Q: How do I get access to Formassembly?
A: By going here: https://formassembly.umflint.edu/30
Q: I’m not sure if the information I’m gathering is considered “personal”, how do I know?
A: To make sure you know what information is considered personal/private please refer to the guidelines outlined by UM-Ann Arbor. These guidelines, and information on how to safely work with personal information, can be found at: http://safecomputing.umich.edu/privacymatters/ .
Best Practices Guide for Information Collection/ManipulationIntroduction – What is Personal/Private Information?
Identity theft is a very real threat in today’s technology dependent society. UM-Flint employees must do their part to avoid endangering personal information. To help the campus community towards this goal, ITS provides this guide to advise users on some safety measures that should be employed when working with electronic forms. It is also recommended that form designers refer to UM-Ann Arbor’s Privacy Matters campaign. This guide is not designed to cover every legal aspect of gathering personal information by electronic means, but merely to begin to educate form designers.
Private Personal Information (PPI) is any information about a person that can be used to identify, contact, or locate the person. All of the items listed below are considered Private Personal Information and should be treated as highly confidential, especially when gathered together:
- Full Name
- Birth Date
- SSN (or other national identification number)
- Driver’s License Number
- Credit Card Number
- Student Records
- Patient Health Information that can be used to indentify an individual
- Human Subject Research that can be used to identify an individual
The above list outlines some examples of PPI, but there may be others not included on the list. When creating your form, ask yourself – could I use this information to identify, contact, or otherwise locate this person? If the answer is yes, you’re working with PPI.Collecting PPI – Do you really need it?When creating your form you should make every effort to only require information that is absolutely necessary. For example, if you aren’t sure you’ll ever need to know the user’s birthdate – don’t ask for it. Storing PPI that will never be used places it at an unnecessary risk – even when the most strict security guidelines are in place.Accessing and Saving PPI
When it is necessary to gather PPI employ these tips to keep the information safe:
- Don’t export response results from FormAssembly unless it is absolutely necessary to work with the data.
- If you must export response results make sure they are stored in a secure location and don’t leave multiple copies lying around.
- Do NOT store files containing PPI on departmental drives or where unauthorized persons could potentially access them.
- After you are done working with exported results delete them as soon as possible using one of these secure methods for deletion:
- If you must make paper print-outs of PPI make sure that they are properly disposed of – cross-cut shredders are the preferred method. Do not leave print-outs lying around a meeting room after they are used.
- Don’t discuss PPI in public areas where other people might hear your discussion.
Q: What if I need a feature that FormAssembly can’t provide?
A: FormAssembly is a wonderful solution to creating forms, but it might not be right for everyone. If your form requires some form of authentication (for example, asking students to log in using their UMID/SIS PIN before filling out the form) or if you need a complicated back end for data management – FormAssembly isn’t for you.
For Further assistance with FormAssembly; contact the Helpdesk to have a ticket placed.
Helpdesk Contact Information:
Phone: 810-766-6804 option #1