This review considers cross-border data transfers, with attention to data provenance, population coverage, stable definitions and appropriate limits on inference.
In examining cross-border data transfers: access, participation and outcomes, the analysis proceeds on the basis that comparable indicators can support public decision-making, but they do not remove the need to examine variation within systems and institutions.
A national or international pattern may justify closer review of the analysis, but provider-level action requires evidence relating to the affected provision. Variation in population coverage, reference period or classification should accompany the reported comparison.
In examining cross-border data transfers: access, participation and outcomes, for cross-border data transfers, the General Data Protection Regulation applies from 25 May 2018. Education providers processing personal data within its scope must connect each use to an appropriate legal basis and comply with principles governing fairness, transparency, purpose, minimisation, accuracy, retention and security. Rights and accountability are operational matters: notices, access controls, correction, supplier oversight, incident response and records of decision-making should function in practice.
In the context of cross-border data transfers, the central objective should not be obscured by the form of the administrative response.
Application to cross-border data transfers
The analysis proceeds on the basis that the subject should be examined as a connected system of policy, people, resources, decisions and evidence.
A proper review of the comparison should establish the intended outcome before selecting controls or indicators. In the context of cross-border data transfers, trend claims require comparable observations over time and a documented account of revisions, breaks in series and changes in coverage.
Controls for cross-border data transfers
In the present context, jurisdictional uncertainty in complaints, support gaps for mobile learners and unclear awarding responsibility may produce acceptable aggregate reporting while individual learners remain exposed to material disadvantage. Adverse cases should form part of the sample wherever they may reveal a material control weakness.
- Provide support suited to mobile learners, with responsibility, scope and timing recorded.
- Apply criteria consistently.
- Preserve verifiable records.
- Identify the authority responsible for each decision.
- Monitor partner and jurisdictional risks before it informs a consequential decision.
Review of cross-border data transfers
Useful records include cross-border agreements and responsibility maps, secure and verifiable learner records, documented credit and recognition decisions, published admission and recognition criteria, and clear identification of providers and awarding bodies.
The method for the measure is to map the complete process, identify the intended result and responsible authority at each stage, and test normal cases together with exceptions. For cross-border data transfers, findings should establish whether the matter is isolated or indicates a condition requiring systemic response.
Implications for cross-border data transfers
Records relating to the measure should preserve both the conclusion and its limits. For cross-border data transfers, if further evidence changes the position, the correction should identify its scope and any earlier decision requiring reconsideration. Across the defined scope, this is material where learners, authorities or institutions relied on information that cannot be corrected by replacing the current text alone.
For cross-border data transfers, complete assurance concerning the comparison cannot rest on a single indicator or isolated control.