You have to identify and explain the legal and ethical obligations that the organisation will encounter (of course you'll relate it to whatever case study you're doing).
So you have to talk about issues concerning privacy, copyright, that sort of thing. Definitely talk about some of the
National Privacy Principles in your report. You also might want to talk about the copyright ownership of the software (i.e. if Mr X hired a programmer who owns the program?).
For example, in my outcome the owner of the organisation wanted an email address from the clients so that he could use it for marketing purposes. One of the privacy principles states that whoever is collecting the data must disclose exactly why they are collecting it - this means that the owner has to be clear that he wants to advertise to clients via email.
I'm sure if you read through your case study with legal/ethical/privacy issues in mind, you'll find heaps of things to discuss.