1/16/2024 0 Comments Microsoft formsMicrosoft Forms (formerly Office 365 Forms) is an online survey creator, part of Office 365. Outcome: You should now know how to use Microsoft Forms with sensitive data.Not to be confused with Windows Forms. The contact information of someone who can answer questions about privacy How the information collected will be used The purpose for which the information is being collected A privacy statement should include the following information: This is good practice anytime you are collecting data and is a best practice requirement if you are collecting personal data. Include data purpose statementįorms you create should always include a statement of why you are collecting the data and what you will do with it. You can even embed your Form or Form responses directly into SharePoint or Teams. When a group “owns” a Form, all group members can see and work on the Form and its data without needing to use the “Share to collaborate” link. You can avoid this by making a group the owner of your Form (see above). The “Share to collaborate” link means that anyone you send this link to can forward that link to anyone else they think should have access, removing your ability to control who can see the data. The “Share to collaborate” link offers only two levels of privacy: sharing with everyone and sharing with people in your organization (all of OHIO, including students and guest accounts). Share to collaborate links are not tied to individual accounts (they can be forwarded or shared). Note: All collaborators have access to all response data. Therefore all individuals identified as collaborators must have a need to access the data to perform their job (principle of least privilege). Share to collaborate – This will give you a link you can share with other people who are working on the Form or the data it collects. Share as a template – This allows you to create a duplicate of your Form that you can save under a new name or share with someone else. Send and collect responses – This gives you a link that you can use to collect responses to your Form. When you click on the Share button in Forms, it gives you multiple pieces of information: As such, the Share a Form to Collaborate option must not be used when collecting sensitive data. There is an option to Share a Form to Collaborate – but this will give all collaborators the ability to access response data. Instead, it will appear when you click the Group Forms option. Once complete, the Form will no longer be visible in the My Forms area. Note: Everyone in that group or team will now be able to see the form and all responses it collects. Click on one to make that group or team the owner of your form. Select the " ⁞ " icon on the right side of your Form.Ī new panel will open showing you the full list of all O365 Groups and Teams of which you are a member. Move them to Group ownership using the following steps: Once you have defined the purpose of data collection, the data can only be used in a manner consistent with that purpose. All collaborators should be clear on where the data is to be stored and how it is to be used before any responses are collected.īy default, the Forms you create are tied to your personal account – sensitive data must never be stored in a personal OneDrive account and must be saved to the group’s or department’s SharePoint site in a secure folder.Results of Forms must only be shared with those who have a need to access such forms, thus adhering to the principle of least privilege.īefore using Forms, make sure you (and all your collaborators) understand the purpose of the data. The OneDrive Group associated with the creation of forms that collect sensitive data must be configured according to the Sensitive Data in OneDrive Standard.įorms must NOT be “Shared to Collaborate.” This will prevent the storage of sensitive data within an individual Office 365 account, as well as prevent any data collected via the form from loss in the event an individual transfers roles or departs the institution. Mac, PC, web browser, mobile app Solution Guidelines for using Microsoft Forms with sensitive dataįorms used to collect sensitive data must be associated with a OneDrive group, not an individual account. Microsoft Forms are approved for use with sensitive data however, the Form owner must adhere to the guidelines referenced in this article.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |