
Over the past 20 years, I’ve worked across more than 100 countries implementing international development programmes, supporting governments, NGOs, and institutions to strengthen systems in health, governance, and organisational delivery. Across that journey, one lesson has remained constant:
Ethics is not defined by what organisations say.
It is defined by what their systems do, especially when no one is watching.
The Gap Between Policy and Practice
Early in my career, I was deeply involved in coordinating audit and compliance processes across organisational systems, reviewing user access controls, password management, incident response procedures, and data governance practices across ERP platforms, HR systems, finance tools, and cloud environments.
On paper, most organisations looked strong:
- Policies were documented
- Compliance frameworks were in place
- Codes of conduct were clearly written
But when we began conducting risk assessments and reviewing data flows, testing access permissions, analysing decision-making processes, we often uncovered gaps:
- Staff with unnecessary access to sensitive data
- Weak enforcement of information governance policies
- Incident response processes that existed, but were not operationalised
- Data handling practices that did not fully meet GDPR standards
In other words, ethics had been declared, but not always proven.
Ethics Lives in Systems, Not Statements
As I moved into international development and health systems strengthening, the stakes became even higher.
Ethics was no longer just about compliance, it was about people’s lives, dignity, and access to opportunity.
In many of the programmes I supported across the Global South, we made a deliberate choice to embed ethics into the architecture of delivery:
- Beneficiary feedback mechanisms that allowed communities to raise concerns safely
- Complaints and redress systems that were accessible, confidential, and responsive
- Safeguarding protocols integrated into programme operations—not treated as standalone policies
- Participatory approaches ensuring communities were not passive recipients, but active partners
These were not symbolic gestures. They were operational systems designed to hold organisations accountable to the people they serve.
Because without feedback loops, there is no accountability.
And without accountability, ethics cannot be demonstrated.
Governance Is Where Ethics Becomes Real
My work in audit, compliance, and information governance, particularly around GDPR implementation, reinforced a critical point:
Ethics becomes real when it is governed.
This means:
- Clear ownership of decisions
- Transparent data handling practices
- Defined escalation pathways when things go wrong
- Continuous monitoring of risks and vulnerabilities
- Documented processes that can withstand external scrutiny
I’ve supported organisations in reviewing everything from finance systems and databases to HR recruitment platforms and identifying vulnerabilities, recommending corrective actions, and strengthening controls to ensure confidentiality, integrity, and availability of information.
But beyond the technical controls, the real question was always:
Can this system be trusted by the people it affects?
Inclusion Is the Test of Ethical Systems
Inclusion has been a central thread throughout my work.
Across hundreds of programmes, we saw that systems often fail not because they are inefficient, but because they are designed without the voices of those most affected.
When inclusion is missing:
- Feedback mechanisms are underused or inaccessible
- Complaints go unheard or unresolved
- Data fails to reflect lived realities
- Decisions unintentionally exclude vulnerable groups
When inclusion is embedded:
- Systems become more responsive
- Trust increases
- Risks are identified earlier
- Outcomes improve sustainably
In this sense, inclusion is not separate from ethics, it is the evidence of it.
The Illusion of Ethical Compliance
Today, many organisations speak confidently about ethics, whether in AI, data governance, or service delivery.
But there is a growing risk of what I would call ethical illusion:
- Policies that exist but are not implemented
- Frameworks that are designed but not tested
- Commitments that are communicated but not measured
From my experience, the organisations that truly uphold ethics are not those with the most polished statements—but those with the most robust systems of accountability.
They invest in:
- Regular audits
- Independent reviews
- Continuous risk assessments
- Strong information governance
- Mechanisms that allow people to challenge decisions
Because they understand that ethics must be demonstrated, not assumed.
From Compliance to Trust
Whether working on GDPR implementation, strengthening health systems, or designing inclusive programmes, my focus has always been on moving organisations beyond compliance and towards trust.
Compliance answers the question: Are we following the rules?
Ethics answers the question: Are we doing what is right?
And trust is built when the answer to both is consistently yes.
In every system I have worked on, from information platforms to global development programmes, the same truth applies:
Ethics is not a declaration.
It is a practice.
It is a system.
It is a set of decisions made visible through action.
The real test of any organisation is not what it says about ethics, but whether its systems can prove it.
Because in the end, ethics is not what you publish.
It is what people experience.
GEORGE GOPAL OKELLO Programmes Director, InclusiveAIHub
📌InclusiveAIHub is currently an independent initiative – donations support content creation, research, and operating costs.











