For a clean PDF, turn off browser headers and footers. Page numbering depends on your browser.

Harbor Health

Findings, controls, and follow-through

Website form privacy review

Example Clinic · https://example.org/

Forms reviewed
6
Blocked
2
Needs review
2
Active exceptions
1
Site
Example Clinic (https://example.org/)
Generated
October 11, 2026 by Demo reviewer
Form Marshal
0.6.2
Enforcement
Health forms: Block. Personal-information forms: Flag only.
Last full scan
October 11, 2026
Forms
6 in all. PHI 2, screening instruments 1, PII 2, clear 1, not scanned 0.
Need action
2 flagged forms are neither blocked nor covered by an exception or dismissal.

Review next

These forms need review or a first scan. Start with their findings below.

Findings by form

Most serious classifications first. Control status is shown separately from the finding.

Patient intake

Gravity Forms · #1

Blocked

PHI · Critical

Health information signals were found in this form. Review the evidence and your policy before allowing submissions.

Status
PHI (Critical). Blocked on the site
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Evidence behind the finding

  • Field 3 "Describe your symptoms" label matches "symptom": health context (0.85)
  • Field 1 "Full name" has field type "name": name (0.90)
  • Field 2 "Date of birth" label matches "date of birth": date tied to a person (0.90)

Where this form appears

Follow-up appointment request with a temporary exception

Gravity Forms · #5

Temporary exception

PHI · High

Health information signals were found in this form. Review the evidence and your policy before allowing submissions.

Status
PHI (High). Exception until October 25, 2026
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Evidence behind the finding

  • Field 2 "Current medications and symptoms" label matches "symptom": health context (0.85)
  • Field 1 "Patient name" has field type "name": name (0.90)
  • Field 2 "Current medications and symptoms" label matches "medication": health context (0.85)

Where this form appears

PHQ-9 depression screening

Gravity Forms · #2

Blocked

PHI (screening instrument) · Critical

This form appears to be a health screening questionnaire. Screening answers can be sensitive even without a name field.

Status
PHI (screening instrument) (Critical). Blocked on the site
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Evidence behind the finding

  • The form title or description names the screening instrument "PHQ"
  • The form title matches "depression" (0.80)
  • 2 fields match screening instrument items

Where this form appears

Contact request

Gravity Forms · #3

Needs review

PII · Moderate

Personal information signals were found. Review what is collected, where it goes, and how long it is kept.

Status
PII (Moderate)
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Evidence behind the finding

  • Field 1 "Your name" has field type "name": name (0.90)
  • Field 2 "Email address" has field type "email": email address (0.90)
  • Field 2 "Email address" label matches "email": email address (0.85)

Where this form appears

Website feedback

Gravity Forms · #6

Needs review

PII · Moderate

Personal information signals were found. Review what is collected, where it goes, and how long it is kept.

Status
PII (Moderate)
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Evidence behind the finding

  • Field 1 "Website feedback" label matches "website": web address (0.60)

Where this form appears

No pages found

Website color poll

Gravity Forms · #4

No signals found

Clear · Low

No health or personal-information signals were found in the latest scan. This is not a compliance certification.

Status
Clear (Low)
Entries
0 stored. Kept forever.
Data leaves by
None found
Last scanned
October 11, 2026

Where this form appears

Form Marshal is a control, not a compliance guarantee. This report is built from findings about form fields, settings, and placement; it contains no form entries.