All templates
Privacy & Compliance

Data Access Request (DSAR) Experience & Expectations Survey

Measures consumer experiences with data subject access requests and expectations around response timelines, suitable for organizations assessing GDPR/CCPA compliance perceptions and identifying friction points in the DSAR process.

Sample questions

A preview of what’s in the template. Every question is editable before you launch.

20 questions · ~9 min
Q01
Message

Thank you for participating in this survey about data access request (DSAR) experiences and response time expectations. Your participation is entirely voluntary, and you may stop at any time. There are no right or wrong answers — we are interested in your honest opinions. All responses are confidential, anonymized, and will be reported only in aggregate for research purposes. This survey takes approximately 10 minutes to complete.

Q02
Multiple Choice

In the past 24 months, have you submitted a data access request (e.g., GDPR/CCPA right of access) to any company?

  • Yes
  • No
  • Not sure
Q03
Dropdown

When did you most recently submit a data access request?

  • Last 30 days
  • 31–90 days ago
  • 3–12 months ago
  • More than a year ago
Q04
Opinion Scale

How familiar are you with your right to request access to personal data held by companies?

Scale: 17
Min:Not at all familiarMax:Very familiar
Q05
Multiple Choice

In your opinion, what is the longest reasonable time for a company to provide a complete response to a data access request?

  • Within 1 day
  • 2–7 days
  • 8–30 days
  • 31–45 days
  • More than 45 days
Q06
Long Text

Based on your responses in this survey, is there anything else you'd like to share about your experience or expectations regarding data access requests and response timelines?

Q07
Dropdown

What is your age?

  • 18–24
  • 25–34
  • 35–44
  • 45–54
  • 55–64
  • 65 or older
  • Prefer not to say
Q08
Message

Thank you for completing this survey! Your responses will help improve data access request processes and transparency. Your answers are confidential and will be reported only in aggregate.

Q09
Multiple Choice

Thinking about your most recent data access request, how long did it take for the company to acknowledge (confirm receipt of) your request?

  • Same day
  • 1–2 days
  • 3–7 days
  • 8–30 days
  • 31+ days
  • No acknowledgement received
Q10
Opinion Scale

If you needed to in the next 12 months, how likely would you be to submit a data access request?

Scale: 17
Min:Very unlikelyMax:Very likely
Q11
Opinion Scale

How important is it to you that companies respond to data access requests within the legally required timeframe?

Scale: 17
Min:Not at all importantMax:Extremely important
Q12
AI Interview

We'd like to learn a bit more about your thoughts on data access requests. An AI moderator will ask a couple of follow-up questions based on your earlier answers.

Q13
Multiple Choice

Which of the following best describes your gender?

  • Woman
  • Man
  • Non-binary
  • Prefer not to say
Q14
Multiple Choice

How long did it take to receive the company's final or most complete response to your most recent data access request?

  • Same day
  • 1–2 days
  • 3–7 days
  • 8–30 days
  • 31–45 days
  • 46+ days
  • Still waiting
  • Never received any response
Q15
Multiple Choice

What are the main reasons you haven't submitted a data access request? (Select all that apply)

  • I haven't needed to
  • I don't know how
  • I'm unsure which company to contact
  • It seems too time-consuming
  • I'm worried about sharing ID documents
  • I don't think companies will respond
  • I prefer deleting my account instead
  • Other (please specify)
  • Prefer not to say
Q16
Dropdown

In which region do you currently live?

  • Africa
  • Asia
  • Europe
  • Latin America & Caribbean
  • Middle East
  • North America
  • Oceania
  • Prefer not to say
Q17
Opinion Scale

How complete was the data you received in response to your request?

Scale: 17
Min:Very incompleteMax:Very complete
Q18
Dropdown

What is the highest level of education you have completed?

  • Less than high school
  • High school or equivalent
  • Some college / Associate degree
  • Bachelor's degree
  • Master's degree
  • Doctorate / Professional degree
  • Prefer not to say
Q19
Opinion Scale

Overall, how satisfied were you with the data access request process for your most recent request?

Scale: 17
Min:Very dissatisfiedMax:Very satisfied
Q20
Multiple Choice

What is your current employment status?

  • Employed full-time
  • Employed part-time
  • Self-employed
  • Student
  • Homemaker / Caregiver
  • Unemployed
  • Retired
  • Unable to work
  • Prefer not to say

What’s included

  • AI follow-ups

    Adaptive probes on open-ended answers that pull out detail a static form would miss.

  • Attention checks

    Built-in safeguards against rushed answers and low-quality respondents.

  • AI-drafted copy

    Wording, ordering, and branching written by the AI — tuned to your research goal.

  • Auto report

    Themes, quotes, and a plain-English summary write themselves once responses come in.

How it compares

We reviewed the closest templates from other survey tools. Here’s what they do well — and where this template goes further.

Why this template

  • Includes multiple opinion-scale questions measuring completeness of data received, satisfaction, familiarity with access rights, and importance of timely response — not just a single request form.
  • Captures timeline expectations directly (multiple-choice on time-to-acknowledge and time-to-final-response, plus what respondents consider a 'longest reasonable time'), which is core to GDPR/CCPA compliance benchmarking.
  • Adds an adaptive AI follow-up interview segment so respondents can explain friction points in their own words, going beyond fixed-choice answers.
  • Includes an open-text reflection question plus full demographic breakdown (age, gender, region, education, employment), enabling segmented analysis of DSAR experience by population group, with an auto-generated report at the end.

Typeform

GDPR Data Removal Request Form Template

This is a transactional intake form for consumers to submit a GDPR data removal/erasure request to a company, not a research instrument for measuring DSAR experiences or timeline expectations. It's fielding-ready as a request form but serves a different purpose than an experience/perception survey. Useful as an adjacent tool in the same GDPR compliance space, but not a direct substitute for a compliance-perception study.

What it does well

  • Clean, conversational Typeform-style UI that's quick to deploy for a data removal request
  • Purpose-built around a specific GDPR right (erasure/removal), so the fields are narrowly relevant to that request type

Where it falls short

  • Static form with fixed fields — no adaptive AI follow-up probing into why a request was made or how it was experienced
  • Not designed to measure satisfaction, timeliness perceptions, or awareness of rights, so it can't produce compliance-perception insights
  • No automated quality scoring or generated analysis report; it collects a request, not survey data for analysis

Ready to launch?

Open this template in the editor. Every part is yours to change before the first respondent sees it.

Related templates

More studies from the same category.

See all
Privacy & Compliance

Participant Preferences for Anonymized Data Sharing & Licensing

Measures research participants' comfort with anonymized data sharing, preferred licensing models, repository preferences, and required safeguards. Designed for IRB-compliant studies where researchers need informed consent data on secondary data use.

View template
Privacy & Compliance

Data Retention Policy Comprehension & Usability Survey

Measures how well users understand your data retention policy, evaluates the discoverability and usability of retention-related controls, and identifies preferred communication formats to inform UX and compliance improvements.

View template
Privacy & Compliance

Data Residency & Sovereignty Preferences Survey

Measures user and organizational preferences for data storage location, cross-border transfer conditions, and governance trade-offs to inform product policy, compliance strategy, and trust-building initiatives.

View template
Privacy & Compliance

Account Deletion & Data Erasure UX Audit (GDPR/CCPA)

Evaluates the findability, clarity, effort, and trustworthiness of account deletion and data erasure flows. Designed for UX researchers and compliance teams auditing consumer-facing digital services against GDPR/CCPA standards.

View template
Privacy & Compliance

Cross-Border Data Transfer Trust Assessment (GDPR)

Measures customer trust, comfort, and consent preferences regarding international personal data transfers. Use this instrument to identify key drivers of acceptance, benchmark transparency satisfaction, and inform GDPR-aligned communication strategies.

View template
Privacy & Compliance

Contract Workflow Efficiency & Visibility Assessment

Assesses internal stakeholders' experience with contract workflow visibility, SLA adherence, and cycle times to identify process bottlenecks and prioritize improvements.

View template