Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
Redmond desk7 min

Add A Privacy Statement To Microsoft Forms [Quick Guide 2024]

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft Forms lets you publish a privacy statement so respondents know how you handle their information. In many organizations, this is the difference between a “normal” form and a collection process that’s defensible in audits.

This quick guide covers the built-in Microsoft Forms privacy statement setting (when it’s available) and several reliable alternatives you can use right away in 2024.

As an Amazon Associate I earn from qualifying purchases.

What a privacy statement in Microsoft Forms does (and when you need it)

A privacy statement is the short notice people see when they open your form, explaining what data you collect, why you collect it, and how you’ll use it. Depending on your jurisdiction and your organization’s policies, you may also need retention details, contact info, and links to a full Privacy Notice.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You typically need a privacy statement when responses identify a person (names, emails, phone numbers, account IDs), when the form is external, or when you’re collecting “sensitive” data (even indirectly).

Prerequisites before you add anything

  • Create access: You must be able to edit the form (owner or have edit permissions).
  • Know your data map: Decide what you collect (e.g., name, email), what you’re using it for, and whether you store it in Microsoft 365/SharePoint or export it elsewhere.
  • Plan your wording: Keep it accurate. A privacy statement isn’t a place for “trust us”—it’s a disclosure.

If your organization already has a standard Privacy Notice URL, have that link ready. Most forms are easiest to manage when you include a short on-form statement plus a link to the full policy.

Method 1: Add the built-in privacy statement (Microsoft Forms setting)

Microsoft Forms includes an option to show a privacy statement to respondents. Availability can vary by tenant and rollout ring, so the option may not appear for every account in 2024.

Web (Microsoft Forms on desktop)

  1. Go to https://forms.office.com and sign in to the correct Microsoft 365 account.
  2. Open the form you want to publish, or create a new one via New Form.
  3. Select Settings (gear icon).
  4. Look for the Privacy statement (or similarly named) option.
  5. Enter your privacy statement text into the provided field.
  6. If the UI offers it, paste a link to your full Privacy Notice.
  7. Click Save.
  8. Preview using Preview and open it in an incognito/private window to confirm respondents see the statement.

On the respondent side, you should see the privacy notice area as part of the form’s initial experience or confirmation page, depending on how your tenant is configured.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What to expect if you don’t see the privacy option

If you can’t find Privacy statement under Settings, don’t guess. The most common causes are tenant policy restrictions or a feature rollout not enabled for your organization.

Use Method 2 (put the statement directly into the form) as your reliable fallback. You can still publish an accurate notice immediately, without waiting on admin changes.

Method 2: Put the privacy statement inside the form (works everywhere)

This method always works because it uses standard form content (description text and questions). It’s also easy to audit because the exact wording is stored with the form.

Use the form description or section text

  1. Open your form for editing.
  2. Click the form’s Description area (often at the top of the editor).
  3. Paste a short privacy statement (1–4 sentences), including a link to your full Privacy Notice if you have one.
  4. Format lightly—plain text is easiest to read on mobile devices.
  5. Preview in a private browser session.

Keep the “short notice” concise, then reference a full policy page via URL. This reduces long-text fatigue while still being transparent.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Add an explicit consent question (recommended for many surveys)

If your process requires affirmative consent, add a required question that the respondent must answer before proceeding.

  1. In the form editor, click Add new.
  2. Choose Choice (or Yes/No if shown).
  3. Set it to Required.
  4. Use a question title like: Consent to data processing.
  5. Add choices such as Yes, I agree and No.
  6. In the question text, add the core disclosure: what you collect and the purpose.
  7. Preview and test the required behavior.

This pattern is especially helpful for external surveys and research-style collections, where “acknowledgment” is expected to be explicit.

Method 3: Add a privacy statement via the embed or QR flow

Many organizations share forms through QR codes, embedded iframes, or short links. The privacy statement still matters—so you should place it where respondents will actually see it.

Include a short statement near the “start” screen

Whether you share the form via embed or QR, the respondent’s first view should include the privacy notice. If you’re using Method 2, make sure the privacy text is in the form description at the top (not buried in later sections).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use a link to a full Privacy Notice page

  • Put the short notice on the form (clear and readable).
  • Link to the full policy hosted on your website, SharePoint page, or an internal compliance site.
  • Use a stable URL so the link doesn’t break months later.

Suggested privacy statement text (copy/paste templates)

Templates can’t replace legal review, but they’ll get you to a solid starting point fast. Replace bracketed fields with your real details.

Internal Microsoft 365 form (employees)

“We collect your responses to [purpose] to improve [team/process]. Your responses are stored in Microsoft 365 and accessed by [roles]. For details on data handling, retention, and your rights, see [Privacy Notice URL].”

Customer or external survey

“By submitting this form, you agree to the collection and use of your responses to [purpose]. We collect [data types]. We process and store responses in accordance with our privacy practices. View the full Privacy Notice at [Privacy Notice URL].”

Schools and research-style collection

“We collect responses for [study/program] and use them to [analysis/use]. Responses may include [data categories]. Data is stored in [storage system] and access is limited to [authorized users]. Read the full notice: [Privacy Notice URL].”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Common mistakes (and how to avoid them)

  • Forgetting the mobile view: Long statements in later sections can be missed. Put the notice near the top.
  • Overpromising: Don’t claim deletion or short retention if your Microsoft 365 retention policy keeps data longer.
  • Leaving outdated links: If your Privacy Notice URL changed after a site redesign, update the form now.
  • Assuming “required fields” equals consent: Required questions force completion, but don’t always satisfy consent/acknowledgment requirements.
  • Not testing with a non-editor account: Preview with a private window or different user to confirm the statement displays for respondents.

Troubleshooting: privacy statement setting missing or not applied

If the privacy statement doesn’t show (or the setting is missing), work through the checks below in order. Most issues are configuration-related, not something wrong with your text.

Check your account and form permissions

  • Confirm you’re the form owner or have editing rights.
  • Ensure you’re signed into the same tenant where the form exists.

Check tenant/admin policies

For some organizations, privacy statement features can be controlled by Microsoft 365 admin policy and rollout settings. If you don’t see Privacy statement under Settings, ask your Microsoft 365 admin whether the feature is enabled for your tenant and whether any DLP/compliance controls affect it.

Confirm the form type and target audience

Some form configurations can change what respondents see. Verify you’re publishing the form the way you intend (internal-only versus anyone with a link) and re-check the preview flow.

Test with a non-author account

  1. Open Preview.
  2. Use an incognito/private window.
  3. If possible, test from a different Microsoft account.
  4. Submit a test response and confirm the statement appears before submission (or as your process requires).

If the statement appears only in your editor preview but not to respondents, your best fallback is Method 2 (embed it in description/consent question), because it’s part of the form content itself.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

FAQs

Is the built-in privacy statement legally sufficient by itself?

It can be part of your compliance, but legal sufficiency depends on what you disclose and your applicable laws. Most organizations pair the short statement with a full Privacy Notice link.

Can I add both a privacy statement and a consent question?

Yes. Many teams do: the privacy statement informs, while a required consent question records explicit agreement.

What if respondents can submit anonymously?

Privacy statements should still disclose what data is collected (including any inferred data) and how you handle it. If you collect emails or identities, disclose that clearly.

Does the privacy statement change when I edit the form after publishing?

Usually the updated content is what respondents see after edits, but you should always verify by previewing and submitting a test response. If you share links externally, confirm recipients will see the current version.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where do I put the contact info if I don’t have a full Privacy Notice yet?

Use a short notice in the form description with a contact email or role (e.g., “[email protected]”), then replace it with your official Privacy Notice URL when ready.

Bottom Line

If you can see the Privacy statement setting in Microsoft Forms, use it and then verify the respondent experience with a private-window test. If the option isn’t available in your tenant, Method 2 (description + optional consent question) is the fastest, most reliable approach in 2024.

Whatever method you use, keep the wording accurate, put it where respondents actually read it, and link to your full Privacy Notice so you can withstand scrutiny later.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.