In Australia, the desirability and feasibility of a standardised approach to privacy management has been highlighted during the implementation of jurisdictional data hubs modelled on the Learning Services Architecture (refer here). In these implementations school authorities engage third party providers to exchange data according to Australia-wide agreed use cases and using agreed standards. Standardised contracting as part of the IT procurement process is a natural extension of this approach and offers benefits to both schools and suppliers in terms of efficiency, transparency and risk management.
The A4L Community and NSIP are undertaking work on several fronts to assist in managing data privacy. This includes the development of a Privacy Framework linked to the SIF Data Model Specification (Australia), SIF based privacy filters and involvement in the Student Data Privacy Consortium (SDPC). The SDPC is a non-profit organisation which was established in mid-2016 under sponsorship of the A4L Community and includes as members schools, school districts, regional and state agencies, policy makers, trade organizations and marketplace providers. Details can be found here.
The SDPC has developed a standardised contract and toolset which has enabled the simplified selection and implementation of education ICT applications and reduced the legal and administrative burden on schools and school districts. The SDPC’s work to date has focussed on developing a reusable privacy “Contract Framework” to streamline the engagement of vendors by schools and districts.
Following presentations to Australian stakeholders on the SDPC requests have been received from the Australian States of Queensland and Victoria for assistance in establishing a baseline contract for Australian privacy in education (CAPE). Interest has also been expressed by other jurisdictions. Government and Non-Government sectors and vendors are all expected to benefit as the baseline contracts are established over the coming months.
Stay tuned to the A4L website, newsletter and privacy group for more privacy news.