I have a research study being run. Participants are asked to;
- Fill out a consent form (contains personal information as per GDPR)
- Complete a questionnaire.
My hopes was that the questionnaire responses could be anonymous, I would store the forms and questionnaires responses in separate databases with no reasonable way to match them up. The issue however is I must ensure no one can complete the second step, without competing the first.
My plan was to use PHP sessions, until I remembered that they could be used to match up the two databases. Or perhaps the second step is located on a secret URL to hope people don't find it? (Not really suitable...).
Given the problem, anyone have an idea on how I could go about ensuring the steps are done in order?