Data Access Request (DSAR) Experience & Expectations Survey
Measures consumer experiences with data subject access requests and expectations around response timelines, suitable for organizations assessing GDPR/CCPA compliance perceptions and identifying friction points in the DSAR process.
Sample questions
A preview of what’s in the template. Every question is editable before you launch.
In the past 24 months, have you submitted a data access request (e.g., GDPR/CCPA right of access) to any company?
- Yes
- No
- Not sure
When did you most recently submit a data access request?
- Last 30 days
- 31–90 days ago
- 3–12 months ago
- More than a year ago
How familiar are you with your right to request access to personal data held by companies?
In your opinion, what is the longest reasonable time for a company to provide a complete response to a data access request?
- Within 1 day
- 2–7 days
- 8–30 days
- 31–45 days
- More than 45 days
Based on your responses in this survey, is there anything else you'd like to share about your experience or expectations regarding data access requests and response timelines?
What is your age?
- 18–24
- 25–34
- 35–44
- 45–54
- 55–64
- 65 or older
- Prefer not to say
Thank you for completing this survey! Your responses will help improve data access request processes and transparency. Your answers are confidential and will be reported only in aggregate.
Thinking about your most recent data access request, how long did it take for the company to acknowledge (confirm receipt of) your request?
- Same day
- 1–2 days
- 3–7 days
- 8–30 days
- 31+ days
- No acknowledgement received
If you needed to in the next 12 months, how likely would you be to submit a data access request?
How important is it to you that companies respond to data access requests within the legally required timeframe?
We'd like to learn a bit more about your thoughts on data access requests. An AI moderator will ask a couple of follow-up questions based on your earlier answers.
Which of the following best describes your gender?
- Woman
- Man
- Non-binary
- Prefer not to say
How long did it take to receive the company's final or most complete response to your most recent data access request?
- Same day
- 1–2 days
- 3–7 days
- 8–30 days
- 31–45 days
- 46+ days
- Still waiting
- Never received any response
What are the main reasons you haven't submitted a data access request? (Select all that apply)
- I haven't needed to
- I don't know how
- I'm unsure which company to contact
- It seems too time-consuming
- I'm worried about sharing ID documents
- I don't think companies will respond
- I prefer deleting my account instead
- Other (please specify)
- Prefer not to say
In which region do you currently live?
- Africa
- Asia
- Europe
- Latin America & Caribbean
- Middle East
- North America
- Oceania
- Prefer not to say
How complete was the data you received in response to your request?
What is the highest level of education you have completed?
- Less than high school
- High school or equivalent
- Some college / Associate degree
- Bachelor's degree
- Master's degree
- Doctorate / Professional degree
- Prefer not to say
Overall, how satisfied were you with the data access request process for your most recent request?
What is your current employment status?
- Employed full-time
- Employed part-time
- Self-employed
- Student
- Homemaker / Caregiver
- Unemployed
- Retired
- Unable to work
- Prefer not to say
What’s included
AI follow-ups
Adaptive probes on open-ended answers that pull out detail a static form would miss.
Attention checks
Built-in safeguards against rushed answers and low-quality respondents.
AI-drafted copy
Wording, ordering, and branching written by the AI — tuned to your research goal.
Auto report
Themes, quotes, and a plain-English summary write themselves once responses come in.
How it compares
We reviewed the closest templates from other survey tools. Here’s what they do well — and where this template goes further.
Why this template
- Includes multiple opinion-scale questions measuring completeness of data received, satisfaction, familiarity with access rights, and importance of timely response — not just a single request form.
- Captures timeline expectations directly (multiple-choice on time-to-acknowledge and time-to-final-response, plus what respondents consider a 'longest reasonable time'), which is core to GDPR/CCPA compliance benchmarking.
- Adds an adaptive AI follow-up interview segment so respondents can explain friction points in their own words, going beyond fixed-choice answers.
- Includes an open-text reflection question plus full demographic breakdown (age, gender, region, education, employment), enabling segmented analysis of DSAR experience by population group, with an auto-generated report at the end.
Typeform
GDPR Data Removal Request Form TemplateThis is a transactional intake form for consumers to submit a GDPR data removal/erasure request to a company, not a research instrument for measuring DSAR experiences or timeline expectations. It's fielding-ready as a request form but serves a different purpose than an experience/perception survey. Useful as an adjacent tool in the same GDPR compliance space, but not a direct substitute for a compliance-perception study.
What it does well
- Clean, conversational Typeform-style UI that's quick to deploy for a data removal request
- Purpose-built around a specific GDPR right (erasure/removal), so the fields are narrowly relevant to that request type
Where it falls short
- Static form with fixed fields — no adaptive AI follow-up probing into why a request was made or how it was experienced
- Not designed to measure satisfaction, timeliness perceptions, or awareness of rights, so it can't produce compliance-perception insights
- No automated quality scoring or generated analysis report; it collects a request, not survey data for analysis
Ready to launch?
Open this template in the editor. Every part is yours to change before the first respondent sees it.
Related templates
More studies from the same category.
Participant Preferences for Anonymized Data Sharing & Licensing
Measures research participants' comfort with anonymized data sharing, preferred licensing models, repository preferences, and required safeguards. Designed for IRB-compliant studies where researchers need informed consent data on secondary data use.
View templateData Retention Policy Comprehension & Usability Survey
Measures how well users understand your data retention policy, evaluates the discoverability and usability of retention-related controls, and identifies preferred communication formats to inform UX and compliance improvements.
View templateData Residency & Sovereignty Preferences Survey
Measures user and organizational preferences for data storage location, cross-border transfer conditions, and governance trade-offs to inform product policy, compliance strategy, and trust-building initiatives.
View templateAccount Deletion & Data Erasure UX Audit (GDPR/CCPA)
Evaluates the findability, clarity, effort, and trustworthiness of account deletion and data erasure flows. Designed for UX researchers and compliance teams auditing consumer-facing digital services against GDPR/CCPA standards.
View templateCross-Border Data Transfer Trust Assessment (GDPR)
Measures customer trust, comfort, and consent preferences regarding international personal data transfers. Use this instrument to identify key drivers of acceptance, benchmark transparency satisfaction, and inform GDPR-aligned communication strategies.
View templateContract Workflow Efficiency & Visibility Assessment
Assesses internal stakeholders' experience with contract workflow visibility, SLA adherence, and cycle times to identify process bottlenecks and prioritize improvements.
View template