Drupal webforms

Drupal website adminstrators can build webforms to collect information. This information is very carefully governed to protect both the privacy of the respondant and security of the data.

Purpose and Audience

The purpose of a unh.edu webform is to collect necessary information from the university community or the public in order to carry out a specific request, such as a request for information or to sign up for an event.

Related Information

Software for collecting information

UNH Academic Technology (AT) is responsible for the operation of webforms. The software application used to build these webforms is Drupal.

Getting an account

With the approval of the site owner or web manager, UNH staff with active user IDs and UNH email accounts who have responsibility for collecting information via a Drupal website for their school, department, office, or program may become a webform editor. A webform editor creates, edits and manages webforms and form submissions.

Use the UNH IT Accounts Management system to request an webforms account. Once you are logged in:

  1. Click on Add.
  2. Under Employee Resources, click on Request Access for Yourself.
  3. Fill out the information requested in Step 1 and click Next.
  4. Select Communication and Collaboration.
  5. Select Website access and click Next at the bottom of the form.
  6. Fill out the rest of the form, use the description area to request webforms access, and submit the form.

Information Protection and Classification

All UNH employees have an important role in ensuring the protection of information the university has a duty  to protect. Federal laws, state regulations and university policies require that you protect  information about others. This includes information collected about people not affiliated with the university, on behalf of the university.

Before you can protect information, you must understand what type of information you are handling. USNH policy identifies three types of information:

  • Restricted: Protection by law or standard; examples include SSNs, academic or medical records, credit card numbers
  • Sensitive:  Protection by university policy or contract; examples include passwords, intellectual property, student directory
  • Public: Information approved by UNH data steward to be available to the general public, for example, campus maps, your salary

Using Webforms to Collect Information

Webform information is transmitted via email and stored in the same location as website content. Therefore, it is inadequate protection for any information classified as restricted and most information classified as sensitive.

Examples of information that can be included:

  • Public information
    • First and last name
    • Contact information
    • Address
    • Phone
    • Questions/comments/feedback
  • Sensitive information
    • USNH ID #

If you need to collect other information classified as sensitive or any information classified as restricted, contact WMD to discuss potential information collection and storage options that ensure compliance with UNH policy and regulatory requirements.

Processing collected information

Collected information should be downloaded and deleted from Drupal immediately, if possible, and kept in Drupal no longer than 30 days maximum. Data kept in Drupal longer than 30 days may be automatically deleted by WMD.

Support

For more information, please contact WMD.

Training

Training for Drupal webforms may be offered periodically through the Academic Technology training calendar.

Responsibility for Usage

Users are responsible for collecting and protecting information in accordance with all UNH and USNH policies. Failure to protect information can have serious consequences:

  • Harm to individuals whose privacy is breached, such as identity theft
  • Financial and reputational damage to the university
  • Personal risk if a data breach happens while you are not following policy and law

Information protection is governed by federal laws, state regulations, and University policies, including:

Violations

Although UNH AT does not monitor or regularly review website content, it reserves the right to remove at any time any content that it considers to violate this standard or any other UNH policies.

If inappropriate or inaccurate activity is discovered, UNH WMD will contact the account user to discuss the issue. If the site or content owner cannot be contacted or is no longer at UNH, that content will be administered by WMD and can be removed if deemed inaccurate or inappropriate. When content is obviously unacceptable, UNH WMD will immediately remove the content prior to contacting the site owner. Unacceptable uage also may cause access to form creation tools to be suspended.

Reports regarding inappropriate content may be sent to WMD.