Computer Ethics

Post ID: 3539204

Portfolio Website Requirements. You will use my previous Case Study assignments and website to help complete this assignment. You will have to add additional information and you will have to put the assignment into the website and create a website link.Please no plagiarism, no ai no chat bots . Original response please

Your portfolio website should include the following required sections:

Case Study Selection
Background Summary
Ethical Analysis
- Ethical issues
- Ethical framework
- Stakeholder analysis
- Professional ethics
- Alternative actions
Impact Analysis
Broader Implications
Reflection
Reflection Questions
References / Works Cited
Enhancement

Case Study Selection

Choose a credible, real-world case that presents an ethical issue related to computing, data, or digital technology.

Your selected case must:

Be documented in reliable sources.
Present clear ethical dilemmas, not just technical problems.
Include enough detail for meaningful ethical analysis, including stakeholders, harms, context, and possible alternatives.

This section should include:

Case title
Short description of the case
Why the case matters
At least two credible sources used for research

Background Summary

Present a factual, neutral overview of the case. This section should explain the situation clearly without arguing or taking sides.

Your Background Summary should address:

What happened: A concise, chronological summary of key events in the case.
Who was involved: Key actors, organizations, and affected groups.
When and where: The timeline and setting of the events.
Technology context: How the system, platform, or technology worked and why it mattered.
Legal or social context: Relevant laws, regulations, policies, or social factors.
Why it matters: Why this case raises ethical questions and what is at stake.

Ethical Analysis

This section forms the core of your project. Analyze the ethical dimensions of the case using course concepts and ethical theories.

1. Identify the Ethical Issues

Define the central ethical dilemmas in the case.
Identify what values or principles are in conflict, such as privacy vs. profit, fairness vs. efficiency, transparency vs. security, or autonomy vs. control.
Explain how these issues emerged from system design, data practices, business policies, or individual decision-making.

2. Apply an Ethical Framework

Use at least one ethical framework from class to analyze the case, such as:

Utilitarianism — consequences, benefits, and harms
Deontology — duties, rules, rights, and obligations
Virtue Ethics — character, integrity, honesty, responsibility
Ethics of Care / Social Justice — relationships, fairness, equity, vulnerability, and power

Clearly explain how the framework evaluates the actions in the case. You may briefly compare two frameworks if it strengthens your analysis.

3. Stakeholder Analysis

Who are the primary and secondary stakeholders?
Who acted, who was affected, and who was indirectly impacted?
What were their motivations, interests, responsibilities, and levels of power?
How did their decisions or omissions contribute to the outcome?

4. Professional Ethics and Accountability

Connect the case to a relevant professional code of ethics, such as ACM, IEEE, or another appropriate professional standard.

Which principles or guidelines were upheld?
Which principles were violated, and by whom?
How could professional standards have guided better decisions?

5. Ethical Alternatives

Propose realistic, actionable alternatives that could have:

Prevented the problem or reduced its severity.
Reduced harm to vulnerable groups.
Improved transparency, fairness, privacy, safety, or accountability.

Impact Analysis

Evaluate the consequences of the case for individuals, organizations, and society over time.

1. Who Benefited?

Who gained financial, social, technical, or political advantage?
Who gained access to data, users, markets, reputation, or influence?
What specific benefits resulted from the technology or decision?

2. Who Was Harmed?

Who experienced privacy violations, financial loss, discrimination, exclusion, or security risks?
Were there emotional, psychological, reputational, or physical harms?
Were any vulnerable groups disproportionately affected?

3. Social, Economic, and Emotional Consequences

Social consequences: public trust, misinformation, polarization, community impact, or behavioral changes.
Economic consequences: lawsuits, fines, business losses, job impacts, or compliance costs.
Emotional consequences: anxiety, fear, frustration, shame, betrayal, or loss of trust.

4. Long-Term Implications

Did the case lead to new laws, policies, standards, or best practices?
Did it change public perception of a company, platform, or technology?
Did it reveal larger systemic problems such as weak oversight, AI bias, privacy risks, or exploitative business models?

5. Connection Back to Ethics

How do the outcomes reflect ethical failures or successes?
Which ethical framework best explains why the impacts were acceptable or unacceptable?
What lessons does this case teach about responsible computing?

Broader Implications

Explain what this case teaches us about technology and society more broadly.

How does this case connect to larger CIS 50 topics?
What lessons should developers, companies, users, or policymakers learn?
What best practices could help prevent similar issues in the future?
How does this case connect to privacy, cybersecurity, social media, AI ethics, automation, intellectual property, or digital responsibility?

Reflection

Reflect on your own learning and perspective.

What did you learn from researching this case?
How has your thinking about technology ethics changed?
What responsibilities do you think individuals, developers, companies, or users have moving forward?
How might this case influence your choices as a digital citizen or future professional?

Reflection Questions

Create 2–3 open-ended questions connected to your case study. These questions should invite critical thinking, discussion, or future reflection.

Examples:

Who should be held responsible when automated systems cause harm?
How should companies balance innovation with privacy and safety?
What protections should exist for users affected by biased or harmful technology?

Enhancement Requirement

Your final portfolio must include at least one enhancement feature. This should help communicate your analysis in a clearer, more visual, or more interactive way.

Acceptable enhancements include:

Timeline
Stakeholder map
Map of harms
Media analysis
Ethical framework comparison
Visual infographic
Other approved visual or interactive element

References and AI Use Disclosure

Your final project must include at least three credible sources and a properly formatted References or Works Cited section.

If you used AI tools during your project, include a short AI use disclosure on your References page.

Example if AI was used:

I used ChatGPT to brainstorm ideas and clarify ethical frameworks. All final writing and analysis are my own.

Example if AI was not used:

No AI tools were used in the creation of this project.

Final Submission Instructions

Submit the public URL to your completed digital portfolio website.

Your website should be viewable by anyone with the link.
Double-check that all pages and navigation links work properly.
Test your link in a private/incognito browser window before submitting.
Make sure your final version includes all required sections.

How to Submit Your Portfolio URL in Canvas

Open your published portfolio website.
Copy the full public URL from your browser address bar.
In Canvas, click Start Assignment or Submit Assignment.
Select Website URL as the submission type.
Paste your portfolio link into the URL submission box.
Click Submit Assignment.

Tip: Open your portfolio link in an incognito/private browser window before submitting to make sure your instructor can access it without requesting permission.

Submission Requirements

All required portfolio sections are complete.
Case study is clear, organized, and evidence-based.
Ethical analysis is thoughtful and connected to course concepts.
At least one ethical framework is applied.
Stakeholders, impacts, alternatives, and long-term implications are addressed.
At least three credible sources are included.
References / Works Cited page is included.
AI use disclosure is included.
Originality statement is included.
Enhancement feature is included.
Website is published and accessible.
Instructor feedback has been meaningfully incorporated if feedback was received.

My Assignment and previous website link is below. You will have to create a new website link

My website should help you with the assigment . It is below:

https://sites.google.com/view/post-office-horizon-...

My assignment should help you with the assigment . It is below:

COMPUTING ETHICS PORTFOLIO

Post Office Horizon IT Scandal

Week Milestone Submission

Impact Analysis • Broader Implications • Reflection • Reflection Questions • Enhancement

Master Muhammad | CIS 50 | 2025–2026

SECTION 1: IMPACT ANALYSIS

1.1 Who Benefited from the Technology?

Who benefited from the technology, platform, or system?

It had a real promise of operational benefit when it was first rolled out throughout the Post Office's network of about 18,000 branches in 1999. The principal institutional gain was the Post Office itself: a uniform, computerised accounting system that superseded a variety of ad hoc ledger systems, provided a uniform system of record keeping and, for the head office, a single view of financial performance across the whole branch network. This degree of visibility allowed for identifying genuine fraud more easily, as well as identifying underperforming branches and managing cash reconciliation at scale.

As a long-term developer and maintenance contractor, Fujitsu reaped the profits from a government contract for decades, despite all of the evidence that the system failed them. This financial relationship itself had ethical implications: the contractor had a commercial stake in keeping the impression that Horizon was working properly.

The invisible advantage for the customers of the Post Office was the speed and uniformity of the transactions carried out, and for the general public was the modernisation of a national institution that was starting to lose a foothold with competition from high street banks and online services. As far as the technology was concerned, in a narrow operational sense, it brought some of what it promised.

What matters is that there was no equality in the benefits and that there was an underlying unreliability that was kept hidden. The operational benefits of the system were claimed by the institution, and the contractor, and the expenses of its failure were shifted, unnoticed and unarticulated, to the least able to carry them.

1.2 Who Was Harmed or Negatively Affected?

Who was harmed or negatively affected?

The main victims were those more than 900 sub-postmasters and sub-postmistresses who, between 1999 and 2015, were prosecuted for financial deficiencies caused by Horizon’s own problems. There were no numbers; there were people, people who had worked and lived for their communities through their post office jobs, people whose lives were built around their local post office, people who would pay pensions, bank money, and carry out government duties in small towns and villages throughout the UK. Their negative effects were multifaceted and interrelated.

Sub-postmasters and their families and households.

Financial damage: Many had to pay back loans to cover shortfalls for which they were not responsible, by remortgaging their homes or borrowing from family. Those who were prosecuted had to pay legal fees in addition to these demands.

Criminal harm: Hundreds were found guilty of theft, fraud and false accounting. Some were imprisoned. The convictions would stay on their record for years, impacting their employment and travel.

Psychological harm: Victims suffered from clinical depression, anxiety disorder and in at least four incidents, they took their own lives. Prolonged psychological suffering was caused by financial crisis, social stigma and the lack of understanding and explanation of the discrepancies.

Reputation and social damage: In rural communities where communities knew and trusted the postmaster, the charge of theft was socially devastating and not always amenable to forgiveness even after the individual was found innocent.

Family harm: Parents being imprisoned and parents becoming financially ruined, marriages failing because of the strain, and educational and social opportunities lost due to the parents ' imprisonment.

The broader public

Local services were lost from communities due to the removal of branch operators or branch closure as a result of prosecutions.

The public's confidence in digital systems was significantly damaged, and in government institutions, there was a harm to public confidence, which is diffuse but material and long-term.

Anyone subjected to automated decision-making in other settings and future claimants were left with a legal landscape where Computer Evidence was admitted against them with limited judicial review, and the Horizon precedent had set a precedent for such practice.

1.3 Social, Economic, Emotional, and Ethical Consequences

What social, economic, emotional, or ethical consequences resulted from the case?

Social Consequences

The scandal revealed a significant breach in the "social contract" between a government institution and the community operators that it depended on. The sub-postmasters were not employees; they were independent entrepreneurs who had invested their own money, taken their own leases and held their own reputations on the post office franchise. Their distress led to a response from the Post Office to the extent that they were prosecuted instead of investigated, which changed a situation of mutual obligation to one of institutional predation.

The ITV drama ‘Mr Bates vs The Post Office' in January 2024 had one of the biggest public responses to a television programme in recent British history. Hundreds of thousands of people wrote to MPs, signed petitions and donated to legal action funds. The social impacts of digital injustice, when brought to the forefront, can galvanise social action in a way that formal legal proceedings would not have been able to do for 20 years.

Economic Consequences

The direct monetary cost to postmasters is hundreds of millions of pounds in total – debts claimed for, court fees paid, businesses lost, and livelihoods ruined. Schemes set up following the group litigation have been called out for being slower to implement and providing payouts that are much less than what the average restorative value is, especially in the case of non-economic damages.

The cost of managing the group litigation, public inquiry and the compensation schemes has been enormous for the Post Office itself. The reputational cost has been real to the recruitment of new operators and the sustainability of the business model of this institution. Fujitsu, on the other hand, managed to retain billions of pounds of government business in the UK during the course of the investigation – a discrepancy that was a significant issue in the public and political gaze.

Emotional Consequences

There are statistics to report, but the psychological impact of the Horizon scandal is not something they can. It is known that four sub-postmasters have committed suicide. There are many more who have been treated for serious depression and anxiety. Victims tell of the specific brutality of having to believe that they had no idea what they were doing wrong – that the system was supposed to be accurate, and that they were being deceived in their own minds. This manufactured self-doubt, arising from the institutional confidence of the Post Office in the authority of Horizon, is one of the most disturbing aspects of this case.

Ethical Consequences

The Horizon scandal is a multi-level ethical debacle. The Post Office was wrong in failing to exercise good faith towards postmasters. Prosecutors failed to make disclosures. The Fujitsu engineers who knew of the known bugs failed to get the information to those whose lives depended on it. Digital evidence was not adequately investigated by courts. One injustice added to another, making injustice a structural possibility rather than an inevitability.

The case also revealed the ethical shortcomings of using a legal presumption (computer records are accurate unless challenged) in lieu of true scrutiny. The ease with which both courts and prosecuting organisations could presume the accuracy of the computer was a benefit, because it effectively shifted the burden of proof to the people lacking the technical expertise or financial resources to test it.

1.4 Long-Term Impacts and Broader Societal Consequences

What long-term impacts or broader societal consequences emerged?

The biggest long-term legal impact is that of the reform of the legal presumption of computer reliability in English law. The Law Commission has suggested that the presumption should be reversed to make it more difficult for parties wanting to use computer-generated evidence in criminal cases. The implications of this reform, which was directly sparked by the scandal of Horizon, will be long-lasting in the ways in which digital evidence is viewed in court.

It has hastened the UK public policy evolution of algorithmic accountability frameworks. It has helped to shape the conversation on the use of automated systems in benefits assessment (Universal Credit), immigration enforcement, and social care, all areas where similar power dynamics are found between the state and people who are subject to automated decisions.

Scandal has changed a generation of British citizens' perceptions of institutional control and digital processes at a cultural level, in a way that will be lasting. The idea that big organisations and the technology they use are to be trusted without question has been undermined - an awkward corrective in a society that is increasingly run by algorithmic processes.

The case has become a benchmark globally for similar scandals involving the use of automated algorithms in the collection of debt and the identification of fraud, such as the Australian government's Rob debt disaster, where automated debt recovery notices were sent to welfare recipients based on algorithms that were overly susceptible to fraud; the Dutch tax authority's algorithmic fraud detection system, which failed to accurately identify fraud and targeted families of ethnic minority backgrounds; and a range of different jurisdictions in the United States that have implemented risk assessment tools in criminal sentencing. They share a feature in common with Horizon: they are both structurally perverse, involving automatic authority, hidden evidence of wrong, and focused harm on a symptomatically weak population.

SECTION 2: BROADER IMPLICATIONS

2.1 Lessons About Technology and Society

What lessons does this case teach about technology and society?

The most basic of all lessons is that technology does not malfunction in a vacuum; malfunctions are embedded in social and institutional frameworks which shape how they are dealt with. Horizon's software glitches were severe but fixable. What was wrong and led to the catastrophe was the institutional attitude that the system's authority was absolute and could not be negotiated, and that its authority was used as a weapon against those who challenged it, and that it was actively hidden that this system was not the best. What went wrong was the institutional attitude that the system's authority was not something that could be negotiated, that it was used as a weapon against those who challenged the system, and that it was actively concealed that this system was not the best.

In this lesson, we will face a common yet deeply entrenched cultural myth: that computers can be objective, machines are neutral, and algorithmic results are the truth, just in numbers. The Horizon scandal reveals that a computer system is not an impartial instrument, but an artefact – the result of human decisions, organisational pressures, institutional interests and interpretation in a legal and social context that may not be fit to evaluate its reliability. The authority we bestow upon digital systems isn't a property inherent to the systems themselves; it's a social construct which has to be critically analysed and reconsidered.

The other lesson is about the correlation between power and accountability. Those who were most able to exploit the powers of Horizon – the Post Office, and, to a lesser extent, Fujitsu – were also the least likely to consider its flaws with a serious mind. This structural conflict of interest is not confined to the Horizon case but exists wherever an organisation is involved in managing a process of decision-making and in resolving conflicts over the decisions made in it. What is necessary to resolve this conflict is the separation of the roles and the independent control over them, and not only ethical rules.

2.2 Connections to CIS 50 Themes

How does this case connect to larger CIS 50 topics such as privacy, AI ethics, cybersecurity, social media, automation, or digital responsibility?

Automation and Human Oversight

Horizon is a case study of automation, which is not backed by human supervision. The outputs of the system were considered final and binding and thus eliminated any meaningful role for human judgment in determining whether or not a postmaster was financially responsible for a deficiency. This trend – AI replacing manual review in critical situations – is at the heart of current discussions on AI's role in recruitment, criminal sentencing and welfare assessments. The lesson Horizon teaches is not that automation is bad; it is that it needs to be reinforced at all times with strong systems for human challenge and correction.

Digital Responsibility

The case leaves us with the question of who is liable in the event of a digital system doing harm. The Post Office put the blame on postmasters. Fujitsu said that it was not bound by obligations with the postmasters, but rather the Post Office. Some individual engineers thought that decisions were too high up to them. This diffusion of responsibility, or as it is sometimes called in Computing Ethics, the problem of many hands, is a characteristic of the complex nature of digital systems and one which needs to be tackled head-on in governance structures. There must be clear and enforceable accountability at organisational and individual professional levels with regards to digital responsibility.

AI Ethics and Algorithmic Bias

While the concept of Horizon is not necessarily about machine learning in its modern sense, the ethical questions it raises are relevant to today's AI systems. When algorithms are used to create outputs as objective references, they often reflect the designers' assumptions, priorities, and blind spots. In the case of Horizon, the design assumption that discrepancies in branch accounts were due to human error, and not system error, was inserted into the design of the institutional response from the start. But today's applications of artificial intelligence in making decisions that can have a real impact on your livelihood, such as a loan application, parole eligibility, or medical diagnosis, warrant the same scrutiny as did Horizon in the past.

Privacy and Data Governance

The fact that Fujitsu engineers were able to make changes to branch accounts remotely – without postmasters' knowledge or consent – poses significant questions about data governance. People have a reasonable expectation of having accurate records of their own, being notified of any major changes to their records, and that the records are controlled and audited. These were all expectations that were challenged by the Horizon system. Robust data governance practices, such as audit trails, access control, and notification requirements, have come directly out of the case as a result of the type of vulnerability the case exposed.

Cybersecurity and System Integrity

Though the situation was not compromised by an outside hacker, Horizon has its own weaknesses, such as the ability of an external user to access it secretly and the failure to record errors clearly enough for branch staff to see. Though not compromised by an outside attacker, Horizon's internal vulnerabilities – ranging from the ability for another party to access the system without notice to a lack of sufficient error reporting for branch operators – are points that illustrate cyber security principles that are widely applicable. To ensure the integrity of the system, it is essential to record and track all access to sensitive records and ensure that they are made available to anyone whose data is accessed. These controls were not in place in Horizon and resulted in a lack of independent verification of the integrity of evidence presented in criminal proceedings.

Social Media and Digital Advocacy

The contribution of digital communication to the discovery of the Horizon scandal needs to be identified specifically. Affected postmasters were given an online forum, for the first time, in which they could meet and share their experiences, thanks to Computer Weekly's 2009 online reporting. Social media then aided the Justice for Sub postmasters Alliance to give voice to people who had been silenced and bullied by the power of the Post Office. That drama on ITV in 2024, which was based on the viral documentaries, has illustrated the ability of digital media to galvanise public action that would not have been able to get through a formal process of law in time to come to anything like the same result.

2.3 Best Practices and Ethical Safeguards

What best practices or ethical safeguards could help prevent similar problems in the future?

Rigorous independent technical audit of any digital system employed in decision making, which has implications of huge importance to individual rights, prior to deployment – not self-certification by the developing contractor. Adversarial scenarios, failure mode and analysis, and remote access capabilities should be tested.

Disclosure of mandatory errors: Organisations that find an error or fault in a system they used in a legal or quasi-legal proceeding should be legally required to disclose this error or defect to the parties affected and their legal representatives. It is not just fines that ought to be the consequence of wilful non-disclosure, it's also criminal liability of the individual decision-makers.

Aim to reverse the legal presumption that computer records are reliable: A legal presumption of computer reliability should be replaced by an obligation to produce positive expert evidence that computer records are reliable by the party relying on such records for criminal proceedings. This reform is ongoing in the UK legislation.

Separate roles between operators and prosecutors: An organisation should not be allowed to serve two roles, one as a digital system operator and one as a prosecutor of people whose actions are judged by the digital system. In any situation in which this conflict of interest arises, there should be independent prosecutorial oversight.

Clear explanations of algorithmic decision-making and effective, low-cost challenge mechanisms: People affected by algorithmic decisions that impact their rights should have an explanation of how those decisions were made and should have the ability to challenge algorithmic decisions at an affordable cost. This involves legal assistance for digital rights conflicts, and explainability mandates for systems with impactful automation.

Statutory registration of computing professionals with professional codes of conduct enforceable by law; computing professionals have a clear duty to disclose to society any known defects in a computer system that could cause harm; computing professionals have a clear duty to refuse to become involved in legal proceedings known to be based on unreliable technical evidence.

Whistleblower protection: Effective statutory protection should exist for workers whistleblowing concerns relating to the systems they work on in which they are employed, and without fear of professional repercussions.

SECTION 3: REFLECTION

3.1 What I Learned from Researching This Case

What have you learned from researching this case?

The facts of the Horizon scandal, in brief, were known before I started researching it in detail: It was a story about a faulty computer system that sent false charges to innocent people. This is not incorrect, but it was a very incomplete interpretation. What I learned – and what is still stuck in my brain – is that the rogue software was more like a side-effect of the injustice. There may have been a bug that could have been corrected. What wasn't so easily remedied was the institutional culture that blindly accepted the authority of the system, the legal system that found it difficult to admit that computer evidence is not subject to the rules of evidence, and the commercial interests that have an interest in keeping the information closed to disclosure.

I found out that the Horizon case isn't really a bad case of one system. It's about the failure of all the levels of "red-flag" mechanisms, such as internal quality assurance, professional ethics, legal disclosure, judicial review, and government accountability. All of the individual failures were more or less explainable on their own. The law firm of the Post Office wanted to defend the rights of its institution. Fujitsu's management would not acknowledge and accept that the product was faulty. Courts took a judicial leap of faith in a presumption existing in the statute. However, when each of these singular failures was understood separately, they caused a historic catastrophe as a whole.

I also gained a lot of knowledge about the particular individuals who were devastated in their lives. The stories of individual postmasters – the former school teacher forced into prison for running a village post office or the couple who sold their house twice before being arrested, prosecuted and exonerated; the postmistress who died before she was vindicated – made it so much more personal. This is not just a "second subject" to study with computing ethics; it is what computing ethics is about. Systems are created by and for individuals. Their failures have adverse effects on people. To be honest with oneself is the ethical thing to do.

3.2 How My Thinking About Technology Ethics Has Changed

How has your thinking about technology ethics changed?

I came into this project with a very positive mindset on technology: that over time, if systems were better designed, tests were better done, and practices better, then failures such as Horizon would be reduced. But now I'm more convinced than ever that, plus with a much greater consciousness of the structural and institutional environment in which the better practice is more or less likely to be implemented.

This is the biggest change in my thinking, in terms of what the term means and what it should mean, when it comes to the concept of 'trust in technology'. I had taken it for granted, without much thought, that it was reasonable to trust a digital system - that the responsibility for showing that a system is not correct should be shouldered by the people claiming that it is corrupt, not by the people who put it into place. That's now been turned on its head by the Horizon scandal. I now see that trust in any scalable system involving digital technology and affecting individual rights should be earned, not assumed, based on proven reliability, independent verification and constant questioning - not because of the institutional authority or commercial pedigree of the system.

I have also gained a far more practical and tangible sense of the meaning of the concept of professional ethics in practice. It's not something you recite; it is something you make under pressure. In all probability, the Fujitsu engineers who were aware of Horizon's bugs were good people. They were in situations where the outcome of raising concerns was unpredictable, where disclosure would have been regarded as impractical or disapproved by specific institutions, and where the effects of disclosure would have been felt by people they had never met and would be distant. Professional ethics involves learning the skills of judgment and courage, so you can behave properly in that very situation, and when it's difficult.

3.3 Responsibilities Moving Forward

What responsibilities do individuals, companies, developers, or users have moving forward?

Developers and Computing Professionals

It is the computing professional who has the most direct technical responsibility for the systems he or she creates and maintains. The Horizon scandal has revealed that it is not just a matter of writing code that performs its functions: it is also about documenting existing defects, reporting problems as appropriate, not providing technical support for proceedings whose claims are dependent on unreliable data, and - where internal channels have failed - being willing to take professional actions by going the extra mile. The basis of this personal responsibility should be complemented and not replaced by professional registration with meaningful disciplinary consequences.

Companies and Organisations

Organisations that put digital systems into operation that can have a significant impact on individuals should ensure that they have systems that are robust enough in their operation and maintenance to suit the importance of what they do. This isn't a goal – it's a structural need. There should be mandatory reporting of incidents, a full audit trail and independent audit processes that can actually stop harmful processes going ahead within organisations. The events of the Horizon scandal indicate that commercial pressures alone will not lead to such behaviour, and there must be some regulatory requirements with proper enforcement.

Users and the Public

Citizens are not passive consumers of digital systems, but are part and parcel of the governance of technology that is increasingly shaping the rights and life chances of citizens. This public responsibility entails informed, critical engagement, meaning that people understand how algorithmic systems make decisions that impact them, what rights they have to contest these decisions, and what governance frameworks will ensure that institutions will be held accountable for the systems that they run. These are the kind of digital citizens that the postmasters who organised, campaigned and defied the Post Office's authority over their own experience are.

Policymakers and Regulators

The government has a responsibility to establish and regulate technology laws and regulations. Not reforming the legal presumption of computer reliability for over 20 years since Horizon was deployed was as much a policy failure as it was a technical or institutional failure. The scale of the scandal of Horizon requires a proactive approach from policymakers to anticipate how algorithmic authority is being used without proper oversight and to put in place accountability measures.

SECTION 4: REFLECTION QUESTIONS

The following three questions are intended to stimulate a healthy debate on the issues raised by the Horizon scandal and its impact on computing ethics and digital society, and to provoke further thinking.

Question 1

If a digital system results in a harm to an individual, and several organisations played a part to the designs of it, its deployment and its governance, who is truly morally and legally responsible? If it is the developer, the operator, the regulator, or the individual professionals who should be held liable, then on what basis are they to be judged and who knew enough to have done otherwise?

Question 2

One reason the Horizon scandal lasted for more than 20 years was that the people who suffered from it were not technically savvy, were not as well-funded, and were not as well-positioned to contest the results of a computer system. In the wake of the proliferation of Artificial Intelligence and automated decision-making systems in applications ranging from benefits assessments to credit scoring, healthcare to criminal justice, what structural safeguards are necessary to ensure that those most impacted by these systems can actually challenge decisions made regarding them?

Question 3

The financial discrepancies were being blamed on the postmasters, but Fujitsu's engineers knew about certain software flaws that were at the root of the issue. Fujitsu engineers knew there were software flaws that were causing financial discrepancies, but they were not deterred from prosecutions going ahead for years anyway. What does this case tell you about the extent to which professional ethics is a voluntary individual commitment and how much should be the role of statutory regulation, whistleblower protection and professional liability in getting the computing practitioner to do what is good?

SECTION 5: ENHANCEMENT FEATURE - SCANDAL TIMELINE

The following chronology outlines the evolution of the Horizon scandal from the time it was first used until the current public inquiry and legislative actions. It is a piece of fact and a visual aid to the fact that a failure in institutions can compound over decades before it is brought to account.

YEAR	KEY DEVELOPMENT
1996–1999	Horizon is being developed by ICL (now Fujitsu) on contract for the government. National rollout goes ahead despite instability at early pilots. Eliminated Section 69 PACE - expert evidence is no longer needed for courts to receive computer records.
1999–2000	Horizon was deployed in ~18,000 Post Office branches. From the start, sub-postmasters report any unexplained shortages. But Post Office says it's safe and requires repayment.
2000–2008	Prosecutions begin. In this alone period more than 700 people were prosecuted. The firm's lawyers know about internal reports of software flaws, and are hiding this information from the defendant and courts.
2009	Seven affected postmasters are named in a Computer Weekly investigation. The public aspect of the scandal starts. Online communities come into existence, and postmasters start to know that they are not alone.
2012	Complaints from postmasters are investigated by an independent forensic accountant, Post Office's Second Sight. Second Sight starts to recognise issues in the system through Horizon.
2015	When the Post Office was evaluated on interim reports, it ends its association with Second Sight when they are not convenient. Prosecutions largely cease. Alan Bates is leading the Justice for Sub postmasters Alliance in ramping up their campaign.
2017	Group litigation starts: Bates & Others v Post Office Ltd. 555 sub-postmasters join the claim. Journalist Nick Wallis starts to investigate the case in detail.
2019	Mr Justice Fraser identifies bugs, errors and defects in Horizon, finds that Post Office's duty of good faith has been breached and finds that Post Office misled the court at earlier proceedings. Landmark judgment.
2020	Post Office resolves group action for £57.75m – seen as a travesty by lawyers in wake of legal fees. Campaigners are still seeking criminal convictions to be overturned.
2021	Court of Appeal overturns 39 convictions in a judgement that amounts to an abuse of process by Post Office. The Post Office Horizon IT Inquiry (statutory) is led by Sir Wyn Williams and set up by the UK Government.
2022–2023	Inquiry hears extensive oral evidence from Post Office executives, Fujitsu engineers, and affected postmasters. Evidence of remote access capability and internal awareness of bugs confirmed. Government compensation schemes established.
Jan 2024	The ITV drama ‘Mr Bates vs The Post Office' premieres today. Produces an unprecedented public reaction; Parliament reconvenes; PM makes announcement on fast-track exoneration bill. Fujitsu says it will aid in compensation.
2024–2025	Passage of Post Office (Horizon System) Offences Act allowing mass exoneration (no individual appeal). Inquiry hears evidence and starts to draft final report. The investigation of criminal charges continuing.
Future	Parliament moves towards reform of computer reliability assumption in law. Lessons learned by Horizon led to a wider discussion on governance of AI and automated decision-making.