Web Forms & User Data Collection

Web Forms & User Data Collection

1. User Input

   • Logging In
     • Username
       • User Specific
     • Password
       • Hide when entering using ***
     • 'Remember Me?' Button
       • Helpful if user forgets details (Safety)
   • Signing Up
     • Username
       • Must be Unique
     • Password
       • Minimum 8 Characters
       • Numbers, Letters & Special Characters (!, *, _)
     • Phone Number
       • 2FA
     • Email
     • Acceptance of T's & C's
   • Account Editing & Modification
     • User verification
       • 2FA
         • Verification message to email or phone number.
       • Password
     • Confirmation of Modification

2. Input Validation & Error Messages

   • Validation Rules
     • Data Types
       • Email
         • Email
       • DOB
         • Date
       • Name
         • Varchar(200)
       • Password
         • Varchar(200)
       • Username
         • Varchar(80)
     • Check against Database
       • If no matching entries send error message
   • Error Messages
     • Incorrect Username/Password
       • Sorry, those details are not correct, please try again.
     • Taken username
       • Sorry, that username is already taken, please try again.
     • Un-matching Password Confirmation
       • These passwords do not match. Please try again.

3. Data Privacy

   • Australian Privacy Principles
     • APP 1: Management of Personal Info
       • Clarification of obatinaing and usage of personal info to users.
     • APP 2: Anonymity & Pseudonymity
       • Allow users to keep identity hidden, using usernames and tags
     • APP 3: Collection of Personal Info
       • Collection of information only done if information is necessary.
     • APP 4: Unsolicited Personal Info
       • the entity must, within a reasonable period after receiving the information, determine whether or not the entity could have collected the information under Australian Privacy Principle 3
     • APP 5: Notification of Collection of Personal Info
       • Users mus tbe notified that personal data is being collected, and may be used.
     • APP 6: Disclosure of Personal Info
       • Information must not be disclosed for a secondary purpose, only for the primary purpose.
     • APP 7: Direct Marketing
       • If an organisation holds personal information about an individual, the organisation must not use or disclose the information for the purpose of direct marketing.
     • APP 8: Cross-Border Disclosure of Info
       • Steps must be taken before disclosing information outside of the country. This includes notifying the user.
     • APP 9: Government Related Identifiers
       • users and organization must not use a government identifier.
     • APP 10: Quality of Info
       • An APP entity must take such steps (if any) to ensure that the personal information that the entity collects is accurate, up-to-date and complete.
     • APP 11: Security of Info
       • If an APP entity holds personal information, the entity must take such steps to protect the information
     • APP 12: Access to Info
       • If an APP entity holds personal information about an individual, the entity must, give the individual access to the information.
     • APP 13: Correction of Info
       • Must allow user ONLY to edit and correct personal info.