A trustworthy personality report should tell you, before or at the time you receive it, who controls your results, who can access the raw answers and the written report, why each party can use them, how long the data will be kept, whether it will be shared with service providers or other organisations, and how you can request access, correction, deletion, or review where those rights apply. The answer changes with context. A report you take privately for reflection may be controlled by the test provider. A report completed for an employer may be controlled or commissioned by the organisation, with the employer receiving a decision-focused summary rather than every answer. A professional assessment may have a client, a test taker, and named recipients whose interests do not fully coincide. Do not infer privacy from the fact that a report is emailed to you. Read the privacy notice, consent screen, and instructions from the person who commissioned the assessment before treating the result as private.
Start with the decision: is this report really private?
Two reports can look similar while creating very different expectations. In one case, you choose a free assessment, enter an email address, and receive a report for your own reflection. In another, a recruiter sends you a link and pays for the assessment. You may receive a copy, but the organisation may have commissioned the work and may receive a report or recommendation. The visible document does not tell you which arrangement applies.
Ask first: who asked for the assessment, who paid for it, and who decides what happens next? Then ask whether the report is being used for self-reflection, coaching, development, selection, or a formal evaluation. Those purposes affect who needs access and what explanation you should receive. A report should not quietly move from a development conversation into hiring, promotion, or disciplinary use without a clear explanation of that change. Professional guidance treats the purpose, intended use, possible consequences, and potential recipients as information to address before consent. [0] [2]
The first comparison: private purchase versus commissioned assessment
A privately purchased report usually creates a straightforward question: what does the provider do with the data you submit? Look for the legal or organisational name controlling the data, the contact route for privacy questions, the purposes of processing, the retention period, and the categories of people or companies who may receive it. “We keep your information secure” is useful but incomplete. Security concerns protection from unauthorised access; it does not explain authorised access.
In a commissioned assessment, the person taking the test may not be the only interested party. A workplace client might receive a summary, a practitioner might retain working records, and a test publisher might process answers under a contract. The report should identify these roles as far as the setting allows. APA guidance says that, before testing, people should be told the nature and scope of an evaluation, limits of confidentiality, the parties receiving the written report, whether they will receive a copy, and likely uses and outcomes in occupational evaluations. [3]
Who should be named as an authorised reader?
A useful access explanation names roles rather than hiding behind “third parties.” Depending on the arrangement, authorised readers might include you, the practitioner who interprets the assessment, the organisation that commissioned it, a designated human-resources or coaching contact, and a technology provider storing or scoring the submission. Each role should have a stated reason to see the relevant information.
The explanation should also distinguish the full record from the output. Full records may include item responses, raw scores, notes, identity details, and the generated report. A recipient may need only a conclusion relevant to the agreed purpose. APA describes test data broadly, including individual results, raw data, records, computer-generated reports, and global or scale scores. That is why “you will receive the report” does not necessarily mean “you control every piece of assessment data.” [0] [1]
What the report should say about your own access
A report should tell you whether you can see the written interpretation, your scores, your item-level responses, and any comments supplied by an assessor. It should explain whether access is immediate, available on request, limited by the commissioning arrangement, or subject to a professional review. These are different answers, and a careful provider states which one applies.
Access can also be limited for a reason that is not simple secrecy. Test materials such as questions, manuals, scoring keys, and algorithms may be protected to preserve test security. Test data are a separate category from test materials. APA guidance describes circumstances in which results may be explained or released while secure test content remains protected. If a provider refuses a request, the report or privacy contact should identify the basis and say what information can still be supplied, such as a plain-language explanation of the result. [0] [1]
Retention is part of access, even after the report is delivered
A result can remain available to other people after you stop thinking about it. Check how long the provider keeps answers, scores, reports, account details, audit logs, and backups. Ask whether deletion removes the report itself, the underlying answers, or only your account view. If the assessment was commissioned by an employer or practitioner, ask that organisation about its own retention schedule as well as the provider’s.
A retention period should have a reason connected to the stated purpose. If the notice says data may be kept “as long as necessary,” look for a more specific explanation or a route to ask. ICO guidance on profiling recommends collecting only the minimum data needed and having a clear retention policy for profiles. That principle does not by itself decide the law in every country, but it gives a practical test: can you understand why this record still needs to exist? [4]
Sharing, vendors, and onward use
A report should explain whether your information is shared with a scoring platform, cloud host, analytics company, practitioner, employer, educational institution, or other recipient. It should say whether those parties act only on instructions or may use information for their own purposes, such as product development, research, marketing, or matching. Do not treat every mention of “improving services” as evidence that your named report is used in a particular way. Ask what is retained, whether it is identified or de-identified, and whether you can opt out.
The most important practical boundary is purpose. A provider may be able to use anonymous, aggregated information for measurement research while still limiting access to your identifiable report. Conversely, a broad permission to share personal data can allow uses you did not expect. If the answer is unclear, do not upload sensitive details merely because the assessment is described as non-clinical. A general personality report is not a private diary.
When an algorithm or profile influences a decision
Some systems do more than produce a description. They use answers or inferred traits to rank, filter, recommend, or make a decision about a person. Profiling means automated processing used to evaluate personal aspects, such as behaviour, preferences, reliability, or work performance. That definition comes from UK GDPR guidance, and the legal details depend on the jurisdiction and the decision involved. [4]
If a report may influence hiring, access to a service, or another significant outcome, ask four questions: Is a human actually reviewing the result? What information is used? What is the consequence? How can I correct an error or challenge the decision? ICO guidance says that certain solely automated decisions with legal or similarly significant effects require specific safeguards, including information about the processing and ways to request human intervention or challenge the outcome. This is a legal example, not a universal promise that every personality report gives you the same rights. [4]
The workplace exception: receiving a copy may not mean controlling the use
Workplace assessments deserve a separate check because the organisation may be the client. Before starting, ask whether participation is voluntary or required, who receives the report, whether the result is used for selection or development, whether managers see the full report or a summary, and whether you can decline to answer optional questions. Ask what happens if you disagree with an interpretation and whether the assessment will be combined with interview, performance, or background information.
Do not assume that a human label makes a decision fair, or that an automated score is the only concern. A manager can misuse a report by treating a tendency as a fixed capacity. A vendor can also produce a neat summary that exceeds the evidence. Professional standards emphasise that assessment interpretation depends on purpose, setting, the person’s characteristics, and the limits of the instrument. A responsible workplace process states these limits and keeps the result tied to the purpose for which it was collected. [1] [2]
A five-minute privacy check before you share results
Use the report and its surrounding notices as a decision document. Before you share a result, find the answers to these questions:
1. Who is the data controller, client, or responsible practitioner? 2. Who can see raw answers, scores, notes, and the written report? 3. Why does each named role need access? 4. How long are the data and backups kept? 5. Are vendors, employers, coaches, researchers, or other organisations recipients? 6. Can you request access, correction, deletion, or a copy, and what limits apply? 7. Could the result be used for ranking or a consequential decision? 8. Is there a human review and a way to challenge an error? 9. Will you receive an understandable explanation rather than only a label? 10. What changes if you withdraw consent or close the account?
Write down unanswered questions before clicking submit. If the assessment is for a job or formal evaluation, ask the commissioning organisation, not only the test website. If the assessment is for reflection, share the report selectively and remove identifying details when discussing it with someone who does not need the full record. Privacy is not the same as never sharing; it is knowing the boundary before you cross it.
What a trustworthy report should leave you able to decide
After reading the access information, you should be able to decide whether to take the assessment, whether to disclose the result, and what a recipient is allowed to infer from it. You should know whether the report describes tendencies for reflection or contributes to a decision made by someone else. You should also know which parts are uncertain: a score is an interpretation under a particular instrument, not a permanent identity record.
If the provider cannot answer basic questions about recipients, purpose, retention, and challenge routes, pause. That gap does not prove misuse, but it prevents informed consent. Compare the unanswered question with the stakes. A vague notice may be tolerable for a low-stakes private exercise and unacceptable when an employer will use the result to screen applicants. Make that decision before you share your answers, then revisit it if the stated purpose changes. [0] [2]
Questions readers ask
Can I assume that I own my personality report because I took the test?
No. Taking the assessment does not by itself settle who controls the data, who commissioned the assessment, or who may receive it. Check the provider’s privacy notice and the consent or workplace instructions for access to raw answers, scores, the written report, and related records. Local law may add access or correction rights, but those rights and their limits vary by jurisdiction.
Should an employer show me the personality report used in a hiring decision?
Ask before taking the assessment whether you will receive the report, a summary, or an explanation of the result, and who else will see it. Professional guidance recognises that some employment screening arrangements limit what is released to the test taker, so receiving a copy is not an automatic rule. The employer should still explain the purpose, likely use, recipients, and any meaningful route for questions or review.
Sources and notes
- Disclosure of Test Data and Test Materials: Just the FAQs
Supports informed notice about purpose, intended use, recipients, test data, explanations, and limits on releasing assessment information.
- Ethical Principles of Psychologists and Code of Conduct
Supports the distinctions among informed consent, test data, assessment interpretation, confidentiality, and explaining results.
- APA Guidelines for Psychological Assessment and Evaluation
Supports considering purpose, setting, normative context, possible consequences, recipients, and limits before interpreting an assessment.
- Professional Practice Guidelines for Occupationally Mandated Psychological Evaluations
Supports explaining occupational evaluation scope, confidentiality limits, report recipients, copies, uses, and possible outcomes.
- Rights Related to Automated Decision Making Including Profiling
Supports the definition of profiling and UK GDPR guidance on transparency, retention, human intervention, challenge, accuracy, and significant automated decisions.
Apply it to your work
Understand how you work before you choose what comes next.
From this guide: Carry this report-reading question into the work decision in front of you.
Build a private Work Pattern Report across ten workplace continuums, then compare the result with the demands of the role or environment in front of you.