You Are The Regulator
Every time you write an if statement, define a database schema, or configure an access policy, you are making a decision about what people can and cannot do. This is not metaphor — it is literal. A building architect decides where the doors go, and that determines how people move through the space. A software architect decides how data flows, who can see it, and whether it can be deleted. Those decisions have consequences that outlast any single product manager's roadmap.
Lawrence Lessig, a legal scholar at Harvard, coined the phrase "Code is Law" in 1999. His argument: in the physical world, behavior is regulated by laws, social norms, markets, and physical architecture. In the digital world, code is the architecture, and it regulates behavior more effectively than any statute. If you build a system that cannot delete user data, you have effectively repealed the "Right to be Forgotten," regardless of what the law says. If your recommendation algorithm surfaces inflammatory content because it maximizes engagement, you have made an editorial decision — even if no human editor was involved.
Ethical Engineering is not about "being nice." It is a professional discipline with concrete, measurable outcomes:
- Compliance: Adhering to strict laws like GDPR (General Data Protection Regulation, EU), CCPA (California Consumer Privacy Act), HIPAA (Health Insurance Portability and Accountability Act), and sector-specific regulations. Violations carry real fines — GDPR penalties can reach €20 million or 4% of global annual revenue, whichever is higher.
- Sustainability: Building trust so users don't abandon your platform. A 2023 Cisco survey found that 81% of consumers said they would stop engaging with a brand online after a data breach. Trust is an engineering requirement, not a marketing aspiration.
- Humanity: Refusing to build systems that exploit psychological vulnerabilities. This includes dark patterns (deceptive UI), addictive feedback loops, and algorithmic amplification of harmful content.
The three dimensions are not independent. A dark pattern that boosts short-term conversion rates erodes trust, which increases churn, which eventually triggers regulatory scrutiny. The business case for ethical engineering is not just moral — it is financial. Companies that have faced major GDPR enforcement actions (British Airways: £20M, WhatsApp: €225M, Meta: €1.2B) learned this the hard way.
Key Point: In interviews for senior and staff-level roles, you may be asked about a time you pushed back on a product requirement for ethical reasons. The ability to articulate why a technical decision has ethical implications — and to propose an alternative that meets business goals without exploiting users — is a distinguishing trait of senior engineers. "I just build what I'm told" is a junior answer. The senior answer names the specific risk (legal, reputational, technical), proposes a concrete alternative, and documents the concern in writing.