Terms of use
First published: 13 September 2024
Last updated: 13 September 2024
These terms apply to the way you use GOV.UK Forms.
You accept these terms when you create an account and by continuing to use the platform.
If you do not keep to these terms, we may deactivate your account and remove your forms.
Security
You and your organisation are responsible for deciding if GOV.UK Forms is suitable to handle the information you wish to collect. Do not use GOV.UK Forms to collect data classified as ‘Secret’ or ‘Top secret’.
You must follow your organisation’s policies for using online tools and platforms. Check with your organisation’s security or IT team for help with this.
Accessing the platform
You must sign in to GOV.UK Forms using:
- a secure work-managed device
- a secure individual work email address that’s protected with multi-factor authentication (MFA)
- a trusted internet connection - do not sign in using an untrusted public wifi network
Receiving completed form data
You must only use secure government email addresses for completed forms to be sent to. Make sure they can only be accessed by the relevant people. The email addresses you use must follow the government secure email policy. Check with your IT or security team for help with this.
Bear in mind that responses to form questions are not validated for accuracy. People can, for example, enter incorrect email addresses or malicious code in their responses. You must check submitted form data looks safe and consider its accuracy before you use it.
If you receive any unexpected or strange messages to an email address that you’ve set for completed forms to be sent to, let the GOV.UK Forms team know.
Report any security breaches
Report any security breaches immediately to Cabinet Office Cyber Security at report@digital.cabinet-office.gov.uk. For example, if you get unexpected emails or security alerts from Auth0 or if you suspect your account might have been compromised.
Data protection
You must make sure your use of GOV.UK Forms to collect personal data complies with data protection legislation and your organisation’s policies for collecting, processing and storing data.
Your organisation is the ‘data controller’ for any data you collect using GOV.UK Forms.
To get help with data protection legislation compliance, speak with your organisation’s data protection officer or data protection team.
Make forms that are easy to use and accessible
The platform is designed to help you make forms that are easy to use and accessible, but this also depends on the design, structure and content of your questions.
When you create a form, follow government standards and guidance to make sure the form is easy to use and accessible.
Read how to make a good form using GOV.UK Forms for information about making forms accessible and links to further guidance.
Speak with your organisation’s GOV.UK publishing or content team to:
- get help with designing, structuring and writing your form and its questions
- prepare the starting point on GOV.UK to link to the form
Service standards and assurance
GOV.UK Forms has been assessed against the Service Standard as a platform for making online forms. However, you still need to follow your organisation’s policies and processes for service standards and assurance for the forms you make with it.
In most cases, forms made using GOV.UK Forms do not need a service assessment, but you should check if you need a service assessment.
Contact the people in your organisation who are responsible for service assurance for help with this.
Changes to these terms
We’ll let you know if we make any changes to these terms.