Drupal website adminstrators can build webforms to collect information. This information is very carefully governed to protect both the privacy of the respondant and security of the data.
The purpose of a unh.edu webform is to collect necessary information from the university community or the public in order to carry out a specific request, such as a request for information or to sign up for an event.
UNH Academic Technology (AT) is responsible for the operation of webforms. The software application used to build these webforms is Drupal.
With the approval of the site owner or web manager, UNH staff with active user IDs and UNH email accounts who have responsibility for collecting information via a Drupal website for their school, department, office, or program may become a webform editor. A webform editor creates, edits and manages webforms and form submissions.
Use the UNH IT Accounts Management system to request an webforms account. Once you are logged in:
All UNH employees have an important role in ensuring the protection of information the university has a duty to protect. Federal laws, state regulations and university policies require that you protect information about others. This includes information collected about people not affiliated with the university, on behalf of the university.
Before you can protect information, you must understand what type of information you are handling. USNH policy identifies three types of information:
Webform information is transmitted via email and stored in the same location as website content. Therefore, it is inadequate protection for any information classified as restricted and most information classified as sensitive.
Examples of information that can be included:
If you need to collect other information classified as sensitive or any information classified as restricted, contact WMD to discuss potential information collection and storage options that ensure compliance with UNH policy and regulatory requirements.
Collected information should be
For more information, please contact WMD.
Training for Drupal webforms may be offered periodically through the Academic Technology training calendar.
Users are responsible for collecting and protecting information in accordance with all UNH and USNH policies. Failure to protect information can have serious consequences:
Information protection is governed by federal laws, state regulations, and University policies, including:
HIPAA (Health Insurance Portability and Accountability Act)
FERPA (Family Educational Rights and Privacy Act)
CJIS (Criminal Justice Information Services)
New Hampshire RSA 359-c20 - Governs information security breach notification requirements
Red Flags Rule - Requires detection, reporting, and prevention of identity theft
PCI-DSS Standard - Governs credit card transaction processing protections
Although UNH AT does not monitor or regularly review website content, it reserves the right to remove at any time any content that it considers to violate this standard or any other UNH policies.
If inappropriate or inaccurate activity is discovered, UNH WMD will contact the account user to discuss the issue. If the site or content owner cannot be contacted or is no longer at UNH, that content will be administered by WMD and can be removed if deemed inaccurate or inappropriate. When content is obviously unacceptable, UNH WMD will immediately remove the content prior to contacting the site owner. Unacceptable uage also may cause access to form creation tools to be suspended.
Reports regarding inappropriate content may be sent to WMD.