Differences

This shows you the differences between two versions of the page.

--- report:eth [2026/03/25 23:14] – [6.2 Engineering Ethics] team5
+++ report:eth [2026/04/20 19:05] (current) – [6.4 Environmental Ethics] epsatisep
@@ Line 6: / Line 6: @@
 It covers:
-- Engineering Ethics: An analysis of passenger interaction and consent, focusing on data privacy (the non-collection of personal data in Phase 1 versus audio storage in Phase 2) and accessibility concerns for vulnerable, disabled, or sensory-sensitive users.
+- Engineering Ethics: An analysis of passenger interaction and consent, focusing on data privacy (the non-collection of personal data in Phase 1 versus audio storage in Phase 2) and accessibility concerns.
-- Sales and Marketing Ethics: An evaluation of the project's funding models (public interest versus commercial sponsorship), emphasizing the need for transparency and the protection of user-generated content from commercial exploitation.
+- Sales and Marketing Ethics: An evaluation of the project's funding models (public interest versus commercial sponsorship), highlighting the need for transparency and the protection of user-generated content from commercial exploitation.
-- Environmental Ethics: A reflection on the ecological footprint of the chosen hardware and infrastructure, addressing the use of biodegradable PLA, the management of electronic waste, and the energy consumption of web hosting.
+- Environmental Ethics: Reflection on the ecological footprint of the chosen hardware and infrastructure. Addressing use of Nanovia PA Rail, the management of electronic waste, and the energy consumption of web hosting.
-- Liability: A discussion on the distribution of responsibility regarding physical and electrical safety in a high-traffic transit environment, as well as the accountability for moderating potentially harmful user-generated audio content.
+- Liability: A discussion on the distribution of responsibility regarding physical and electrical safety in a traffic transit environment, and accountability for moderating potentially harmful user-generated audio content.
 - Summary: The final conclusions detailing the specific design, material, and technical choices implemented by the team to uphold these ethical standards.
-==== 6.2 Engineering Ethics ====
-  * Passengers are informed about the installation via a notice on the carriage door - is that enough
-**Phase 1:**
-  * passengers choose whether to grab the handrail
-  * no personal data is collected — velostat only detects pressure, not who is pressing
-  * the system does not store, transmit, or log any data
-Accessibility:
+==== 6.2 Engineering Ethics ====
-  * the installation relies on grabbing a handrail — does it exclude passengers who don't or can't?
-  * sensitive users: how to not exclude light sensitive users
-  * how to make passengers aware of whats happening so they don’t expereience confusion: elderly, people with cognitive issues, vision impaired users
-**Phase 2:**
+Connect is designed to interact with passengers in a shared public space.
-  * voice messages are user-generated and voluntarily submitted
+This raises questions about professional responsibility, user consent, and
-  * the platform stores audio content — who owns it, who has access, how long is it kept?
+inclusive design. The IEEE Code of Ethics requires engineers to hold paramount the safety, health, and welfare of the public, and to protect the privacy of others [(ieee2020ethics)]. These principles works as a guidance when the team approach passenger interaction and data handling throughout the project.
-  * reflective questions prompt personal sharing
+\\
+\\
+**Informed interaction and passive consent**\\
+Passengers interact with the installation by gripping a handrail, which is an action they would perform regardless of the installation's presence. To ensure that passengers are aware of the installation, an informational notice is
+placed on the carriage door. This approach provides passive consent: passengers are informed before entering, and their engagement remains voluntary. No active sign-up or agreement is required. Since Phase 1 collects no personal data, the installation falls outside the scope of the EU General Data Protection Regulation [(gdpr2016)], which applies only where personal data is processed.\\
+\\
+**Privacy and data minimisation**\\
+In Phase 1, the system uses velostat pressure-sensitive sheets to detect grip. Velostat registers physical pressure only: it
+does not identify who is pressing, collect biometric data, or transmit any personal information. No data is stored or logged at any point in Phase 1. This distinguishes the system from biometric sensing technologies and minimises privacy risk, in line with the principle of data minimisation established under the GDPR [(gdpr2016)].\\
+\\
+In Phase 2, passengers may voluntarily choose to submit a message via a web platform accessed through a QR code near the exit doors. Participation is entirely optional. However, voice messages constitute personal user-generated content, and the platform must handle this responsibly in accordance with the GDPR [(gdpr2016)]. Voice messages are transcribed and reviewed through automated content moderation tools prior to being made available on the platform. Questions of data ownership and retention period should be clearly communicated to users on the platform.\\
+\\
+**Accessibility**\\
+The installation relies on passengers gripping a handrail. To ensure that the experience is accessible to all passengers, including those who use wheelchairs, mobility aids, or who cannot reach a standard handrail, a pressure-sensitive point is located at a lower position on the pole. This allows passengers to interact with the installation regardless of height or mobility. The visual output on the ceiling remains visible to all passengers whether or not they interact directly. Phase 2 is accessible to passengers with a smartphone.\\
-**Content moderation for phase 2**
-When a user submits a message, it gets sent to OpenAI's Moderation API before anything is saved. The API returns a verdict — if it passes, the message is stored in Supabase and published. If flagged, it's rejected and the user gets a generic error message. For voice messages, an extra step is added: Whisper API transcribes the audio to text first, then that transcript goes through the same moderation check.
-Why this approach:
-Context-aware, not just keyword matching — harder to work around
-Both APIs (Moderation + Whisper) are free
-Minimal implementation effort — a single check added to the existing submit flow
-Limitations to mention:
-Moderation API is text-only, so voice requires the transcription step first
-Inaccurate transcriptions could cause moderation to miss something
-Dependent on OpenAI's availability — if it goes down, we need a fallback strategy
-Not perfect, edge cases can slip through
 ==== 6.3 Sales and Marketing Ethics ====
+Although Connect originates as a student project within the European Project Semester at ISEP, it is developed and presented as a real product concept with potential for deployment in public transport systems. This framing means that ethical considerations around commercialisation are relevant. The IEEE Code of Ethics requires that engineers act in a manner that avoids
+deceptive acts and maintains honesty and integrity in all communications [(ieee2020ethics)].\\
+\\
+**Potential customer types**\\
+Two types of customers have been identified. One is a municipality or public transport authority adopting Connect in the public interest represents a relatively unproblematic relationship: the installation's stated goal to reduce social isolation in public spaces aligns with the mandate of public institutions. A commercial sponsor introduces more complex considerations. If a private entity funds the installation, it is important that the sponsor's interests do not conflict with or overshadow the project's original purpose. Passengers should not be exposed to undisclosed commercial influence.\\
+\\
+**Transparency toward passengers**\\
+Regardless of who funds the installation, passengers should be clearly informed about the nature of the project and who is behind it. The informational notice on the carriage door serves this purpose. If the installation is commercially sponsored, this should be disclosed in that notice. Marketing the installation as a neutral public art piece while concealing a commercial interest would conflict with the principle of honest communication [(ieee2020ethics)].\\
+\\
+**Data and commercial interests in Phase 2**\\
+In Phase 1, no user data is collected, which eliminates the risk of data monetisation. In Phase 2, voice messages are submitted voluntarily by users and constitute personal data subject to the GDPR [(gdpr2016)]. A commercial sponsor must not have access to this content for marketing purposes. The team's position is that user-generated content in Phase 2 belongs to the platform and is used solely for the purpose of the installation, and not for commercial exploitation.\\
+==== 6.4 Environmental Ethics ====
-Two potential customer types with different ethical implications:
+Environmental responsibility was considered during the material selection and system design phases of the project. The choices made reflect an awareness of the environmental impact of the components  used.\\
+\\
-**Municipality, metro company**\\
+**Enclosure material**\\
-Public interest framing, supporting social cohesion — relatively unproblematic ethically\\
+The electronics enclosure is 3D printed using Nanovia PA Rail, a composite polyamide filament certified to NF EN 45545-2 for use in railway environments [(nanovia_pa_rail)]. The material was selected for its fire safety properties, because it is non-flammable, low smoke, and low toxicity characteristics [(nanovia_pa_rail)]. It is a petroleum-based polymer, which is not  biodegradable, and end-of-life disposal should be handled accordingly. We were initially planning on using PLA, which would be biodegradable, but the safety requirements of the deployment was considered more important.\\
-**Commercial sponsor**\\
+\\
-Raises questions about whose interests the installation serves — does a sponsor's branding or agenda conflict with the project's message?
+**Electronic components**\\
+The system uses a WEMOS C3 Mini microcontroller (ESP32-C3-based), WS2812B addressable LED strips, MCP2551 CAN bus transceivers, and velostat pressure-sensing sheets, which are all electronic components. Their manufacture involves energy processes and can involve rare materials. As the system contains electronic components, it falls within the scope of the Waste Electrical and Electronic Equipment (WEEE) Directive (2012/19/EU), which requires that electronic waste is collected and processed through certified facilities rather than disposed of as general waste [(weee2012)].\\
-Phase 1:
+\\
-  * no user data is collected, so commercial exploitation of data is not possible — this is an ethical strength worth stating
+**Phase 2 infrastructure**\\
-Phase 2:
+The web platform introduced in Phase 2 requires server hosting, which carries an associated  environmental cost that should be acknowledged alongside the physical components of the  installation.\\
-  * voice messages are personal user content — a commercial sponsor having access to or ownership of this data would be ethically problematic and needs to be addressed
+==== 6.5 Liability ====
-**Transparency**
-  * Passengers should know who is behind the installation and whether it is commercially sponsored — the carriage door notice becomes relevant here too
-  * Risk of the installation being used as a marketing vehicle rather than a genuine public art piece — how does the team ensure the original intent is preserved regardless of who funds it?
-==== 6.4 Environmental Ethics ====
-  * PLA enclosure is biodegradable
-  * Electronic components (ESP32, WS2812B LEDs) are standard consumer electronics — e-waste is a real concern even if not fully resolved\\
-Phase 2: the web platform requires server infrastructure — minor but worth acknowledging (energy use, hosting)
-==== 6.5 Liability ====
-Phase 1: who is responsible if something fails electrically or physically in a public space?
+Because Connect is installed in a public transport environment and involves direct physical contact by passengers, liability is a relevant concern. The following considerations apply to both phases of the project.\\
-Safety standards relevant to public transport (electrical safety, passenger contact with hardware)\\
+\\
-Phase 2: who is liable for the content of voice messages? Harmful, offensive, or distressing content is a real risk
+**Physical safety (Phase 1)**\\
-The team as designers vs. the metro operator as host — where does responsibility sit?
+Passengers grip handrails that contain embedded velostat sheets, wiring, and LED components. The materials must be safe for repeated physical contact and must not create electrical hazards. The electronics enclosure is designed to contain all active components, and the handrail surface presented to passengers should be free of exposed components. The General Product Safety Directive (GPSD) requires that all products placed in public use are safe and do not pose excessive risk to users [(gpsd2001)]. The Low Voltage Directive (LVD) establishes safety standards for electrical equipment and applies to the electronic components used in the installation [(lvd2014)]. Responsibility for  ensuring compliance lies with the team as designers, in coordination with the metro operator as the host environment.\\
-==== Summary ====
+\\
-//Provide here the conclusions of this chapter and make the bridge to the next chapter.//
+**User-generated content (Phase 2)**\\
+The introduction of a voice message platform in Phase 2 raises the question of liability for user-generated content. Passengers may submit messages that are harmful, offensive, or distressing to other users. Voice messages are transcribed and reviewed through automated content moderation tools prior to being made available on the platform. The platform must also comply with the GDPR regarding storage, access, and retention of voice data [(gdpr2016)]. While automated moderation reduces risk, it does not eliminate it entirely. What kind of content that is not permitted need to be defined clearly for the user.\\
+\\
+**Sponsor and operator responsibility**\\
+If the installation is commercially sponsored or operated by a transit authority, the distribution of liability between the team as designers, the sponsor, and the metro operator should be clearly defined prior to any deployment. This is particularly relevant for Phase 2, where the platform
+hosts user content over time. The data stored need to be separated from commercial interests.\\
+==== 6.6 Summary ====
-Based on this ethical and deontological analysis, the team chose <specify here the design, technique(s) material(s), component(s)> for the following <specify here the relevant ethics-related reasons>.
+This chapter has examined the ethical dimensions of the Connect installation
-Consequently, the team decided to design a solution with the following <specify here the features added for ethical reasons>.
+across engineering ethics, sales and marketing ethics, environmental ethics,
+and liability. The analysis informed a number of concrete design decisions.\\
+\\
+Based on this ethical and deontological analysis, the team chose velostat pressure sheets as the sensing technology which does not store data and Nanovia PA Rail as the enclosure material, due to safety reasons. The team also adopted automated content moderation for the Phase 2 platform to mitigate the risks associated with user-generated content.\\
+\\
+The team decided to design a solution with passive consent signage on the carriage door, an accessible sensor point at a lower position on the pole, no data logging in Phase 1, and a content moderation pipeline in Phase 2. The following chapter describes the development of the project.\\