What to Ask Before Sharing Personality Assessment Results

What should I ask before sending a personality assessment report?

Before sending a personality assessment report, ask five things: what exact information is needed and why; who will see it, including any provider or vendor; whether it may be forwarded or used for another decision; how it is stored and how long it is kept; and whether you can share less. If the answers fit the stated purpose, choose the smallest useful form of disclosure. If a material answer is unclear, pause and ask for the notice or policy governing the process. A secure upload link may protect information in transit, but it does not explain who can later access it, what they may do with it, or when it will be removed.

Trace the result through its information lifecycle before choosing what to send. Start with purpose: what conversation, service, or decision is this meant to support? Then ask about access and onward use: which people or organizations receive the information, and can they pass it along or apply it to a different purpose? Finally, ask about storage and retention: where does it remain, and what determines how long it is kept? A general assurance such as ‘it will be confidential’ may leave these details unanswered.

The Standards for Educational and Psychological Testing call for advance information about access to results, reporting, and third-party sharing. They also address confidentiality limits and storage and transmission under relevant professional and legal standards. The APA Ethics Code, within its scope for psychologists, includes an assessment’s purpose, third-party involvement, and limits of confidentiality in consent. These sources support asking for clear terms; they do not establish one universal rule for every online assessment, coach, employer, or jurisdiction.

Treat privacy as more than keeping a file secret or choosing an encrypted route. The channel concerns how information travels; the questions above concern what happens around and after that transfer. Your choices and rights depend on the assessment, recipient, setting, and applicable rules. The sections that follow examine each answer and disclosure choice.

Sources: Standards for Educational and Psychological Testing; Ethical Principles of Psychologists and Code of Conduct

Which setting are you in: voluntary reflection or organizational assessment?

Before sharing a result, identify who initiated the assessment and what role they expect it to play. A questionnaire you choose for private reflection starts from a different arrangement than an assessment an employer asks you to complete for a workplace process. That difference does not tell you, by itself, who will receive the result. Ask the coach, employer, or assessment provider: Who commissioned this? What decision or activity is it meant to support? Is completing it optional, and is sharing the report later optional too? In a voluntary coaching conversation, you may be able to choose which observations to discuss and whether to bring a report. Clarify that with the coach rather than assuming “private” settles access or recordkeeping. Ask whether the coach is working solely for you or was engaged by another person or organization, and whether any report or summary will go back to that party. If you took an assessment independently, find out whether the person asking for results needs the provider’s report, a short account of what you found useful, or simply a conversation about a work question. The actual agreement and applicable rules determine what follows. An employer-arranged assessment may have a stated organizational purpose and release process. An assessment for development and one for selection are not interchangeable, so ask which purpose applies. The Standards for Educational and Psychological Testing say test takers should generally receive advance information about intended score use and confidentiality, while recognizing exceptions where disclosure of a purpose could undermine score interpretation. The Standards also describe informing test takers who can access results and reports and whether, and under what conditions, results may go to a third party. These are professional standards, not a universal privacy statute or a guarantee that every provider follows the same process. The American Psychological Association’s Ethical Principles of Psychologists and Code of Conduct provides a related but bounded reference. For psychologists conducting assessments, its informed-consent standard addresses the assessment’s nature and purpose, third-party involvement, and limits of confidentiality. The code applies to psychologists subject to it; it does not automatically govern every online questionnaire, coach, employer, or vendor. Use it to frame questions, not to assume a particular answer. If the link came from a manager but the invitation names only a platform, ask the commissioning organization to identify the test user, intended use, recipients, and release notice before you begin. Ask what happens if you decline, withhold a personal copy, or want to discuss only selected observations. A clear answer helps distinguish a voluntary reflection from a formal process with defined conditions. If the answer is vague, request the written notice or policy. Do not infer that the process is improper; pause until you know which arrangement governs it.

Sources: Standards for Educational and Psychological Testing; Ethical Principles of Psychologists and Code of Conduct

Which parts of a report are you actually being asked to share?

Ask the recipient to name the exact material needed: the full written interpretation, a particular scale score, a short summary, or a conversation about one result. “My results” can refer to several different things, and they are not automatically interchangeable. The first question should be concrete: what part, for what task? The American Psychological Association’s “Disclosure of Test Data and Test Materials: Just the FAQs” draws a useful distinction. It uses “test data” broadly to include test results, raw data, records, written or computer-generated reports, and global or individual scale scores. “Test materials” can include protocols, manuals, test items, scoring keys or algorithms, and other material treated as secure by the test developer or publisher. A report is not necessarily the same as item responses or the materials used to produce it. That distinction matters because the information can require different handling. A score without its scale, comparison basis, or explanatory context may be easy to misread. Release decisions depend on professional judgment, policies, law, context, and purpose. It also identifies concerns about confidentiality, whether the recipient is qualified to use the information, test security, and intellectual-property interests. This is professional guidance for psychologists, not a promise of universal access or redaction. The APA’s “Ethical Principles of Psychologists and Code of Conduct” similarly defines test data to include raw and scaled scores and responses, while treating test materials separately. Its rules apply to psychologists’ professional activities, and its provisions allow context-specific exceptions. A general online assessment, coach, and organizational psychologist may operate under different policies. Do not assume that a rule for psychologists automatically governs every recipient, or that a report’s label tells you what release options exist. A practical request can stay modest: “Which sections or scores do you need, and would a summary or discussion answer the same question? Does the report contain material you cannot accept or interpret? Can the provider explain what may be shared and what must remain restricted?” Ask the provider about formats before editing or forwarding a file. Some item content or scoring material may be protected, and selective copying can remove context that makes an interpretation understandable. If the recipient only needs to discuss a work pattern, you might offer a short, accurate observation in your own words and ask whether that is sufficient. If a formal process requires a complete report, ask which policy governs the request and who can explain it. A smaller disclosure is a proposal to match information to purpose, not an automatic right to redact. The boundary is the material needed for the task, with release limits clear before sending.

Sources: Ethical Principles of Psychologists and Code of Conduct; Disclosure of Test Data and Test Materials: Just the FAQs

What will the recipient do with the result?

Before sending a report, ask what decision or activity it is meant to inform. “For development” is a starting label, not a full answer. Does it support coaching, work planning, a team discussion, or a decision about selection, promotion, or evaluation? Ask whether that is the only purpose, whether it can change, and what process applies if the organization later wants a different use. Purpose matters because the same information can carry different implications in different settings. A score discussed privately to identify a useful work habit may invite reflection. The same score considered in an employment decision could affect evaluation. This comparison does not establish that either use is appropriate for a particular instrument; it shows why “we use it to understand people” is incomplete. Ask what the result contributes and whether other information also informs the decision. The question concerns the role assigned to the report, not a claim that a result determines an outcome. The *Standards for Educational and Psychological Testing* offers a professional benchmark. Standard 9.15 says people with a legitimate interest in an assessment should be informed about its purposes, how scores will be used, record-retention periods, and conditions for release. The standards recognize that information may vary in some employment or selection settings. They are professional standards, not a guarantee about every provider or a law settling every reader’s rights. Their list makes a useful request concrete: ask for the stated purpose, the score’s role, and any identified material consequences. If an organization says the report is for development, ask what that means in practice. Can an individual result enter a formal review, or is it used only to guide a conversation? What happens if the process changes? A clear answer may define limited uses or specify a formal process and its consequences. If the answer remains broad, request the assessment notice or policy in plain language before deciding what to share. Vague wording is a reason to clarify; by itself, it does not prove improper use. Where the GDPR applies, the European Data Protection Board lists purpose limitation among the principles governing personal-data processing, alongside transparency, data minimisation, accuracy, and storage limitation. This supports asking whether the stated reason is defined and whether a proposed new use has been explained. It does not mean every reader is covered by the GDPR or decide whether a particular use is lawful. Separate purpose from access: even a defined purpose leaves open who can see the report. Before sending it, seek a plain account of what the recipient intends to do now and what could happen if that purpose changes.

Sources: Basic principles; Standards for Educational and Psychological Testing

Who can see the report, including people outside the room?

Before sending a report, ask for a map of access rather than relying on the word “confidential.” Who receives the file? Who administers or scores the assessment? If a platform, scoring service, consultant, or other organization is involved, what information does each handle, and can it be passed onward? Ask whether a manager sees your individual report, a summary, or no result. The answer should name roles and organizations, not just say access is limited. The Standards for Educational and Psychological Testing make this a reasonable question before testing. Standard 9.15 says that, where appropriate, test users should tell test takers who will access results and the written report, how results will be shared, and whether and under what conditions results may go to a third party or the public. The standards also say test takers should generally be informed about confidentiality and intended score use. These are professional standards, not universal law or a guarantee about every online quiz, coach, employer, or provider. They recognize exceptions, including cases where advance knowledge could undermine an assessment’s purpose. If a psychologist is involved, the APA Ethics Code offers a expectation. For services requested by a third party, it says psychologists should clarify their role, who the client is, uses of the service or information, and possible limits to confidentiality. The Code also calls for discussion of relevant limits and foreseeable uses with people and organizations in a professional relationship. This guidance applies to psychologists under that code; it does not establish identical duties for every test administrator or recipient. In an employer-arranged assessment, the test taker, commissioning organization, and professional administering it may have distinct roles. Ask who is responsible for answering access and release questions. Trace the route beyond the first recipient. A manager might receive a report from human resources; a provider might process responses for an organization; a consultant might interpret results. These are details to verify in the notice or policy, not assumptions about a particular assessment. Ask who can open, interpret, export, forward, or retain the result, and whether it will be linked to your name or employee record. If the answer is “only a group summary,” ask how group size and reporting are handled before assuming individuals cannot be recognized. Removing a name alone does not show what other details remain visible or who can connect them to you. A useful reply identifies each recipient’s role, the information they receive, and conditions for onward sharing. If the answer is only “it is confidential,” request the written access and release policy or the person who can explain it. This gives you facts to weigh before sharing.

Sources: Standards for Educational and Psychological Testing; Ethical Principles of Psychologists and Code of Conduct

Does a secure upload mean the result is private?

No. A secure channel can reduce some risks while a personality report is being sent, but it cannot tell you who may open it later, what those people may do with it, or when stored copies will be removed. Ask two separate questions: how is the file protected in transit and storage, and what rules govern access and use after it arrives? An answer to the first does not settle the second. Security concerns safeguards against loss, unauthorized access, or inappropriate changes. Privacy concerns the broader handling of information: why it is collected, who may access it, how it may be used, and how long it remains. These ideas overlap, but they are not interchangeable. A password-protected upload may restrict outsiders from intercepting a file; an authorized recipient can still use the report beyond the purpose you expected if the relevant arrangements allow it. The Standards for Educational and Psychological Testing make both sides visible. They say transmission of individually identified scores should protect confidentiality, and caution that electronic transmission and network storage require care to maintain confidentiality and security and to prevent inappropriate modification. The same standards separately place responsibility on test users to understand applicable obligations across data management, use, and retention. These standards guide professional testing practice; they do not guarantee what every online quiz, provider, coach, or employer will do. The European Data Protection Board’s overview of GDPR principles offers a second useful distinction where that regulation applies. It lists integrity and confidentiality alongside purpose limitation, data minimisation, accuracy, and storage limitation. The EDPB page summarizes principles for processing governed by the GDPR; it is not a claim that GDPR covers every reader or every personality result. So, alongside “Is the upload protected?”, ask: “Who will be able to access the report once received?” “Will it be used only for the purpose already described?” “Can it be forwarded or retained elsewhere?” and “How long will it be kept?” If the explanation addresses encryption or a secure portal but says nothing about authorized access, use, and retention, the practical privacy questions remain unanswered. The key check is whether the recipient can explain both the technical protection and the permitted handling in plain terms. Ask for the applicable policy if a verbal assurance covers only one side. That gap is a reason to seek clarification before sharing, not by itself proof of misuse or a legal violation.

Sources: Standards for Educational and Psychological Testing; Basic principles

How long will the result remain, and can you correct or remove it?

Ask for a retention rule, not simply whether the recipient keeps the report. Find out how long the organization and assessment provider retain it, what event starts that period, and whether the rule covers only the final report or related records too. Depending on the process, there may be an emailed attachment, platform copy, working notes, or backup. Do not assume any particular copy exists; ask which records are in scope and who is responsible. If the answer is “as long as necessary,” ask what purpose makes continued storage necessary and how often that need is reviewed. The European Data Protection Board lists storage limitation and accuracy among the GDPR’s principles for processing personal data. Where that framework applies, these principles make two separate questions useful: when is information no longer needed for its purpose, and how can a factual error be corrected? They do not supply one retention period for every personality report. The appropriate period depends on the purpose and rules governing the processing. Ask the recipient to point to the privacy information or retention policy that applies, and explain whether the provider follows the same schedule. A statement that a file is stored securely does not answer how long it remains. Ask what process exists to correct inaccurate information or request removal, including who receives the request and what limits apply. Correcting a factual error is different from disagreeing with an interpretation of a personality tendency. Ask whether the report can be amended, annotated, or accompanied by your explanation. The Information Commissioner’s Office, in its UK guidance on workers’ health information, says organizations should justify retention, periodically review records, and erase or anonymise information when it is no longer needed, subject to other legal obligations. It also discusses accuracy and correction. This is an example for worker health information, not a universal rule for ordinary personality scores or every country. The ICO says the guidance is under review. Before sharing, ask for the retention period and starting point, which records it covers, how to correct a factual error, and any deletion exceptions. A recipient may need to retain information under a legal or professional requirement, so immediate deletion is not always the right test. A useful answer identifies the applicable rule, responsible contact, and exception. If the response is vague, request the written notice or policy before sharing. If the schedule fits the purpose and you understand correction and removal procedures, weigh that information alongside access and onward use when choosing how much to disclose.

Sources: Data protection and workers’ health information; Basic principles

Does a workplace result count as health information?

Not automatically. Classification depends on what the assessment asks or infers, its purpose and use, and the governing rules. A work-preference report is not medical information simply because it is called a personality assessment; the label alone does not settle the question. Ask what category the organization assigns, which policy or rule supports that view, and whether its answer changes if the instrument is used to identify a mental condition. The same report may raise different legal questions in different settings.

A bounded U.S. example shows why content and use matter. The U.S. Equal Employment Opportunity Commission’s Enforcement Guidance: Preemployment Disability-Related Questions and Medical Examinations addresses the Americans with Disabilities Act before hiring. It describes a medical examination as a procedure seeking information about impairments or health. Factors include whether a test is designed to reveal an impairment and what the employer seeks to determine. The guidance contrasts a hypothetical personality test used only to indicate whether an applicant is likely to lie, which it says is not a medical examination, with a psychological test designed to reveal mental illness and interpreted clinically. A stated nonmedical purpose alone does not control. Design, interpretation, and context matter. This guidance does not classify every workplace report or settle other privacy questions.

The UK Information Commissioner’s Office takes a jurisdiction-specific approach in Data protection and workers’ health information. It explains that UK GDPR health data concerns physical or mental health and reveals health status. Its guidance says this category receives additional protection under the UK GDPR and Data Protection Act 2018. If an organization calls a result health information, ask what content or inference reveals health status and which rules it believes apply. The guidance does not establish that every personality score is health data or that results outside this category have no privacy protection. It concerns UK worker health information, not a universal rule.

Do not collapse these examples into one test. The EEOC document is an older U.S. pre-employment guide; it notes that it predates the 2008 ADA Amendments Act and is not binding law. The ICO page describes UK data-protection obligations. Neither determines how a particular instrument should be classified today. Ask what the assessment was designed to reveal, how its result will be used, and which local rule the organization relies on. If classification affects a consequential employment decision, request a written explanation and consult a qualified local adviser. Do not assume every personality result is a medical record or that calling it work-style data removes privacy duties.

Sources: Enforcement Guidance: Preemployment Disability-Related Questions and Medical Examinations; Data protection and workers’ health information

What if the answers are vague or the assessment is required?

When the answers are vague, ask for the document that governs this assessment before sending a separate copy of your report. That may be an assessment notice, release policy, privacy notice, or written explanation. Ask the person requesting the result to identify the purpose, recipients, and available choices. “It is confidential” does not say who may see it, while “it is required” does not explain what happens if you limit disclosure. Requesting clarification establishes the arrangement; it does not prove anyone has acted improperly. The Standards for Educational and Psychological Testing recommend that test takers receive information about confidentiality limits and who may access results. They also recognize that reporting can differ in some employment and selection settings. These are professional standards, not a universal statute or personal veto over an organization’s process. Their practical value is to make missing questions visible: who receives the result, how it will be reported, and whether it may be shared. Ask for written terms rather than treating a broad assurance as an answer. The American Psychological Association’s “Disclosure of Test Data and Test Materials: Just the FAQs” discusses release within the professional context of psychologists. It considers disclosure purpose, consent, confidentiality, and the risk of misuse or misinterpretation; it also discusses limiting disclosure to what the circumstances require where appropriate. This guidance does not establish that every person can demand a summary, redact a formal report, or withhold results without consequences. The assessment’s policy, the recipient’s role, and applicable rules still matter. If participation or disclosure is called required, ask what requirement applies, which information must be provided, who will receive it, and what may happen if you decline or provide less. Ask who can explain the process: the assessment administrator, the organization’s privacy contact, or another named representative. Separate these answers from whether you want to keep a personal report copy; sharing one with a coach, for example, may differ from an organization’s formal assessment process. If the terms remain unclear or conflict with what you were told, pause before sending an additional copy and seek clarification from an appropriate privacy, human-resources, employee, or legal contact, depending on setting and stakes. In a voluntary conversation, you may be able to choose what to discuss. In a formal process, your options may be narrower. First learn which situation applies, then decide what to share with that recipient under the stated conditions.

Sources: Standards for Educational and Psychological Testing; Disclosure of Test Data and Test Materials: Just the FAQs

What is a proportionate next step?

Before sending anything, write down the purpose, named recipients, any onward-use boundary, and the retention answer. The Standards for Educational and Psychological Testing call for advance information about access, reporting, and third-party sharing. Where GDPR applies, the European Data Protection Board lists purpose limitation, data minimisation, and storage limitation as distinct principles. Use those as practical questions: does the requested material fit the stated purpose, and are its handling terms clear enough for you to decide?

Choose the least extensive form that serves the purpose. A conversation might address one work pattern; a summary or excerpt might answer a focused question; a full report may be needed when its detail is explained. These are possibilities to ask about, not guaranteed options. If a material answer is missing or conflicts with the notice, pause and request the applicable policy or clarification from the person responsible.

An employer-arranged assessment may define recipients and use, limiting the individual’s control over every boundary. The professional standards acknowledge that reporting can differ in some personnel decisions. This article cannot determine whether a particular process is lawful or which rights apply; that depends on the assessment, recipient, circumstances, and governing rules. Share when the purpose and handling are clear enough for the decision at hand. If significant questions remain, seek qualified local advice before proceeding.

Sources: Standards for Educational and Psychological Testing; Basic principles

Questions readers ask