Thanks for your response, Lee.
From what I can tell, there are no clear patterns or commonalities. For example, one of the courses missing in the report for one user, was still there for other users. It's difficult to know what clues to look for as I have limited knowledge of where to look and what should or shouldn't raise flags.