Bekendtgørelse om krav til studieadministrative it-systemer for almene voksenuddannelser, erhvervsuddannelser, arbejdsmarkedsuddannelser, de gymnasiale uddannelser, forberedende grunduddannelse m.fl. | B20230047605 — Denmark law | Esheria

Bekendtgørelse om krav til studieadministrative it-systemer for almene voksenuddannelser, erhvervsuddannelser, arbejdsmarkedsuddannelser, de gymnasiale uddannelser, forberedende grunduddannelse m.fl.

Bekendtgørelsen gælder for visse uddannelsesinstitutioner og deres studieadministrative IT-systemer, som skal følge bestemte kontrolmål og kun bruges, hvis der foreligger en systemrevisionserklæring uden modifikationer.

AI-assisted research synopsis — verify against the official legal text below.

Jurisdiction
Denmark
Instrument
Regulation
Citation
B20230047605
Status
Not in force
Version
Undated source snapshot
Language
da
Updated
Official source
View official record ↗
IT compliance access control audit reporting change management exam administration institutional compliance interface controls payments person data processing personal data processing statistics reporting student reporting study administration systems study-administrative IT systems system audit system audit statements system integration

Statute overview

About this statute

Bekendtgørelsen gælder for visse uddannelsesinstitutioner og deres studieadministrative IT-systemer, som skal følge bestemte kontrolmål og kun bruges, hvis der foreligger en systemrevisionserklæring uden modifikationer. A system audit statement must be prepared and signed by a state-authorized or registered auditor, and the auditor must sign it within 1 month after the audit period ends. The authority publishes a list of approved study-administration IT systems, suppliers must send system audit statements to the authority, and institutions must contact the authority if no new statement is in place before expiry and they want to keep using the system. Systemleverandøren must keep SA-systemet aligned with rules, controls, and data-protection requirements, and the system must support access control, audit trails, change management, and certain reporting and interface controls. SA-systemet must support multiple education-data exchanges and reporting functions for covered education areas.