A link that lets people answer a survey should not quietly let them read somebody else's answers. This is a configuration and access-control question for the organization collecting personal data, not a burden to shift to the respondent. In an October 16, 2026 release, Korea's Personal Information Protection Commission (PIPC) reiterated that public and private organizations using external survey tools such as Google Forms and Naver Forms remain responsible for safeguards including data minimization, preventing public exposure through settings, and disposal after the purpose is fulfilled. The release did not announce a blanket ban on these services.

Before sharing the form

Start with the purpose. If a survey only needs anonymous feedback, do you need a name, phone number, email address and workplace at all? Remove unnecessary required fields, and avoid open-text prompts that invite respondents to enter sensitive or identifying information. Then test five separate surfaces:

  1. Respondent link: Can a person without editor privileges see only the questions and their own submission, rather than other people's answers or a summary containing identifying information?
  2. Editors and collaborators: Who can modify the form or view raw submissions? Remove access that is no longer needed.
  3. Connected results: Can someone open the linked spreadsheet, attachment folder, exported CSV or shared-drive copy through a separate link?
  4. Post-submission view: Is anything exposed after a test response that was not visible before it?
  5. Retention plan: Who will check the original records and copies when the collection purpose ends?

Do not rely only on the settings page as seen by an administrator. Open the published link in a separate non-editor account or private window and submit dummy data, never a real customer's or employee's details. Menu labels and available controls differ by platform and may change, so this is a test of the observable result rather than a promise about a particular button.

Conceptual image of hands holding a blank sheet of paper beside a laptop with an abstract display; not a real survey response or identifiable platform interface

While collecting and after closing

A form's own sharing setting does not necessarily protect a separately shared spreadsheet or previously downloaded file. Review the permissions of every linked result location, especially after inviting collaborators or changing a link. Telling respondents to be careful is useful, but does not replace the operator's obligations.

Closing responses prevents new submissions; it does not prove that old answers, exports and emailed copies have disappeared. When the purpose has been fulfilled, check the applicable retention duties and handle each stored copy accordingly. Do not delete records that must lawfully be retained merely because a generic checklist says “delete.”

Conceptual image of two colleagues reviewing a blurred laptop screen; not an actual survey response or identifiable platform

The PIPC says that an entrustment relationship must be judged from the provider's actual involvement in processing personal data and the organization's management and control. The release also expressly states that no re-entrustment relationship arises between the entrusted user organization and Google or Naver Forms. This does not waive the user's safeguards or decide every other contractual arrangement; a privacy officer should assess the organization's actual setup and retention duties.

Korean Naver edition: 구글·네이버폼 설문, 응답 공개 설정은 어떻게 점검하나요?.

About the Author

Life Mokcha separates the regulator's stated duties from a practical, user-visible preflight for survey operators.

References