Configurable Privacy Settings (Anonymous vs. Confidential)

Data Analyst Role 

‘Anonymous’ privacy

Participant Response Export (Anonymous) 

‘Confidential’ privacy

Participant Response Export (Confidential) 

How do participants know which privacy setting is used in each engagement?

Organizations that want to have more control over how they work with the results of their engagements can choose the level of privacy and confidentiality at the engagement level. 

Privacy Settings Guide

•  Who can set privacy: Basic, Advanced, and AI Advanced Builders can set the privacy level.
• Template users: Cannot change the privacy setting of a template.
• Privacy options:
  • Anonymous
  • Confidential
• Default privacy settings:
  • For Blank templates: Defaults to Confidential
  • Rooms without Confidential enabled: Defaults to Anonymous
• ⚠️ Important: Once an engagement is launched, the privacy setting cannot be changed.

The 'Anonymous' and 'Confidential' privacy settings allow organizations to dig deeper into their results by allowing a more detailed version of ‘Data Download’. However, because it is possible to infer (Anonymous) or know (Confidential) participants’ identities, we have restricted the ability to download the ‘Participant response export (with or without personally identifying information)’ to one specific role: the ‘data analyst’.

Data analyst role:

Room or account admins can assign the ‘data analyst’ role to any new or existing user in the Room.

With this role, the data analyst can access the Reports tab of the Results dashboard.

Your ThoughtExchange customer representative cannot, under any circumstances, access this role and, therefore, cannot access these more detailed data on your behalf.

If an engagement has ‘Anonymous’ privacy

Participant identifying information is not linked to the responses provided. If the data analyst chooses to download a full record of the data, they can see the responses to each question (associated with a unique identifier) for each participant, but not their name, email address, IP addresses, or any other information that could be used to identify the individual. Even if users are asked to log in with an email address to participate, it is not tied to their responses. 

An engagement leader might infer a participant’s identity based on their responses (if there is only one person working in HR and a participant selects that as their team, for example), but it is not explicitly provided.

The data analyst will see both the ‘data download’ option and ‘Participant response export (without personally identifying information)’.  It is the latter option they will need to select to download in order to receive all of the information possible with an ‘Anonymous’ engagement.

For both Anonymous and Confidential engagements, working with participant responses includes the ability to: 

(Participant Response Export - without personally identifying information) 

• Participation Language: The language in which participants completed the engagement

  

  -  Participation timing data: 

  • Start time
  • Completion time

  • Participation duration (time taken to complete the survey)

     

   

If an engagement has ‘Confidential’ privacy

Participant identifying information is linked to the responses provided. Please note that Identifying information can be seen by the data analyst but not by other participants. Leaders may choose to use this setting for a number of reasons including a need to follow up with participants or a desire to track responses across groups that are not indicated by question responses.

For Confidential engagements, participant response exports provide you with information about:

(Participation Response Export - with personally identifying information):

• Participant contact information, allowing organizations to link responses back to specific participants 

  • 

•  Participation timing data:
• Start time
• Completion time
• Participation duration (time taken to complete the survey)

• This is notified to participants in the engagement's introduction message, ensuring transparency about how their information will be handled: 

   

• 

• Leaders who use the Contact Information feature to collect participant contact details can also find these contact details in the Participant Response export. 

  

  

How do participants know which privacy setting is used in each engagement?

The privacy message participants see (and are required to accept) upon first visiting an engagement varies depending on the privacy settings selected by the leader. 

Participants in Confidential engagements receive this message:

Participants in Anonymous engagements receive this message:

Tip: If every engagement in the account you are using has the same privacy settings, you may want to create a Custom Compliance Message to communicate about them explicitly.

For a full description of how data is handled, review our Terms of Use.