What’s changing

We’re continually investing successful information protection capabilities for Google Forms. We’ve already enabled information nonaccomplishment prevention (DLP) for Google Drive policies that use to files submitted successful outer Forms, including Forms from outer organizations. To grow connected this, coming we’re announcing that DLP policies for shape contented successful Google Forms is now mostly available. 


With DLP, Forms pinch delicate contented tin beryllium blocked from being viewed aliases responded to by outer individuals. Based connected DLP rules configured by nan admin, this characteristic checks shape contented including questions, shape title and explanation and reply options provided successful nan form, and prevents delicate contented from being shared externally; it does not cheque shape responses provided by extremity users that are submitted to outer forms. 

DLP successful Forms
This screenshot of a Google Form includes mentions of “Project X”. DLP rules are configured to observe and forestall sharing of Forms pinch responders extracurricular nan statement pinch immoderate mentions of “Project X”, nan delicate contented successful this form.


Additional details 

If you do not want DLP rules applied to users successful your domain, you tin exclude definite groups aliases organizational units from DLP checks. You tin besides exclude DLP rules for forms by using nested information operators successful DLP for Drive rules. To do so, adhd a ‘AND NOT’ conditional usability pinch a civilization detector for “vnd\.google\-apps\.form” arsenic a regex. In scenarios wherever you only want to use DLP for forms, adhd a civilization detector for “vnd\.google\-apps\.form” arsenic a regex. Visit this Help Center to study much astir using Workspace DLP to forestall information loss. 


Getting started 

  • Admins: 
    • Data nonaccomplishment prevention rules scoped to Drive files defined for your domain will beryllium applied automatically to Forms.
    • If you are not utilizing DLP for Google Drive, you tin create DLP rules astatine nan domain, OU, aliases group level successful nan Admin console nether Security > Data protection. You tin use block, pass aliases audit actions, accordant pinch DLP for Drive. If you use nan artifact action, users outer to nan domain will not beryllium capable to position aliases respond to forms pinch delicate content. 
    • Visit nan Help Center to study much astir turning information nonaccomplishment prevention successful Google Forms connected for your organization. 
  • End users: End users tin respond to forms arsenic accustomed to forms that do not break DLP rules, but if a shape violates Drive DLP rules for their domain, shape editors whitethorn spot warnings and shape responders outer to nan domain whitethorn beryllium blocked from viewing aliases responding to nan form. 

Rollout pace 

  • Rapid Release domains: Gradual rollout (up to 15 days for characteristic visibility) starting connected July 24, 2024 
  • Scheduled Release domains: Gradual rollout (up to 15 days for characteristic visibility) starting connected August 5, 2024 

Availability 

Available for Google Workspace: 
  • Enterprise Standard, Plus 
  • Enterprise Essentials Plus 
  • Education Fundamentals, Standard, Plus, nan Teaching & Learning Upgrade 
  • Frontline Standard 
  • Cloud Identity Premium 

Resources 

  • Google Workspace Admin Help: Use DLP for Drive to forestall information loss