The analysis of cross-border learner records keeps international policy context distinct from applicable law and from choices made by individual institutions.
Evidence relevant to cross-border learner records
In examining cross-border learner records: responsibilities across jurisdictions, for cross-border learner records, the reference basis—the mobility and data governance—is evidential rather than self-executing. The source can frame further questions without supplying either a binding direction or proof of causation.
Application to cross-border learner records
In the context of cross-border learner records, the required public outcome should be stated in operational terms.
Review of the arrangements should follow a stated and reproducible method. In the context of cross-border learner records, cross-jurisdiction interpretation should distinguish international commitment, regional instrument, national law, regulatory direction and provider policy.
- Do partner arrangements change responsibility?
- Which jurisdiction governs the activity?
- How will conflicting requirements be managed?
- What is the status of the relevant instrument?
- Who has enforcement authority?
Controls for cross-border learner records
The principal risks in relation to the policy position are collection without a defined educational or legal purpose, uncontrolled supplier access or transfer, excessive access to learner information, and retention beyond an identified need. For cross-border learner records, the risks are interdependent; failure of one control may conceal or disable another.
Review of cross-border learner records
Across the defined scope, the evidential record should be limited to material that can answer the question under review. For cross-border learner records, the most relevant material is likely to include retention and secure disposal evidence, incident response and notification records, a register of information assets and purposes, and lawful authority and consent records where relevant.
The review method for the measure should be reproducible. In this case, the reviewer should prepare a jurisdictional register identifying the service, learner location, provider location, responsible authority, applicable instrument and conflict rule. In the context of cross-border learner records, obtain competent interpretation where the legal position is uncertain and do not resolve uncertainty through promotional wording.
For cross-border learner records, the implementation record for the issue should identify the instrument being applied, its status, the competent authority, the affected jurisdiction and the action expected of each responsible body. Binding obligations should remain distinct from policy commitments and measures adopted by institutions.
Implications for cross-border learner records
Decisions concerning the policy position should remain traceable to the information available for the stated reference period.
In examining cross-border learner records: responsibilities across jurisdictions, education information should be collected for a defined purpose, protected in proportion to its sensitivity and retained only for an authorised period.