Executive summary
The Australian higher education sector is navigating a period of rapid digital transformation alongside major legislative reforms aimed at strengthening data privacy and enabling public sector data sharing. This shift coincides with sweeping national higher education policy reform, driven by the Australian Universities Accord’s call for significantly expanded student equity data collection. This expansion is intended to underwrite new funding models, improve equity program evaluations, and ensure accountability.
The intersection of digital transformation and evolving higher education policy creates a strategic tension: while richer equity datasets are crucial for advancing policy goals, they contain sensitive personal information that heightens privacy, fairness, and governance risks. These risks are not hypothetical—misuse, overcollection, and poor transparency disproportionately affect equity cohorts. Yet the findings of this Fellowship suggest that many Australian universities remain significantly underprepared to meet the complex governance and ethical challenges these data require.
Research objective and questions
Against this backdrop of intersecting challenges, research on data governance in Australian universities, particularly regarding sensitive student equity data, remains critically limited. This ACSES Equity Fellowship addresses that gap by examining three central research questions (RQs):
(RQ1): What are the current and emerging legislative and regulatory frameworks for data privacy in Australia, and how might pending reforms affect universities and the governance of student equity data?
(RQ2): How do Australian universities approach data and digital governance in their policies, and to what extent do these frameworks consider or prioritise student equity?
(RQ3): What challenges and opportunities do student equity practitioners and senior university leaders identify in balancing the value and risks of student equity data within current governance frameworks and cultures?
Methodology
The research employed a multi-level, mixed-methods design, structured according to the “data work in context” framework (Foster et al., 2018), which examines data governance across macro, meso, and micro levels. The scope encompassed three interconnected streams of inquiry:
- a review of the changing Australian legislative landscape relating to data privacy (macro level, RQ1)
- a systematic content analysis of hundreds of university policies related to data governance, privacy, and student support (meso level, RQ2)
- a qualitative study based on in-depth, semi-structured interviews with 21 university student equity practitioners and senior leaders (micro level, RQ3).
This integrated approach provides a grounded and holistic view of governance gaps, practitioner experiences, and opportunities for systemic reform.
Key findings
The findings reveal that Australian universities face significant and largely unresolved governance challenges in relation to student equity data, spanning three interconnected levels.
The privacy and regulatory landscape is fragmented and in transition. Australia’s privacy framework remains a patchwork of Commonwealth, state, and territory legislation that creates significant ambiguity for universities navigating their governance obligations. Reforms underway, including proposed amendments to the Privacy Act 1988 (Cth), signal a clear direction towards more proactive, rights-respecting models of data governance, including privacy-by-design. However, the pace and unevenness of reform mean universities are operating amid shifting and sometimes contradictory obligations, with limited sector-specific guidance to support consistent practice.
Institutional policy frameworks are fragmented, siloed, and poorly equipped to govern equity data. Systematic analysis of policies across 39 Australian universities found that privacy, data governance, learning analytics, artificial intelligence (AI), and student support instruments frequently sit in separate silos, use inconsistent terminology, and are weakly cross-referenced. Students, staff, and even internal decision-makers are often unable to determine how equity-related data are collected, combined, and used, or what safeguards apply. The governance of grey data, including behavioural, inferred, and algorithmically derived information, falls largely outside existing frameworks.
Frontline equity staff and the students they serve bear the consequences of governance failure. The qualitative study, drawing on interviews with 21 equity practitioners and senior leaders, reveals the practical and ethical toll of these structural gaps. Staff routinely navigate ethically complex data decisions without adequate guidance, escalation pathways, or institutional protection. Growing demands for data-intensive evaluation, accelerated by the Australian Universities Accord, are intensifying pressure on universities to collect and use sensitive equity data faster than governance structures can support. Significant ethical burdens are shifted onto individual staff members rather than systems, while the student communities most affected bear disproportionate risk.
Recommended actions
Ethical and equity-centred data governance is not merely a compliance obligation—it is a condition for advancing student equity in the digital age. The report’s nine recommendations are directed at four audiences.
The Australian Government Department of Education should embed privacy and data governance safeguards across the equity policy life cycle and explicitly permit equity program funds to support governance capability uplift in universities. The Australian Tertiary Education Commission (ATEC) and the Tertiary Education Quality and Standards Agency (TEQSA) should collaborate to establish a national baseline for student equity data governance and develop shared, sector-specific tools to drive consistency across a fragmented landscape.
For universities, the recommendations are both the most numerous and the most operationally immediate. They should adopt standards above legal minima and implement privacy-by-design; harmonise their data, digital, and equity policy frameworks; establish defined oversight pathways for evaluation activities outside Human Research Ethics Committee (HREC) review; embed participatory governance with paid student and staff co-design; and ensure frontline equity support is backed by resourcing, clear policy, and safe escalation.
Finally, peak bodies and professional associations should co-design and publish field- and cohort-specific practice standards and exemplars for ethical equity data governance.
What is at stake is trust, and the communities most affected by these practices must have a genuine voice in shaping them.
Recommendations
Recommendations for government and policymakers
Recommendation 1: The Australian Government Department of Education should embed privacy, data, and digital governance safeguards across the equity policy life cycle—design, implementation, and evaluation.
Recommendation 2: The Australian Government Department of Education should permit equity program funds to support privacy-by-design, ethical evaluation, and equity data governance capability in universities.
Recommendations for sector steward and regulator: ATEC and TEQSA
Recommendation 3: ATEC and TEQSA should collaborate to establish a national baseline for student equity data governance and provide shared, sector-specific tools to drive consistency across a fragmented landscape.
Recommendations for universities
Recommendation 4: Universities should adopt standards above legal minima and implement privacy-by-design and robust data and digital governance.
Recommendation 5: Universities should harmonise digital and data policy frameworks and centre equity across the policy suite.
Recommendation 6: Universities should establish defined oversight responsibilities for equity-related evaluation activities that fall outside HREC review.
Recommendation 7: Universities should embed democratic and participatory data governance and resource co-design with students and staff.
Recommendations for senior university leaders, peak bodies, and professional associations
Recommendation 8: Senior university leaders should ensure frontline equity support operates under a robust privacy-by-design data culture—backed by resourcing, clear policy, and safe escalation.
Recommendation 9: Peak bodies and professional associations should co-design and publish field- and cohort-specific practice standards and exemplars for ethical equity data governance.
The full report is available for download in PDF [906 KB] or Word [456 KB] format.
