Wix Forms: Handling Personally Identifiable Information

Personally Identifiable Information (PII) is a term used to describe the types of data under legal protection in countries with privacy laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

PII may be understood as any data that could potentially identify a specific individual, such as name, address, credit card number, and so on. 

Both in the GDPR and the CCPA, the definition of personal information is broad:

If you decide to collect PII through your site, you have to treat this information accordingly. This varies between jurisdictions. We recommend you familiarize yourself with the regulations that apply to you and your site.

PHI is a subset of PII related to health, healthcare, or payment for healthcare services.
All PHI may be considered to be PII, however, not all PII may be considered to be PHI.

PHI is, essentially, PII that is also health information. Handling PHI correctly is important for HIPAA compliance in the United States. 

In the new version of Wix Forms, contact information fields are considered to be PII by default. This means we apply enhanced levels of security to protect and store this data.

If your site has old Wix forms, your PII and PHI data may not be as securely handled as the latest version. 

It is not currently possible to switch an existing form built with old Wix Forms to new Wix Forms. Delete the form built using old forms and recreate the form with new forms features. 

Once your replacement form is built, you can delete the old one from the Forms & Submissions page in your site's dashboard.

Yes. you can disable PII data collection on any fields that don’t collect contact information, if you wish to do so.

In both versions of Wix Forms, you can find your form submissions in the Forms & Submissions tab of your site's dashboard.

If you've upgraded to new Wix Forms, you can still find your old form submissions under the Old Forms tab.