Professional Codes of Ethics

Some professions such as medicine and law require practitioners to maintain their status and right to practice through a legally recognised certification process. Software engineering does not have an equivalent system, and therefore membership of professional bodies and adherence to their codes of practice are essentially voluntary. There is still an expectation though that a computing professional will act with the same level of integrity as defined by such codes.

In relation to software engineering, the most widely referenced professional code of ethics is maintained by the Association for Computing Machinery (ACM). It is divided into four main parts as shown below.

1. General ethical principles > [1.1 Contribute to society and to human well-being, acknowledging that all people are stakeholders in computing](https://www.acm.org/code-of-ethics#h-1.1-contribute-to-society-and-to-human-well-being,-acknowledging-that-all-people-are-stakeholders-in-computing.). > > [1.2 Avoid harm](https://www.acm.org/code-of-ethics#h-1.2-avoid-harm.). > > [1.3 Be honest and trustworthy](https://www.acm.org/code-of-ethics#h-1.3-be-honest-and-trustworthy.). > > [1.4 Be fair and take action not to discriminate](https://www.acm.org/code-of-ethics#h-1.4-be-fair-and-take-action-not-to-discriminate.). > > [1.5 Respect the work required to produce new ideas, inventions, creative works, and > computing artifacts](https://www.acm.org/code-of-ethics#h-1.5-respect-the-work-required-to-produce-new-ideas,-inventions,-creative-works,-and-computing-artifacts.). > > [1.6 Respect privacy](https://www.acm.org/code-of-ethics#h-1.6-respect-privacy.). > > [1.7 Honor confidentiality](https://www.acm.org/code-of-ethics#h-1.7-honor-confidentiality.).
2. Professional responsibilities > [2.1 Strive to achieve high quality in both the processes and products of professional work](https://www.acm.org/code-of-ethics#h-2.1-strive-to-achieve-high-quality-in-both-the-processes-and-products-of-professional-work.). > >      > [2.2 Maintain high standards of professional competence, conduct, and ethical practice](https://www.acm.org/code-of-ethics#h-2.2-maintain-high-standards-of-professional-competence,-conduct,-and-ethical-practice.). > > [2.3 Know and respect existing rules pertaining to professional work](https://www.acm.org/code-of-ethics#h-2.3-know-and-respect-existing-rules-pertaining-to-professional-work.). > > [2.4 Accept and provide appropriate professional review](https://www.acm.org/code-of-ethics#h-2.4-accept-and-provide-appropriate-professional-review.). > > [2.5 Give comprehensive and thorough evaluations of computer systems and their impacts, including analysis of possible risks](https://www.acm.org/code-of-ethics#h-2.5-give-comprehensive-and-thorough-evaluations-of-computer-systems-and-their-impacts,-including-analysis-of-possible-risks.). > > [2.6 Perform work only in areas of competence](https://www.acm.org/code-of-ethics#h-2.6-perform-work-only-in-areas-of-competence.). > > [2.7 Foster public awareness and understanding of computing, related technologies, and their consequences](https://www.acm.org/code-of-ethics#h-2.7-foster-public-awareness-and-understanding-of-computing,-related-technologies,-and-their-consequences.). > > [2.8 Access computing and communication resources only when authorized or when compelled by > the public good](https://www.acm.org/code-of-ethics#h-2.8-access-computing-and-communication-resources-only-when-authorized-or-when-compelled-by-the-public-good.). > > [2.9 Design and implement systems that are robustly and usably secure](https://www.acm.org/code-of-ethics#h-2.9-design-and-implement-systems-that-are-robustly-and-usably-secure.).
3. Professional leadership principles > [3.1 Ensure that the public good is the central concern during all professional computing work](https://www.acm.org/code-of-ethics#h-3.1-ensure-that-the-public-good-is-the-central-concern-during-all-professional-computing-work.). > > [3.2 Articulate, encourage acceptance of, and evaluate fulfillment of social responsibilities by > members of the organization or group](https://www.acm.org/code-of-ethics#h-3.2-articulate,-encourage-acceptance-of,-and-evaluate-fulfillment-of-social-responsibilities-by-members-of-the-organization-or-group.). > > [3.3 Manage personnel and resources to enhance the quality of working life](https://www.acm.org/code-of-ethics#h-3.3-manage-personnel-and-resources-to-enhance-the-quality-of-working-life.). > > [3.4 Articulate, apply, and support policies and processes that reflect the principles of the > Code](https://www.acm.org/code-of-ethics#h-3.4-articulate,-apply,-and-support-policies-and-processes-that-reflect-the-principles-of-the-code.). > > [3.5 Create opportunities for members of the organization or group to grow as professionals](https://www.acm.org/code-of-ethics#h-3.5-create-opportunities-for-members-of-the-organization-or-group-to-grow-as-professionals.). > > [3.6 Use care when modifying or retiring systems](https://www.acm.org/code-of-ethics#h-3.6-use-care-when-modifying-or-retiring-systems.). > > [3.7 Recognize and take special care of systems that become integrated into the infrastructure > of society](https://www.acm.org/code-of-ethics#h-3.7-recognize-and-take-special-care-of-systems-that-become-integrated-into-the-infrastructure-of-society.).
4. Compliance with the Code > [4.1 Uphold, promote, and respect the principles of the Code](https://www.acm.org/code-of-ethics#h-4.1-uphold,-promote,-and-respect-the-principles-of-the-code.). > > [4.2 Treat violations of the Code as inconsistent with membership in the ACM](https://www.acm.org/code-of-ethics#h-4.2-treat-violations-of-the-code-as-inconsistent-with-membership-in-the-acm.).

The Institute of Electrical and Electronics Engineers (IEEE) code of ethics is also widely used, and in the UK the British Computer Society (BCS) acts as the professional body for the computing industry. Its code of conduct is also based on four principles as shown below.

You make IT for everyone > Working together to address issues in your profession and in wider society, you want > everyone to have access to IT. You share what you know, uphold standards and conduct > yourself professionally and fairly at all times. > > **PUBLIC INTEREST** > > You shall: > > 1. have due regard for public health, privacy, security and wellbeing of others and the environment > 2. have due regard for the legitimate rights of third parties > 3. conduct your professional activities without discrimination on the grounds of sex, sexual orientation, marital status, nationality, colour, race, ethnic origin, religion, age or disability, or of any other condition or requirement > 4. promote equal access to the benefits of IT and seek to promote the inclusion of all sectors in society wherever opportunities arise.
Show what you know, learn what you don't > You have integrity and show competence, but you know you don’t know everything, that’s > why you continuously learn and grow and never take on tasks that you don’t have the > skills and resources to complete. > > **PROFESSIONAL COMPETENCE AND INTEGRITY** > > You shall: > > 1. only undertake to do work or provide a service that is within your professional competence > 2. NOT claim any level of competence that you do not possess > 3. develop your professional knowledge, skills and competence on a continuing basis, maintaining awareness of technological developments, procedures, and standards that are relevant to your field > 4. ensure that you have the knowledge and understanding of legislation and that you comply with such legislation, in carrying out your professional responsibilities > 5. respect and value alternative viewpoints and seek, accept and offer honest criticisms of work > 6. avoid injuring others, their property, reputation, or employment by false or malicious or negligent action or inaction > 7. reject and will not make any offer of bribery or unethical inducement.
Respect the organisation or individual you work for > You work with due care and diligence, acting in your client or company’s best interests > at all times. You take personal and collective responsibility for your actions while > maintaining discretion and ethical standards. > > **DUTY TO RELEVANT AUTHORITY** > > You shall: > > 1. carry out your professional responsibilities with due care and diligence in accordance with the relevant authority’s requirements while exercising your professional judgement at all times > 2. seek to avoid any situation that may give rise to a conflict of interest between you and your relevant authority > 3. accept professional responsibility for your work and for the work of colleagues who are defined in a given context as working under your supervision > 4. NOT disclose or authorise to be disclosed, or use for personal gain or to benefit a third party, confidential information except with the permission of your relevant authority, or as required by legislation > 5. NOT misrepresent or withhold information on the performance of products, systems or services (unless lawfully bound by a duty of confidentiality not to disclose such information), or take advantage of the lack of relevant knowledge or inexperience of others.
Keep IT real. Keep IT professional. Pass IT on > As a BCS member, you’re an ambassador for the IT industry and use your voice to help > promote it positively to the world. You support your IT colleagues and other members in > their growth both personally and professionally. > > **DUTY TO THE PROFESSION** > > You shall: > > 1. accept your personal duty to uphold the reputation of the profession and not take any action which could bring the profession into disrepute > 2. seek to improve professional standards through participation in their development, use and enforcement > 3. uphold the reputation and good standing of BCS, The Chartered Institute for IT > 4. act with integrity and respect in your professional relationships with all members of BCS and with members of other professions with whom you work in a professional capacity > 5. encourage and support fellow members in their professional development.

Benefits

Becoming a member of a professional body such as the BCS is a demonstration of commitment to the organisations’ code of ethics which then guide decision-making in situations where technical actions could have significant social or moral implications. A code of ethics promotes integrity, accountability, and respect for user rights, aligning practitioners with values that prioritise the well-being of users and society. This helps build trust with colleagues, clients, and the public, as adherence to a code signals a commitment to ethical responsibility.

For organisations, voluntary adherence to a code of ethics enhances reputation and credibility, demonstrating a proactive approach to ethical concerns, even beyond legal requirements. It supports a culture of ethical awareness, where employees are encouraged to consider the broader impacts of their work. This can reduce the risk of ethical lapses, data misuse, or biased outcomes, which could harm users and lead to reputational or financial damage. Adopting a voluntary code can also prepare an organisation for future regulatory requirements by fostering practices that align with emerging standards and regulations in areas such as privacy, security, and fairness in AI. Overall, a code of ethics supports ethical development, transparency, and trust in technology.

While codes of ethics are typically voluntary, they carry significant professional weight. Following these guidelines can protect engineers from ethical lapses, enhance career prospects, and build a reputation for integrity and professionalism. Over time, these practices become second nature, shaping engineers who are respected both within their organisations and in the wider industry.

Practical tips related to professional bodies