Overview
Information Technology Services (ITS) will apply an update to Qualtrics XM, the campus’s survey software, on Monday, June 30, 2025. This update will ensure the university is following the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), complying with their privacy laws and data minimization requirements.
Rationale
1. California law defines IP addresses and geolocation as personal information. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), data collection must be limited to what is necessary for the intended purpose (Civil Code §1798.100(c)).
2. Anonymity and Compliance
Disabling automatic IP and geolocation tracking reduces the likelihood of collecting identifiable data without notice. This supports compliance with legal requirements for user notice, consent, and opt-out options.
3. Bias Prevention in Survey Design
Excluding IP and geolocation data from default collection limits the introduction of unintended variables during analysis and prevents the use of location-based information as an interpretive factor unless explicitly required.
What to Expect
All campus-wide Qualtrics surveys will no longer collect IP addresses or geolocation data by default. Users who have a valid need to collect such data can override the default anonymization policy by disabling the "Anonymize Responses" option in their survey settings.
Support
If you experience any issues or need assistance, please contact the ITS Service Desk at service@sfsu.edu, visit our Virtual Service Desk, or call 415-338-1420.