On the study's "All responses" page, researchers see some checkboxes for what data to include in their file downloads, which includes PII. These checkboxes apply to some of the files, but not others. For instance, downloading the "Child data" will always produce a file containing PII (names, birthdates etc.), even if those checkboxes are not selected. This could result in researchers assuming that their file does not contain PII and thus not handling it appropriately.
The help text for "Child data" does mention this, but it's placed at the end of the help text and probably easily missed:
All child data will be included in this file, regardless of selections above; you can use it to store this identifiable data separately from the response data.
Ideas for improvement
We could change the "child data" download option so the checkbox rules are applied.
We could provide a better indication on the page as to what files the checkboxes are relevant to vs not. E.g. putting separate checkbox sets into all rows that they're applied to, or visually grouping the single checkbox group together with the relevant files.
Summary
On the study's "All responses" page, researchers see some checkboxes for what data to include in their file downloads, which includes PII. These checkboxes apply to some of the files, but not others. For instance, downloading the "Child data" will always produce a file containing PII (names, birthdates etc.), even if those checkboxes are not selected. This could result in researchers assuming that their file does not contain PII and thus not handling it appropriately.
The help text for "Child data" does mention this, but it's placed at the end of the help text and probably easily missed:
Ideas for improvement