cagov / design-system

State of California Design System
MIT License
80 stars 25 forks source link

Legal microcopy to warn users not to submit personally idendifable info (PII) in page-feedback forms #916

Closed zakiya closed 8 months ago

zakiya commented 2 years ago

This came up with reviewing page feedback with ODI legal counsel.

Steps to complete are:

Assigning to @yesenia-gtz for labeling. This is high priority.

yesenia-gtz commented 2 years ago

@zakiya who can we partner with to get background and needs for this?

ashleydraper commented 2 years ago

@zakiya Once we've identified the SME/ contributor, can we also identify where this copy will be housed? I have access to this folder, but want to be sure we're all using it.

reganking commented 2 years ago

Hi @ashleydraper & @yesenia-gtz, I'm the PF owner on the ODI / CalInnovate side, so I can help to clarify/align with @zakiya and @mediajunkie on slack #odi-website-analytics. I will take note of the Design System folder.

chachasikes commented 2 years ago

On the UI end - I synced already on this with @aaronhans & the way we discussed for making this happen would be:

Keeping the markup as an attribute will allow any legal team to update text to suit their needs.

ashleydraper commented 2 years ago

@chachasikes I'm glad you two were able to discuss this, but I'm lost in what you're describing! Can you explain that in a way that's less technical?

zakiya commented 2 years ago

@reganking Sorry it wasn't communicated that you were the product owner for page feedback. We'll need to coordinate closely as page-feedback is also a design system component.

@ashleydraper I have no preference about where copy should be housed. Liz is our only content designer at the moment.

@chachasikes comment refers to the implementation plan for engineering.

ashleydraper commented 2 years ago

@zakiya How do folks feel about this statement? Personally identifiable information can read a little jargony outside of the state, so I went with terms that resonate with more people.

image

Do not include any personal or confidential information like your address or phone number.

zakiya commented 2 years ago

@ashleydraper Looks good to me. Will run it by legal.

zakiya commented 2 years ago

@ashleydraper

The language is ok with legal.

They also suggested we instruct people who use the widget to scrub any PII.

I think we can move forward with updating Figma but we should probably also add some copy to the readme.

ashleydraper commented 2 years ago

@zakiya

That's great.

Can you say more about what they mean by "scrub?" If we're telling folks not to include PII in the first place, what are they scrubbing? Also, just some quick analytics on that word choice (see screenshot). image

I don't have the Figma board, is the readme section be on there too?

mediajunkie commented 2 years ago

Poking my nose in here because I have some of the context from the past, I think they’re suggesting that we recommend to users of the report that they remove PII from comments when they see it, which I don’t believe is a feature that we offer.

Also there are times when the PII is knowingly submitted in hopes of a response.

Giving the reviewers discretion and making them aware of the risks involved with PII was the plan of record as I recall.

-- Christian Crumlish (he/they) Senior Product Manager | CA Office of Data & Innovation 916-272-5214 | @.***

follow us: web https://innovation.ca.gov/ | blog https://innovation.ca.gov/blog/ | twitter https://twitter.com/californiaodi

ashleydraper commented 2 years ago

OH, now I see. Okay this is making sense!!

See notes in the screenshot.

image

chachasikes commented 2 years ago

Those are both great notes @ashleydraper. Correct, it's a service we provide right now, and an interested dept/agency would need to work with us.

A feature we would need to add is the ability to flag and remove PII data from the reports that the departments would get.

ashleydraper commented 2 years ago

@zakiya @mediajunkie Thoughts?

ashleydraper commented 2 years ago

To round out the initial ask, seems like this should be assigned to design to add to Figma. Is that Kimberly?

zakiya commented 2 years ago

@ashleydraper Let's put a pin in this until I can connect with @reganking and @mediajunkie Product ownership on this has been unclear and we've had personnel changes and I want to make sure all parties are moving in the same direction. Will have an update for you by end of day.

ashleydraper commented 2 years ago

Works for me, ping me when ready.

zakiya commented 2 years ago

Just a quick update on this -- we realized we have some work to do internally about the direction of this product. We have a meeting to level set next week. I'm going to remove the Urgent tag and and move it to in Progress.

I really appreciate the quick turn around @ashleydraper!

ashleydraper commented 2 years ago

Very welcome! Happy to jump back in when the time is right.

zakiya commented 2 years ago

@mediajunkie @ashleydraper

We met about this product on Monday. Per that conversation, I think we should make the following changes to the Page Feedback readme:

CleanShot 2022-08-18 at 08 42 44

I can make the update myself if approved.

I think we can work the addition of microcopy into the website we're working on in another repo.

ashleydraper commented 2 years ago

@zakiya I support these edits. Should this issue remain open until we're able to address the microcopy?

zakiya commented 2 years ago

I made the edits. Yes let's keep this open until we address microcopy. Going to assign to myself for now. Thanks for your help!