You forgot the step where you even need to identify that these things already exist, and whats in them.

Are there governance requirements around the data in them? I'm not familiar with US law, but we're talking about PII in this example so what legal and privacy hoops need jumping to copy the data?

Thats before we get to "Can an person with this specific learning disability, or a person who doesn't have a fixed address navigate through this form?"