Wix Forms: Handling Personally Identifiable Information

Personally Identifiable Information (PII) is a term used to describe the types of data under legal protection in countries with privacy laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

PII may be understood as any data that could potentially identify a specific individual, such as name, address, credit card number, and so on. 

Both in the GDPR and the CCPA, the definition of personal information is broad:

If you decide to collect PII through your site, you have to treat this information accordingly. This varies between jurisdictions. We recommend you familiarize yourself with the regulations that apply to you and your site.

PHI is a subset of PII related to health, healthcare, or payment for healthcare services.
All PHI may be considered to be PII, however, not all PII may be considered to be PHI.

PHI is, essentially, PII that is also health information. Handling PHI correctly is important for HIPAA compliance in the United States. 

In the new version of Wix Forms, contact information fields are considered to be PII by default. This means we apply enhanced levels of security to protect and store this data.

If your site has old Wix forms, your PII and PHI data may not be secured to HIPAA standards. You must use the new version of Wix Forms to be compliant when handling PHI. 

It is not currently possible to switch an existing form built with old Wix Forms to new Wix Forms. Delete the form built using old forms and recreate the form with new forms features. 

Once your replacement form is built, you can delete the old one from the Forms & Submissions page in your site's dashboard.

Yes. you can disable PII data collection on any fields that don’t collect contact information, if you wish to do so.

When you mark a field as a PII encrypted field, to protect visitor data, Wix encrypts the data stored in that field and limits how it can be processed. Some actions are no longer available for that field in the submissions table or when you work with the data in code.

Yes. 'To protect visitor data, PII encrypted fields support only exact-match searches. You can filter or query records only when the field value is exactly equal to the value you enter. Sorting and other query conditions such as contains, starts with, greater than, or less than are not available for these fields in the submissions table or through code.

If your form includes a file upload field that is marked as PII encrypted, the uploaded files do not have a public URL that you can open in a browser. You can only access these files by downloading them directly from the Forms & Submissions tab in your site’s dashboard. This helps keep sensitive documents more secure.

In both versions of Wix Forms, you can find your form submissions in the Forms & Submissions tab of your site's dashboard.

If you've upgraded to new Wix Forms, you can still find your old form submissions under the Old Forms tab.