2

Well, my company is asking for very personal information to be filled in Google forms, to update the collaborators personal data. Things like Social Security number, Address, Citizen's number, and so on. Basically almost every detail is required. This seems to be an abuse of privacy.

I don't feel comfortable to give this information to Google. What can I do? The people who request this don't have any perception of web security, privacy or integrity of the data.

| improve this question | |
  • 5
    Your organisation is using Google Forms to collect info they should already have and you're worried that Google will abuse it or cause a data breach? "What can I do?" What do you want to do? Push back against the request? Get them to collect the info themselves? Who will you have to contact if you want to do something? – Lilienthal♦ Mar 16 '17 at 9:32
  • 3
    @Lilienthal yes that is what OP is asking – bharal Mar 16 '17 at 10:22
  • 1
    Have you brought your concerns to your boss/manager? What did he say? Also, what country are you in? (might be relevant) – Radu Murzea Mar 16 '17 at 10:29
  • 2
    Can you tag with your country to give us some insight which privacy laws may apply? – AllTheKingsHorses Mar 16 '17 at 11:01
  • Very related question on Security SE "How secure are Google (Drive) Web Forms?" and "Should we store personally identifiable information on google drive?" – David K Mar 16 '17 at 12:36
11

First make sure that the request is really from your company. Emails can be constructed to appear to be from somebody in the company, but really be from an outside agent who is phishing for valuable information.

If it not from the company report this immediately to your company security. Many companies have a procedure they want you to follow to report the incident.

If the request is from your company direct your questions to the company security office. State your concerns that PII (Personally identifiable information) may be being collected and stored outside the control of the company security procedures. National and local laws may apply to the proper storage and protection of this information.

| improve this answer | |
  • 2
    tldr: if phishing, alert security. if not phishing, alert security. – user42272 Mar 16 '17 at 17:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .