Website Cookies and Forms

Website Cookie Notice

To promote awareness regarding the U of I System’s use of cookies with visitors to U of I System websites, webmasters should install the following on websites they manage: (1) Cookie banner, (2) “About Cookies” pop-up box, and (3) Cookie button.

Instructions for installing the cookie notice products can be found on GitHub. If you need assistance, please contact privacy@illinois.edu.

Forms Collecting Personal Information on Your Unit's Website

If your unit's website uses one or more forms to allow website visitors to provide you with their names and email addresses or any other personal information, the EU and UK GDPRs and/or PIPL may impose additional notice and consent requirements before your unit can collect the information from persons in the EEA, the UK, or Mainland China.

You can assess whether any forms on your unit's website warrant additional notice and consent options by answering the following five questions.

  1. Does each form on the website include a link to the University of Illinois System Privacy Statement or the University of Illinois Public Affairs Web Services Webtools privacy notice at the bottom of the form?
  2. Does the form avoid asking for any sensitive personal information? Sensitive personal information includes but is not limited to: information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic information; biometric information; health information; information concerning a natural person's sex life or sexual orientation; financial accounts; a person’s location; information relating to a minor under the age of 14; or any other information that if leaked or illegally used, may affect a person’s dignity or endanger their personal safety or property.
  3. If the form is collecting personal information from persons in the European Economic Area (EEA) or the UK, does the table in Section 3 of the Supplemental Privacy Notice adequately cover the purpose and legal basis for the form? Similarly, if the form is collecting personal information from persons in Mainland China, does the table in Section 3 of the Supplemental Privacy Notice – PIPL adequately cover the purpose and legal basis for the form?
  4. Does Section 5 of the Supplemental Privacy Notice - PIPL adequately cover who receives and processes the personal information collected on each form? Section 5 of the Supplemental Privacy Notice-PIPL includes everything in Section 5 of the Supplemental Privacy Notice, so you do not need to check both documents.
  5. Will the personal information only be used for the purpose for which the webpage/form indicates it is being collected?

If you answered "yes" to all five of the above questions, you do not need to provide additional notice and consent options on the form(s).  Click here to see an example of a form that meets the above criteria assuming the personal information collected is adequately covered by Section 5 of the Supplemental Privacy Notice - PIPL.

If your only "no" answer was to question #1, add a link to the University of Illinois System Privacy Statement in the footer of your form(s).  Once this is complete, you do not need to provide additional notice and consent options on the form(s).

If you answered "no" to questions #2, #3, #4 or #5, your unit's website may require additional notice and consent options.  Please email GDPRrequest@uillinois.edu for further guidance.

If you have any questions regarding the required notice and consent requirements for forms, please email GDPRrequest@uillinois.edu.