Technology is never only a collection of tools. It is an arrangement of permissions, attention, memory, and power. To design any of these is to make a claim about the person and about the kind of common life we want to make possible.
Catholic social thought gives designers a demanding starting point: technology must serve the whole person and the whole community. Gaudium et Spes calls the human person the beginning, subject, and goal of social institutions (25). The Compendium of the Social Doctrine of the Church orders social life by dignity, the common good, subsidiarity, and solidarity. Laudato Si' adds an ecological and intergenerational horizon, while Dignitas Infinitainsists that dignity is intrinsic, not a reward for performance, usefulness, or recognition.
What follows is not a new catalogue of binding doctrine, nor a claim that one architecture is always morally required. These are practical design heuristics: questions and defaults by which builders can test whether a system respects those principles in its particular context. They involve prudential judgments about risk, cost, and competing goods. The order is intentional: see the person truthfully, locate that person in a community, limit power, and leave room for conscience, repair, and departure.
Principle 1 — Make dignity the non-negotiable subject
Design for a person before designing for a metric. A user is not a conversion, a risk score, a wallet, or a source of training data. Make the system’s goals legible in human terms and identify who bears its failures. Preserve meaningful agency where the system affects livelihood, bodily integrity, reputation, or access to essentials. Dignitas Infinita grounds this demand in the inviolable dignity of every human being, including those whose choices or capacities do not serve an institution’s objectives. Efficiency may be a real good, but it is never permission to turn persons into means.
Principle 2 — Make truth more available than distortion
Build for truthful understanding, not merely persuasive output. Show provenance where it matters, distinguish observation from inference, and give people a way to correct material errors. Communicate uncertainty rather than laundering a guess into a confident verdict. A moderation or ranking system may need to limit deliberate falsehoods, but it should not pretend that its own classification is reality itself. The Compendium describes truth as essential to social life because without it freedom and justice become unstable. This does not demand an impossible neutral interface or settle every contested question; it demands intellectual honesty about evidence, incentives, and limits.
Principle 3 — Optimize for the common good, not aggregate engagement
Ask what a system contributes to the conditions in which people and communities can flourish together. Measure more than growth, clicks, or time-on-device: consider health, trust, access, safety, meaningful work, and the quality of shared attention. Include people who are not customers but are affected by the product—children, neighbors, future users, and those excluded from its market. In the Compendium, the common good is not the largest sum of private preferences; it is the social condition that allows persons and groups to reach fulfillment more fully. A public benefit cannot excuse every intrusion or suppress legitimate difference. It is a criterion for widening responsibility.
Principle 4 — Keep decisions at the smallest competent scale
Practice subsidiarity in the architecture itself. Let people control ordinary settings, let local communities adapt rules to local knowledge, and reserve central intervention for problems that smaller units genuinely cannot solve. Offer local-first storage, delegated administration, portable configuration, and transparent escalation rather than making one platform the permanent sovereign. Subsidiarity, as the Compendium explains, protects initiative below while requiring higher authorities to help when lower bodies need assistance. It is not a license for indifference: a local actor may lack resources to prevent systemic abuse. Centralize only what must be coordinated, and make that necessity answerable.
Principle 5 — Make solidarity visible in the distribution of risk
Design with, and not merely for, people who bear the costs of a system. Audit disparate burdens, fund accessibility, and give affected communities standing in governance. When a service relies on invisible labor, extractive data practices, or environmental sacrifice elsewhere, do not call the outcome frictionless; name who absorbs the friction. Solidarity is more than empathy for an imagined user. It is the “firm and persevering determination” to pursue the good of all, as the Compendium puts it, because we are responsible for one another. A Solidarity therefore requires attention to unequal power, not a simplistic preference for local variation.
Principle 6 — Protect privacy and the interior life
Collect the least sensitive information needed, separate purposes, shorten retention, and make private use a real option rather than a premium feature. Treat searches, relationships, prayer, health, conscience, and unformed thoughts as more than commercial signals. Give people understandable control over disclosure. Privacy is not secrecy for its own sake: it gives conscience room to mature and relationships room to be freely given. Gaudium et Spes defends the dignity of conscience, and Dignitas Infinita warns against forms of technological power that reduce freedom and manipulate persons. Security, accountability, and public safety can justify carefully bounded access; they do not justify total legibility as a default.
Principle 7 — Guarantee appeal wherever consequences are serious
If an automated or delegated decision can remove housing, income, education, mobility, reputation, or participation, provide notice, reasons in usable language, a timely human review, and a remedy that can actually change the outcome. Preserve an audit trail without pretending that a log is an explanation. The reviewer must have authority, context, and time. This principle follows from the moral fact that responsibility cannot disappear behind “the algorithm decided.” It is a prudential implementation of dignity and justice, not a claim that every low-stakes recommendation requires a tribunal.
Principle 8 — Build for mercy, correction, and a changed person
Preserve accountability without making a past error an eternal identity. Use expiration dates, contextual records, restorative pathways, and proportionate sanctions. Allow a person to explain, repair harm, and demonstrate change; make data deletion and correction technically credible where legitimate duties do not require retention. A system can remember enough to protect another person while refusing to make memory a weapon. Christian mercy is not denial of truth or the cancellation of justice. It is the refusal to treat anyone as irredeemable. This is a design aspiration rather than a requirement that every record disappear: safety, due process, and historical truth may call for preservation. The question is whether architecture leaves any path toward reconciliation.
Principle 9 — Match intervention to harm and evidence
Apply proportionality: choose the least intrusive measure capable of addressing a real and evidenced risk, and revisit it as circumstances change. Distinguish a nuisance from a threat to bodily safety, a reversible mistake from a permanent exclusion, and suspicion from proof. Scope permissions narrowly, stage enforcement, and test whether a broad surveillance or identity requirement actually delivers a commensurate benefit. Proportionality does not turn a formula into moral permission: some acts are wrong regardless of projected utility. It is a discipline for choosing among otherwise legitimate responses where power can outrun necessity.
Principle 10 — Steward the material and digital commons
Account for the energy, minerals, labor, attention, and waste behind every “cloud” service. Build for repair, efficient computation, accessibility, long service lives, and responsible retirement. Prefer open standards and documentation that let communities maintain what they depend upon. Laudato Si' rejects the illusion that technical power is costless: human and ecological systems are interdependent, and care for creation includes the structures of production and consumption. Stewardship does not mean refusing every powerful or energy-intensive tool. It means making externalities visible, comparing alternatives honestly, and accepting limits.
Principle 11 — Make participation substantive, not decorative
People affected by a system should have more than a survey to complete after its launch. Involve them in problem definition, prototyping, governance, evaluation, and revision; compensate expertise that would otherwise be extracted for free. Publish understandable policies, decision rights, and routes for collective complaint. Participation respects the social nature of the person and the civic dimension of the common good. Participation should be designed with safeguards against domination and consultation fatigue, while treating consent and voice as sources of knowledge and legitimacy.
Principle 12 — Preserve the right to exit through interoperability
Essential relationships should not be made captive to one vendor, identity silo, or proprietary format. Provide export in usable, documented formats; support open protocols, migration, federation, and graceful account closure where the service and the rights of others permit it. A useful export cannot automatically carry every social relationship, license, moderation decision, or third party's data. The practical aim is narrower: let a person retain as much of their own history, work, and lawful access as the context allows. Exit cannot erase duties to protect others or preserve due process, but it does place a limit on domination. A credible path out disciplines institutions that would otherwise turn convenience into dependence.
Objections, tradeoffs, and a constructive test
These principles can appear to pull in opposite directions. Privacy may frustrate fraud prevention; local control may complicate safety; interoperability may increase abuse or weaken a coherent user experience; appeals and participation cost money and time. A critic might say that the result is slower, less optimized technology that cannot compete with systems built for maximal extraction. That objection is serious. Catholic social thought does not ask us to pretend that scarcity, expertise, or real danger have disappeared.
The answer is not to maximize every principle at once, but to make conflicts explicit and power reviewable. Define the harm, identify who decides, use the narrowest effective intervention, publish the evidence, and set a date to reconsider the exception. Give more weight to reversibility when uncertainty is high, and more weight to solidarity when burdens fall on those with least power. The common good is not whatever produces the smoothest dashboard. It is the patient work of ordering technical capability toward conditions in which people can know truth, act freely, belong to one another, and care for a shared world.
A Catholic technology design review could therefore end with twelve simple questions: Whose dignity is at stake? What is known and how can it be corrected? Who benefits together? What can remain local? Who carries the risk? What interior space is protected? Can a person appeal? Can a person change? Is the response proportionate? What are we stewarding? Who has a real voice? Can anyone leave? The answers will vary by system and circumstance. The work is to keep asking them before architecture hardens into destiny.
A checklist is not governance by itself. Before a consequential system ships, treat dignity, non-discrimination, bodily safety, and a usable appeal as floors rather than tradeable points; name the approver for each remaining conflict; and record the evidence, affected voices, costs, and chosen alternative. Lower-risk tools can use a short review, while a system affecting housing, health, livelihood, or liberty needs independent challenge, a staffed remedy, and a sunset date. Pilot the instrument on one ordinary and one high-impact workflow, then publish correction time, exclusion, adverse outcomes, energy, and operating cost. Those measures cannot settle every moral judgment, but they can expose when “proportionality” is merely a way to weaken protection.
Source Notes
The principal synthesis for dignity, the common good, subsidiarity, solidarity, participation, rights, duties, and stewardship.
Catholic reflection on technology’s social and environmental power and the need for integral human development.
The doctrinal foundation for treating human dignity as inherent rather than earned through performance or status.
The Council’s account of the person as the subject and end of social institutions, the common good, freedom, and social responsibility.
Editorial revision note
This essay completed one self-editing, cross-essay consistency, and strongest-criticism pass. Its controlling thesis was preserved while objections, qualifications, evidence limits, and practical consequences were strengthened.