Education research and statistics must use anonymised data unless research requires identification; targeted-policy research needing identification uses pseudonymous data with re-identification limited to cases within the policy; research by other entities needing identification requires specific consent of the student or parent; pseudonymous data must not be used for incompatible purposes or decisions about the student, attribution data must be kept separately under safeguards, and identifiable details must be anonymised, deleted or destroyed after the initiative; research involving special categories needs the Commissioner's approval under article 7 of the Act.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.