8.1 Introduction
We can observe various forms of harm, wrongdoing and crime in the digital environment, violating traditional or newly modified digital human rights.Footnote 1 ‘Globalisation, digitalisation and smart technologies have escalated the propensity and severity of cybercrime.’Footnote 2 A serious increase in cybercrime and cyberattacks has been reported,Footnote 3 and estimations for the year 2020 predicted that cybercrime would cost the global economy around US$1 trillion, which is a 50 per cent increase in comparison with 2018.Footnote 4 However, the financial impact is not the only problem resulting from the unregulated possibilities in the digital world. For instance, as stated in 2018, around 45 per cent of adult internet users in the UK had experienced some form of online harm;Footnote 5 potential harm is affecting not just adults but also children,Footnote 6 and not just private individuals but also larger entities such as companies, organisations, and so on. The harm can also be psychological, social, ethical, and medical.
Many experts, leaders, stakeholders, even laypeople claim that legal restrictions are what would help. At first glance, legal regulations have several advantages:
they provide clear guidelines for everyone,
they set national/international standards,
the legal system is based on institutions,
having an authoritative institution facilitates reporting violations of rights.
The legal system clearly has the advantage that rules when well written are transparent and clear to everyone, and provide a set of standards and guidelines about what is prohibited and permitted in the digital realm.Footnote 7 The legal rules provide national and international standards of conduct, which can be helpful to orientate agents, citizens, and other legal persons. Rules can be guaranteed by institutions, which represent the distribution of power between the legislature, executive, and judiciary. As pointed out by many social contract theorists (e.g., John Locke),Footnote 8 it is reasonable to transfer certain duties; for example, judging and punishing wrongdoers, to an entity that is above individuals and thus independent and acts in a just and commensurate manner. The violation of rights can then be claimed to the authority, and the authority provides protection for individuals. For instance, internet fraud, such as stealing an identity, can be reported to the police, and they can then act accordingly to execute the law.
8.2 Problems Associated with the Legal Regulation of the Digital Realm
However, there is also the other side of the coin that legal restrictions are not an ideal and flawless solution. The problems associated with legal rules include, for instance:
the development of legal regulations is too slow,Footnote 9
legal standards are not yet developed because the cause of human rights violations in the online realm is not yet adequately understood,Footnote 10
the field and the legal context is country specific,Footnote 11
there can be vagueness, limited scope, and conflicting interpretations of the law,Footnote 12
law enforcement can be problematic,Footnote 13
some crimes go unreported.Footnote 14
The problem of the regulation of digital issues stems from the rapid exponential growth of what is possible with digital technology and the comparatively slow development of legal restrictions. ‘As technological developments take place faster than regulation can catch up, the guidelines and rules that have been adopted have not provided solutions to many of the issues, including the human rights implications of digital activities.’Footnote 15
A related problem is that the restriction of certain areas focusing on, for instance, the regulation of digital human rights is not yet fully understood, and thus the regulation is not yet developed in some areas at all. As an example, we could mention that ‘a threat of cancel culture and social engineering in the context of elections where the harm of manipulated voting is obvious but how exactly the prohibited acts should be defined or how they could be prevented is an open question. Similarly, a question to what extent the risk of addiction to the Internet could provide entitlements to health care services.’Footnote 16
A more general problem of the law and legal restrictions is that situations are often country specific, and it is difficult to find common ground for legal norms in the international global context. Countries have citizens and inhabitants with various beliefs and they represent the plurality of diverse cultures. Other problems related to legal rules stem from how they are written and presented, and this is related to uncertainty, limited scope, or divergent interpretations of law. Another interesting aspect of law, the legal system, and the state distribution of power is law enforcement. The problem is thus not only whether the legal rules are well made, timely, and targeting relevant issues, but also whether the violation of the law is treated in a relevant manner and the criminals punished.
Similarly, the detection of a violation of the law needs to be well monitored in order to catch the criminal. If the system fails, for instance, if the victim does not report a bully because the victims are not aware of their rights or are afraid to do so, the legal regulation does not fully help diminish the problem. In the digital world, the problem of unreported violations and harms can be quite fruitful owing to its potential for anonymity. According to the US Federal Bureau of Investigation (FBI), approximately only one in seven cybercrimes were reported in 2017.Footnote 17
This prompts a question: How can we achieve better regulation of the digital realm?
It seems there are multiple possible solutions, and they can be summed up as follows within the framework of a better legal system:
better regulation, better laws, and law enforcement,
developing better legal standards,
better law enforcement,
stricter regulation and control.
There are many emerging developments in the national and international context of aiming to better regulate the digital environment.Footnote 18 However, as ideal as it may seem at first sight, these approaches also have their Achilles heels, including:
not all societies and citizens are developed enough to be able to follow the law and manage proper law enforcement,Footnote 19
the motivation for action is mostly – not to get caught.
It is obvious that some societies are suffering with greater problems of law enforcement. For instance, this is related to the high level of corruption that affects the impartiality, justness, and fairness in the decision-making of responsible agents.Footnote 20
8.3 The Problem of Surveillance
One option would be to say, all right, we can still make it work and focus on the following:
monitoring agents,
even stricter regulations – cameras, tracking devices everywhere, use of facial recognition,Footnote 21
provide better control and data about who is doing what, so that the responsible institutions can protect citizens and other stakeholders.
There is quite a fruitful debate currently regarding surveillance systems, for instance in China, but also other countries. As pointed out by Peter Königs, non-democratic states nowadays and in recent history ‘known for their extensive surveillance systems include the GDR, the People’s Republic of China, the Soviet Union, and North Korea. In the past few decades, however, established liberal democracies have been increasingly ready to monitor their citizens on a massive scale. One notorious surveillance program run by an alliance of democracies was uncovered by Edward Snowden.’Footnote 22 The proponents of surveillance present arguments regarding greater safety and crime prevention, and the resulting benefits for everyone involved. Unfortunately, such Big Brother concepts are not ideal.Footnote 23 ‘Government surveillance and the erosion of privacy it is associated with are being discussed as a cause of distrust and feelings of vulnerability, as a potential source of discrimination and unjust domination, and as a threat to democracy and the integrity of the public sphere, to name but a few concerns.’Footnote 24 Therefore, as mentioned earlier, reducing harms in the digital realm by increasing surveillance also has its downsides, which stem from:
the right to privacy,Footnote 25
possible abuses of information, data, systems.Footnote 26
The concept of the protection of privacy is central in relation to human rights, and relates to the threat of the abuse of information, its manipulation, use in an inappropriate context, even stealing an identity. For instance, the idea of transparency is helping not to conflate the protection of privacy by masking other inappropriate actions, such as cheating, stealing, and other forms of wrongdoing.
8.4 Motivations
Another aspect of this problem relates to what motivates a person or agent in the digital world. The motivation not to get caught.
If the agents are mostly motivated to not do certain things (e.g., cheat online) by the idea of not getting caught, they may try to find ways to avoid punishment. The problem is in the system but also in human character. For instance, the ancient philosopher Aristotle already sketched the problem of the human character in relation to the state.Footnote 27
Even with controlling devices and greater surveillance, there is a danger that the people who work with them can manipulate the data or evidence, and can be bribed to do so. So there is the question of who controls those who are in power and those who should control others. Of course, there again the solution of the division of power emerges, but as we can observe even that can be abused if individuals with an unsuitable character end up in these roles.
When we consider the legal restrictions, we may ask: What is the motivation to act legally?
It seems that the motivation is, as already sketched out, not to get caught. We can, of course, speculate and consider that in the end it is not important to act based on certain motives, but the consequences are what matters. Even if we act in compliance with the law and out of a fear of punishment, we can still act well and the consequences can be good. Nevertheless, it seems this is not always optimal either, as there is still room to act in ways that are not so beneficial for society if we expect no one can catch us.
Therefore, we may go further and ask: What if no one can see us?
The digital world offers us several potential threats that are often not so prevalent offline, related to anonymity, the idea of ‘no identity’, or creating a ‘new’ identity.Footnote 28 It seems to be easier to remain anonymous using a fake identity online than offline. Of course, even in the pre-digital era, we could send anonymous (paper) letters, or wear masks, or modulate our voice; however, nowadays the possibilities in the online world are more numerous and can have a much greater impact. It is possible to identify an IP address or other digital traces; however, at the same time there are ways to avoid being spotted.
8.5 Individual Regulation
There are various forms of regulation online, but they are also related to different motivations. Since the idea of regulation presented here is not flawless, we should consider other options. Therefore, there emerges the issue of individual regulation.
Our motivation should be more than just to not get caught and could also include:
individual responsibility,
internal/intrinsic regulation/ motivation.
By individual responsibility, we mean the responsible behaviour of an individual, considering the consequences of his or her actions and being aware and able to be held accountable for them. The responsible person is aware of his or her own actions and makes qualified judgements and decisions. He or she does not rely only on external forms of authority, telling him or her what to do and what not, but also on rational understanding of the situation.
The idea of internal or intrinsic regulation and motivation exists in contrast with external, extrinsic regulation and motivation. An example of external, extrinsic regulation is a police officer standing at an intersection regulating the traffic, where it affects motivation, and people act in the requested manner in the given situation in order to not incur a fine or end up in jail.
On the other hand, the idea of intrinsic or internal regulation is about regulation not from outside but rather from inside. Therefore, to put it simply, there is no policeman on the street but our internal policeman or conscience tells us we should not exceed the speed limit. The reason is, for instance, because it will very likely endanger other passengers, pedestrians, or even ourselves, and it is not good to take such a risk without sufficient justification.
To imagine a situation in the digital realm, we can think of examples such as an authority checking the identity of a user by validating their credentials (e.g., password, biometric data, phone number) as a form of external regulation preventing users accessing another person’s account. The motivation for not trying to access someone else’s account is the fear of punishment. On the other hand, internal regulation in this situation is when the user is aware that it is not right to hack into another person’s account and steal his or her identity or finances.
However, we may ask whether there is a necessary connection between internal regulation and internal motivation, or external regulation and external motivation. Of course, it seems it is not so straightforward, since it is possible to have, for instance, external regulation and at the same time internal motivation to act in compliance with the law.
At the same time, we also need to be aware that internal or intrinsic motivation and the related regulations also have some limits; for instance, they:
need time and effort to develop,
rely on people’s conscience.
There are also problems with regulations set and adopted by private companies; they can set their own standards and create diverse responses, as there are many (often mostly financial) interests. Then such rules are often referred to as ‘ethics washing’; that is, they pretend the company is regulated to the benefit of society but in fact the benefit is only aimed at a narrow group of people. Despite the fact that this area is an interesting topic, in this chapter I will focus on the ethical regulation of individuals.
There have been quite fruitful discussions about the nature of intrinsic and extrinsic motivation.Footnote 29 The debate is not just at the conceptual level but also explores the emerging problem of how to deal with this in practice. The obvious question, therefore, is how we can implement internal regulation.
One plausible answer is that agents internalise existing rules and act according to them.Footnote 30 This seems quite a good idea at first sight. Citizens, agents become informed and educated about the legal norms in relation to the digital environment and understand the importance of them for themselves and others, and also understand that violating them will be punished, and they will internalise such rules and act accordingly.
Regarding the regulation and compliance motivation, there are many interesting ideas.Footnote 31 However, unfortunately, there are also some problems with this approach, as mentioned at the beginning of the chapter, such as the fact that:
legal norms regarding the digital realm are evolving slowly,
the legal system is evolving, but the legal norms are not always right,
people can manipulate the rules,
there is a problem with freedom and autonomy,
internalising the rules may not be effective or efficient.
Therefore, even this approach is problematic and is not a flawless solution.
It seems that we need something more. One idea is to use various nudges to motivate people to act in a desirable way; however, this can also be understood as manipulation and can be abused by the authorities or certain people.Footnote 32
8.6 Digital Ethics and Education
It seems that we need something else. And that could be ethics and moral norms.Footnote 33 What more do they add to legal regulation? They are often oriented towards internal regulation, and therefore can help even in situations when agents are in a setting where no one can see them, when there is no surveillance, and it can even help them deal with situations when there are no existing legal rules regulating their actions.
Therefore, when mentioning digital ethics as a solution, the question of whether it should fully replace legal regulation of the digital realm can emerge.Footnote 34 Of course not – both have their pros and cons, and therefore their mutual enrichment could be beneficial. They should be understood as complementing each other – internal should complement external regulation.
Similarly, we could mention Lawrence Kohlberg and his theory of moral development here, where he speaks about associating the lower stages with external regulation and the higher stages with the internal regulation of moral actions.Footnote 35 For instance, the pre-conventional level is oriented towards avoiding punishment and focused on obtaining praise, while the other stages are more oriented towards compliance with rules, the law for the benefit of society, and the highest stages are related to greater moral competence in moral judgements. How can we put ideas about digital ethics into practice?
There seem to be quite a rich debate regarding digital ethics regulating agents online, and many companies show they have a code of conduct dealing with such issues or that ethics committees exist; however, there is a risk of using this merely as marketing to wash their hands so consumers do not question their actions.Footnote 36 At the same time, as mentioned earlier, although I think well-made self-regulation of companies can supplement the overall regulation of digital issues, here I will focus more on the regulation of individuals. So how can we make digital ethics work?
There is room for digital ethics education to help to implement the ideas of digital ethics. It should focus on:
the development of internal regulation,
critical thinking and moral judgement,
a deeper understanding of ethical dilemmas in the digital realm.
There are various approaches to digital education and digital ethics education,Footnote 37 and various challenges emerge related to the following:
targeting individuals on different levels – children, adults,Footnote 38
the means of teaching,
dealing with disagreements,
having qualified teachers,
having good teaching materials.
It seems reasonable to focus not just on children but also on adult education in the area of digital ethics. There are several approaches to teaching ethics,Footnote 39 but I propose that ethics education be oriented towards the development of critical thinking and not merely training about ethics – indoctrination or rules without any critical examination and reflection. Reflection and critical analysis has the advantage of being flexible in seeking the best solution to moral dilemmas. Digital ethics education should be oriented towards critical thinking, where the focus is not primarily on what to think but rather on method or how to think.Footnote 40 It is also about focusing on understanding why. The potential for disagreements about what is right and what is wrong also needs to be taken into account; however, this approach should also help us learn how to communicate clearly, effectively, logically, and how to evaluate arguments.
However, what if the critical thinking collides with legal norms? It seems that in open societies it can even be desirable to have citizens who are able to critically evaluate the existing legal system and norms.Footnote 41
Of course, the problem may be in finding qualified teachers and having good teaching materials and manuals. The lack in these areas is addressed for instance by various initiatives and projects: digital education is often oriented towards the technical or psychological aspects of using digital technologies, which is important since based on empirical findings in Slovakia, for example, 20 per cent of children do not know that they can block a contact on social media and 40 per cent do not know that they can report a case when someone is bullying them online.Footnote 42 At the same time, it is also important to address digital ethics with regard to what is right and what is wrong and why, and what we should do in a given situation. The problem of digital ethics education has been addressed by various projects, for instance, Erasmus+ PLATO’S EU, where the team has developed teaching materials and manuals for teachers as well as organizing workshops for students in order to promote philosophical methods of thinking as a tool for dealing with issues online.Footnote 43
8.7 Conclusion
This chapter has explored the problem of digital regulation, and the idea of digital ethics and education has been proposed as a complementary solution.Footnote 44 The main idea presented is that we need to focus not just on external regulation and the motivation to act in compliance with legal norms out of fear of being caught and punished, but also on the development of an internal moral compass in our citizens. Various advantages and disadvantages to the different approaches to regulation have been presented.
Legal norms are not considered in contrast with digital ethical regulation but as complementary. As mentioned in an earlier publication of the COST Global Digital Human Rights Network project: ‘there is the inherently multidimensional nature of compliance with human rights in the digital realm, which requires a multidimensional response, including in the context of awareness raising and training. Law should be complemented by ethics and the training on cyber ethics should be provided along with training on digital human rights law.’Footnote 45
Internal regulation and intrinsic autonomous motivation seem to be an important area for further development towards the regulation of the digital realm. The topic of internal regulation is very fruitful, and has been investigated by philosophers and ethicists since ancient times also in terms of people flourishing and realising their full human potential.