Ethical Governance of Virtual Learning and Student Privacy in Foreign Cloud-Hosted Learning Environments in Rwanda: A Systematic Review
DOI:
https://doi.org/10.51168/5ccazz42Keywords:
Ethical governance, student privacy, cloud computing, Learning Management Systems, Rwanda higher educationAbstract
Background: The recent development of cloud computing and Learning Management Systems has dramatically changed teaching and learning processes in higher education institutions throughout the world. This systematic review aims at synthesizing and critically evaluating existing evidence on ethical governance mechanisms and student privacy protections in foreign cloud-hosted learning environments in higher education, particularly in Rwanda. Methods: Peer-reviewed literature published between 2005 and 2025 was systematically searched in relevant databases. Studies dealing with ethical governance, student privacy, cloud computing, Learning Management Systems, digital sovereignty, and higher education were considered in the current review. The systematic review covered studies involving higher education institutions, students, faculty members, institutional governance mechanisms, and foreign cloud-hosted learning platforms. Results: A systematic review methodology was used to find, screen, appraise, and synthesize evidence in 38 articles. The systematic review was guided by the concepts of Digital Sovereignty Theory, Institutional Theory, and Technology-Organization-Environment (TOE) Framework. It was found that inadequate data center infrastructure, poor governance mechanisms at institutions, and low digital literacy of students and faculty members are the main barriers to the proper protection of students' data and compliance with Law No. 058/2021 on personal data and privacy in Rwanda. Furthermore, institutional pressures make universities adopt foreign cloud services in order to achieve legitimacy and efficiency, regardless of privacy and data sovereignty issues. However, the use of cloud computing technologies brings many advantages, such as accessibility, scalability, collaboration, and learning analytics. Conclusion: In order to ensure strong ethical governance and data sovereignty in Rwanda, it is necessary to invest in local digital infrastructure, develop robust institutional governance frameworks, enforce data protection policies, perform regular Data Protection Impact Assessments, and build digital ethics and cybersecurity capacity. Future research: Future research is required to explore the consequences of the dependence on foreign cloud hosting in higher education in Rwanda.References
1. Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behavior in the age of information. Science, 347(6221), 509-514. https://doi.org/10.1126/science.aaa1465
2. African Union. (2014). African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention). African Union.
3. African Union. (2022). Data policy framework. African Union Commission.
4. Armbrust, M., Fox, A., Griffith, R., Joseph, A. D., Katz, R. H., Konwinski, A., Lee, G., Patterson, D. A., Rabkin, A., Stoica, I., & Zaharia, M. (2010). A view of cloud computing. Communications of the ACM, 53(4), 50-58. https://doi.org/10.1145/1721654.1721672
5. Coates, H., James, R., & Baldwin, G. (2005). A critical examination of the effects of learning management systems on university teaching and learning. Tertiary Education and Management, 11(1), 19-36. https://doi.org/10.1080/13583883.2005.9967137
6. Couture, S., & Toupin, S. (2019). What does the notion of "sovereignty" mean when referring to the digital? New Media & Society, 21(10), 2305-2325. https://doi.org/10.1177/1461444819865984
7. DiMaggio, P. J., & Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147- 160. https://doi.org/10.2307/2095101
8. Floridi, L. (2013). The ethics of information. Oxford University Press. https://doi.org/10.1093/acprof:oso/9780199641321.001.0001 https://doi.org/10.1093/acprof:oso/9780199641321.003.0002
9. Floridi, L. (2014). The fourth revolution: How the infosphere is reshaping human reality. Oxford University Press.
10. Floridi, L., & Taddeo, M. (2016). What is data ethics? Philosophical Transactions of the Royal Society A, 374(2083), 20160360. https://doi.org/10.1098/rsta.2016.0360
11. Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernández, E. B. (2013). An analysis of security issues for cloud computing. Journal of Internet Services and Applications, 4(1), 5. https://doi.org/10.1186/1869-0238-4-5
12. Ifenthaler, D., & Schumacher, C. (2016). Student perceptions of privacy principles for learning analytics. Educational Technology Research and Development, 64(5), 923-938. https://doi.org/10.1007/s11423-016-9477-y
13. Mell, P., & Grance, T. (2011). The NIST definition of cloud computing (SP 800-145). National Institute of Standards and Technology.
14. https://doi.org/10.6028/NIST.SP.800-145
15. Mueller, M. (2017). Will the internet fragment? Sovereignty, globalization, and cyberspace. Polity Press.
16. Nissenbaum, H. (2010). Privacy in context: Technology, policy, and the integrity of social life. Stanford University Press. https://doi.org/10.1515/9780804772891
17. North, D. C. (1990). Institutions, institutional change, and economic performance. Cambridge University Press. https://doi.org/10.1017/CBO9780511808678
18. OECD. (2013). The OECD privacy framework. OECD Publishing.
19. OECD. (2019). OECD principles on artificial intelligence. OECD Publishing.
20. Ostrom, E. (1990). Governing the commons: The evolution of institutions for collective action. Cambridge University Press. https://doi.org/10.1017/CBO9780511807763
21. Pardo, A., & Siemens, G. (2014). Ethical principles for learning analytics. British Journal of Educational Technology, 45(3), 438-450. https://doi.org/10.1111/bjet.12152
22. Pohle, J., & Thiel, T. (2020). Digital sovereignty. Internet Policy Review, 9(4), 1-19. https://doi.org/10.14763/2020.4.1532
23. Republic of Rwanda. (2021). Law No. 058/2021 of 15/10/2021 relating to the protection of personal data and privacy. Government of Rwanda.
24. Rhodes, R. A. W. (1996). The new governance: Governing without government. Political Studies, 44(4), 652-667. https://doi.org/10.1111/j.1467-9248.1996.tb01747.x
25. Sackey, E., & Bahl, M. (2020). Socio-technical system configurations for secure cloud computing in academic environments. International Journal of Information Management, 52, 102115.
26. Scott, W. R. (2014). Institutions and organizations: Ideas, interests, and identities (4th ed.). SAGE Publications. https://doi.org/10.3917/mana.172.0136
27. Selwyn, N. (2016). Education and technology: Key issues and debates. Bloomsbury Academic. https://doi.org/10.5040/9781474235952
28. Slade, S., & Prinsloo, P. (2013). Learning analytics: Ethical issues and dilemmas. American Behavioral Scientist, 57(10), 1510-1529. https://doi.org/10.1177/0002764213479366
29. Solove, D. J. (2006). A taxonomy of privacy. University of Pennsylvania Law Review, 154(3), 477-560. https://doi.org/10.2307/40041279
30. Solove, D. J. (2021). Understanding privacy. Harvard University Press.
31. Subashini, S., & Kavitha, V. (2011). A survey on security issues in service delivery models of cloud computing. Journal of Network and Computer Applications, 34(1), 1-11. https://doi.org/10.1016/j.jnca.2010.07.006
32. Sultan, N. (2010). Cloud computing for education: A new dawn? International Journal of Information Management, 30(2), 109-116. https://doi.org/10.1016/j.ijinfomgt.2009.09.004
33. UNCTAD. (2021). Data protection and privacy legislation worldwide. United Nations.
34. UNDP. (2022). Digital strategy 2022-2025. United Nations Development Programme.
35. UNESCO. (2021). Recommendation on the ethics of artificial intelligence. UNESCO.
36. Westin, A. F. (1967). Privacy and freedom. Atheneum.
37. Williamson, B. (2017). Big data in education: The digital future of learning, policy and practice. SAGE Publications. https://doi.org/10.4135/9781529714920
38. World Bank. (2021). World development report 2021: Data for better lives. World Bank.
39. Zuboff, S. (2019). The age of surveillance capitalism: The fight for a human future at the new frontier of power. PublicAffairs.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Albert Rugaba (Author)
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
SJ-Education publishes under the Attribution-Noncommercial-NoDerivatives 4.0 international (CCBY-NC-ND 4.0) license which allows you to Share, Copy, and redistribute the materials in any medium or format. The licensor cannot revoke these freedoms as long as you follow the license terms; 1. Attribution: You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use. 2. Non-commercial: You may not use the material for commercial purposes. Commercial use is one primarily intended for commercial advantage or monetary compensation. 3. No Derivatives: if you remix, transform, or build upon the material, you may not distribute the modified material. 4. No additional restrictions: You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
