Social and ethical issues in communication systems for HSC Information Processes and Technology
“Describe the social and ethical issues raised by communication systems, including message security and encryption, privacy of communications, the effect on work and society, and the digital divide”
Communication systems raise issues of security, privacy, the changing nature of work and the digital divide. Because data crosses shared and public networks, it can be intercepted, so message security relies on encryption, authentication and secure protocols such as HTTPS. Privacy is at risk because messages, metadata and browsing can be monitored and stored. Networked communication reshapes work through remote working, always-on availability and automation of contact, with both benefits and costs. The digital divide means people without reliable, affordable access are excluded from services that increasingly assume connectivity.
Jump to a section
Legacy course. This page covers HSC Information Processes and Technology (IPT), which NESA has replaced. The last IPT HSC exam was held in 2024; current students study Enterprise Computing 11-12 or Software Engineering 11-12 (first HSC exams in 2025). See the IPT hub for what carries over, or our HSC Software Engineering hub. Use this page as background only.
What this dot point is asking
NESA wants you to describe the social and ethical issues that arise because information travels across networks where others can intercept it, where access is unequal, and where the way we work and live changes. This is distinct from the database issues dot point; here the focus is on issues created by communication and networking themselves.
The answer
Message security and encryption
When data travels across a network, especially the public internet, it passes through equipment the sender does not control and can be intercepted. Message security protects against this. Encryption scrambles the message with a key so an interceptor sees only ciphertext; secure protocols such as HTTPS and encrypted email apply this automatically. Authentication confirms that the parties are who they claim to be, using passwords, certificates or multi factor methods, preventing impersonation. Together they protect confidentiality and integrity in transit.
Privacy of communications
Communication systems create rich records: the content of messages, and metadata such as who contacted whom, when, from where and how often. Both can be monitored, logged and analysed by service providers, employers or attackers. Privacy issues include surveillance of employees' communications, retention of message and location histories, and the use of communication data to profile people. The ethical questions are who may read or retain communications, with what consent, and for what purpose.
The changing nature of work and society
Networked communication lets people work remotely, collaborate across distance and respond instantly. This brings flexibility and access to global talent, but also an always-on expectation that blurs work and personal life, the automation of customer contact that removes some jobs, and a dependence on connectivity that makes outages costly. Socially, communication systems connect communities and democratise publishing, while also spreading misinformation and enabling harassment. A balanced answer names both sides.
Metadata can be as revealing as content. Even if a message is encrypted, the record of who communicated with whom, when and from where can expose relationships, movements and habits. This is why privacy concerns extend beyond reading the message itself.
The digital divide
The digital divide is the gap between those with reliable, affordable access to communication systems and the skills to use them, and those without. As services such as banking, government, education and health move online, people on the wrong side of the divide, often rural, elderly, low-income or in developing regions, are excluded from services that increasingly assume everyone is connected. This makes equitable access an ethical issue for system designers and policymakers, not just a matter of personal choice.
Connecting the issues
Security, privacy, work and the divide interact. Encryption protects privacy; weak security exposes it. Remote work depends on access, so the divide shapes who can take part. A strong response links the technical controls to the social outcomes rather than listing them separately.
Repeating the database issues answer. This dot point is about issues from communicating data across networks (interception, surveillance, the divide), not from storing it.
Saying encryption makes communication completely safe. Encryption protects the content in transit, but metadata, endpoints and weak authentication remain attack surfaces.
Treating the digital divide as only about owning a device. It also covers reliable connectivity, affordability and the skills to use online services.
Giving only the benefits of networked work. Markers want the trade-off, including always-on pressure, job displacement and dependence on uptime.
Confusing authentication with encryption. Authentication confirms identity; encryption hides content. Secure communication usually needs both.
Exam-style questions
Questions in the style of NESA exam questions on this dot point, each with a worked answer. They are written by ExamExplained unless tagged "Past paper"; the year shows the paper a question is modelled on.
2021 HSC-style2 marksA person receives an email from '125pos@inf.au' headed 'Failed delivery!' addressed to 'Dear Cutomer' asking them to click a link to update their 'addess' to avoid a 10% holding fee. Give TWO reasons why this email could be considered suspicious.Show worked answer →
This tests message security awareness (phishing). For 2 marks give two distinct warning signs.
Suspicious sender address. The address '125pos@inf.au' does not match a legitimate, recognisable delivery company domain, which is a common phishing indicator.
Spelling and lack of personalisation. The email contains errors ("Cutomer", "addess") and is not addressed to the recipient by name; a genuine company that holds your details would normally personalise it and write correctly.
Other acceptable reasons include the pressure tactic of a threatened 10% fee to make you act quickly, and that the only way to respond is by clicking an unfamiliar link rather than contacting the company directly. Markers reward two clearly different suspicious features.
2020 HSC-style3 marksA zoo runs a system where members of the public photograph native moth sightings and upload the photo, date, location and number of moths to its website. Outline technical issues that could occur for members of the public when collecting and transmitting photos.Show worked answer →
For 3 marks outline three technical issues members of the public might face when capturing and uploading photos.
Poor image quality or capture problems. A phone camera may take blurry, low-resolution or poorly lit photos of small moths, so scientists cannot reliably identify the species.
Connectivity and transmission failures. In outdoor or remote locations the mobile signal or wifi may be weak or unavailable, so large photo files fail to upload or upload very slowly.
File size and compatibility. Large or unsupported image file formats may exceed upload limits or not be accepted by the website, and limited data allowance or device storage can prevent transmission.
Markers reward technical (not ethical) issues tied to capturing and transmitting the photos.
2022 HSC-style1 markSecurity breaches can be minimised by incorporating which feature into a system's operation? A. Installation of software of a user's choice. B. The ability to log into multiple nodes using only one account. C. Forced logoff from the system if no activity has been detected. D. Allowing the uploading and downloading of files to the system.Show worked answer →
The answer is C, "Forced logoff from the system if no activity has been detected."
Automatic (forced) logoff after a period of inactivity is a security control: it closes unattended sessions so that someone who walks away from a logged-in device does not leave it open for an unauthorised person to access, reducing the chance of a breach.
The other options increase risk: letting users install any software invites malware, single sign-in across many nodes widens the damage if an account is compromised, and freely allowing uploads and downloads is a route for malware and data leakage. The protective feature is forced logoff, option C.