In the application of psychological knowledge, the ethics for consideration include the consent of the subject for the application or practice of psychology. That is: whether or not the subject is explicitly, consciously consenting and taking part in an exercise or experiment, such as one which may cause extreme distress or discomfort. I would cite the Little Albert experiment as an example of an ethical conflict with regards to subject consent.
That said, in the consideration of the design and implementation of modern computer applications GUIs, electronic device interfaces, and web page layouts, or user interface ergonomics, is there any published or practiced ethical standard with regards to the sort of consent required to be offered or stated by a user when interacting with such an interface?
An example might be one where a marketing or impulse exploit is used to draw a person into using a mobile app or web page and then stuffing extraneous cookies into the users browser cache, perhaps for malicious purposes, with little to no content of substance or even intentionally misleading content being provided in return. Such as is the case of links or advertisements bringing users into a situation where they are quickly, and often unknowingly, forwarded through several pages which may quickly store cookies, but render nothing. Or instances where a user is redirected through a series of unnecessary networks only for the purpose of logging and tracking the user with no way for a typical user to know without a moderate to advanced technological background in computer networking. (Think dark patterns and click bait.)
While I am aware of the laws such as the computer fraud and abuse act which seek to prevent “security hacking” activities, I’m more specifically looking for something that might be used as an ethical standard to help guide the design and implementation of user device and application interfaces.
This may perhaps verge on the topic of intentionally confusing language and dependency requirements in licensing and EULAs, so I guess barring explicitly malicious language, how might the ethics of implied consent be applied to an end user?