Cross-Border Data Transfer Trust Assessment (GDPR)

Welcome and thank you for participating in this survey about your views on how organizations handle personal data across borders. This survey is voluntary and should take approximately 5–7 minutes. You may stop at any time without consequence. There are no right or wrong answers—we are interested in your honest opinions. Your responses are confidential, will be anonymized, and reported only in aggregate. Results will be used to improve how we communicate about data transfer practices. By continuing, you confirm that you are 18 years of age or older and consent to participate.

Before this survey, were you aware that some organizations transfer customers' personal data across national borders?

• Yes
• No
• Not sure

How comfortable or uncomfortable are you with companies transferring your personal data to other countries?

Please rank the following factors from most to least important when deciding whether to accept a company transferring your personal data across borders.

1. Strong encryption and key management
2. Legal adequacy of the destination country or region
3. The company's privacy and security reputation
4. Ability to opt out or control where data is sent
5. Data minimization and purpose limitation
6. Independent audits and certifications

Overall, how satisfied are you with the clarity of information companies provide about how and where they transfer your personal data?

We'd like to understand your perspective on cross-border data transfers in more depth. An AI moderator will ask you a couple of follow-up questions based on your earlier answers. Please respond in your own words.

Based on your responses in this survey, please share any additional thoughts or feelings about how companies handle cross-border data transfers.

What is your age group?

• 18–24
• 25–34
• 35–44
• 45–54
• 55–64
• 65+
• Prefer not to say

Thank you for your time. Your responses will help us better understand and improve how organizations communicate about cross-border data transfer practices. Your feedback is greatly appreciated.

How often, if at all, do you read or review privacy policies or data handling notices from companies you use?

• Always or almost always
• Often
• Sometimes
• Rarely
• Never
• Not sure

Which of the following best describes your position on cross-border transfers of your personal data by a company you use?

• Yes, I would generally accept this
• Yes, but only under specific conditions
• No, I would not accept this under any circumstances

Please rank the following regions from most to least trusted as destinations for your personal data.

1. European Union / EEA
2. North America
3. United Kingdom
4. East Asia
5. South Asia
6. Latin America
7. Middle East / Africa
8. Oceania

If you could change one thing about how companies communicate about cross-border data transfers, what would it be?

• Simpler, plain-language explanations
• More specific details about destination countries
• Clearer information about what safeguards are in place
• Easier ways to opt out of specific transfers
• Real-time notifications when data is transferred
• Nothing—current communication is adequate
• Other (please specify)

How do you describe your gender?

• Woman
• Man
• Non-binary
• Prefer not to say

How likely or unlikely would you be to continue using a company that transfers your data across borders, assuming they are transparent about the practice?

In which region do you primarily reside?

• North America
• Latin America
• Europe
• Middle East
• Africa
• South Asia
• East Asia
• Southeast Asia
• Oceania
• Prefer not to say

What is the highest level of education you have completed?

• Some high school or less
• High school diploma or equivalent
• Some college or technical program
• Bachelor's degree
• Postgraduate degree
• Prefer not to say

What is your current employment status?

• Employed full-time
• Employed part-time
• Self-employed
• Student
• Unemployed and looking for work
• Not in labor force (e.g., caregiver, retired)
• Prefer not to say