the legal instruments most relevant to data ethics (GDPR-style data-protection law, sectoral rules, AI-specific regulation, anti-discrimination law) by scope, obligations, and enforcement.
Explain how legal compliance and ethical adequacy can diverge, using at least two examples where lawful conduct remains ethically contested.
Evaluate security-ethics dilemmas such as breach disclosure timing, encryption backdoors, and re-identification research, and justify a defensible position.
Your checkpoint
A governance one-pager for a hypothetical organization: data classification tiers, role responsibilities, retention rules, and a table matching five legal obligations to their ethical rationale and enforcement mechanism.
Ethical Decision-Making Frameworks and Case Analysis
Apply at least two structured decision frameworks (e.g., a principles-based test, a stakeholder-impact analysis, a precautionary approach) to the same case and compare the conclusions.
Construct a full ethical case analysis: facts, stakeholders, values, options, harms, trade-offs, decision, justification, and monitoring plan.
Identify common reasoning failures in data-ethics decisions (technological solutionism, diffusion of responsibility, metric fixation, hindsight bias) and describe a countermeasure for each.
Evaluate a documented AI or data-ethics failure and attribute the root causes to specific decision points rather than to individuals alone.
Your checkpoint
A complete written case analysis of 800 words using a named framework, including a stakeholder-impact table, the chosen option, its justification, and monitoring indicators.
Emerging Technologies and Societal Impact & Organizational Culture, Professional Conduct, and Whistleblowing
Assess the societal-impact questions raised by generative AI, large-scale model training data, biometric surveillance, and synthetic media, and state the ethical stakes of each.
Explain how organizational incentives, metrics, and reporting lines shape ethical conduct, and propose two structural changes that reduce misconduct risk.
Describe the professional obligations of a data practitioner who discovers harmful practice, including escalation paths, documentation, and the ethics of whistleblowing.
Consolidate the whole syllabus by re-testing your weakest areas and correcting the misconceptions your practice results reveal.
Your checkpoint
A two-part portfolio: a 400-word emerging-technology risk brief and a 400-word whistleblowing scenario response with escalation steps, plus a scored self-assessment of all nine domains identifying the three weakest for final review.
Milestones
Week 2: Without notes, explain five ethical theories and correctly classify eight of ten mixed scenario statements by the theory that best supports them.
Week 4: Define four fairness metrics from memory, explain the incompatibility between them under unequal base rates, and defend your chosen metric for a stated use case.
Week 6: Produce a governance one-pager that a reviewer judges complete on all five components, and correctly match five legal obligations to their enforcement mechanisms.
Week 8: Complete a timed 40-question mixed-domain self-test with at least 80 percent correct and a written log of every missed item and its corrected reasoning.