Secure citizen surveys with e-Boks: How Danish public organisations distribute surveys without compromising on GDPR

Secure citizen surveys are surveys distributed by Danish public-sector organisations — municipalities, regions, government agencies — to citizens, where the questions or the responses involve sensitive personal data. Under GDPR, distribution security is not a bonus feature; it is a precondition for running the survey at all. Surveyxact's integration with e-Boks gives Danish public organisations a distribution channel that meets the security requirement out of the box: citizens log in with NemID/MitID, responses are protected end-to-end, and the operational overhead of collecting and validating email addresses disappears.

This article shows how the integration works in practice, why e-Boks is increasingly the default channel for citizen surveys in Denmark, and how Gladsaxe Municipality uses it to run citizen-facing measurements securely and at scale.

e-Boks is the Danish national digital postbox used by every public organisation in the country to send official communication to citizens. Surveyxact's e-Boks integration extends this distribution channel to citizen surveys: invitations are sent through e-Boks, citizens log in with NemID/MitID to respond, and the entire flow is GDPR-compliant by design. The integration is used primarily by Danish municipalities, regions and public agencies for surveys involving sensitive personal data — child well-being assessments, healthcare evaluations, case-handling reviews, and similar.

A municipal HR team plans the citizen satisfaction survey on case-handling. Three weeks of work goes into collecting valid email addresses for the citizens involved. Two thousand emails are validated, cleaned, opted-in. The survey goes out — and falls into spam folders, gets ignored as suspicious, or hits citizens who never check that email account. The response rate is 12%. The team has the data at the political level demanded, but the data isn't representative — and nobody noticed that the email distribution itself created the bias. Under GDPR, the same email list also represents a personal data risk surface that didn't exist.

GDPR raises the bar for any survey involving sensitive personal data — and most public-sector citizen surveys do. Municipal organisations run surveys to quality-assure and evaluate child well-being in schools, parental satisfaction with schools and canteen schemes, case-handling, job-activation programmes, healthcare offerings and sickness pathways. Every one of these touches sensitive personal information, and every one of them is a regulatory liability if the distribution channel doesn't meet the standard.

Email distribution doesn't meet the standard reliably. Email lists are imperfectly maintained, addresses leak between systems, recipients can be spoofed, and the audit trail is weak. e-Boks closes all these gaps simultaneously: every citizen has one verified e-Boks account, the channel is government-grade secure, the audit trail is automatic, and the citizen authenticates with NemID/MitID before responding.

The e-Boks integration distributes the survey through a channel citizens already use and trust. Public organisations already send digital post to citizens via e-Boks for tax notices, healthcare letters, child-care correspondence and case-handling updates. Sending a survey through the same channel means the invitation lands in a familiar environment the citizen recognises and trusts — not a generic email that has to compete with promotional traffic and spam.

Step 1: the public organisation builds the questionnaire in Surveyxact, using a validated framework for the relevant measurement type.

Step 2: the audience is selected — by CPR-segmented citizen list, by case category, by service area — and the e-Boks distribution is configured.

Step 3: the survey invitation is sent through e-Boks. The citizen receives it in their digital postbox alongside the official correspondence they already get from public organisations.

Step 4: the citizen logs in with NemID/MitID and responds. The platform automatically handles consent management, response tracking and analysis.

Gladsaxe Municipality is one of many Danish municipalities using Surveyxact's e-Boks integration for citizen and employee surveys. Senior Consultant Dorte Bjerregaard Jensen describes the platform as straightforward to use, with responsive phone support when something requires assistance — a profile that matters more in the public sector, where survey-administrator roles are often part of broader job descriptions and resource constraints are real.

In one recent use case, the Surveyxact–e-Boks integration gave Gladsaxe Municipality a fast, simple way to invite employees to participate in a research project on face masks that the municipality wanted to support. The same infrastructure used for citizen surveys handles employee outreach with the same security guarantees and the same operational simplicity.

Any public-sector survey involving sensitive personal data benefits from e-Boks distribution — but the benefit is largest where data sensitivity, citizen population scale and trust requirements all stack. Six categories consistently dominate the e-Boks survey volume across Danish public-sector users. 

Child well-being assessments in schools: Structured measurement of pupil well-being, often combined with parental input. Sensitive by design; trust matters.

Parental satisfaction with schools and canteen schemes: Broad measurement across the parental population in a municipality. Email distribution is operationally heavy; e-Boks distribution is built in.

Case-handling reviews: Citizen feedback on specific case-handling experiences — sickness benefits, housing assistance, childcare placement. Sensitive personal data on every record.

Job-activation programmes: Feedback from citizens in job-activation pathways. Both the topic and the citizen status are sensitive.

Healthcare offerings: Patient experience measurement in regional healthcare services, including specialist outpatient pathways and chronic-condition follow-up.

Sickness pathways: Feedback on long-term sickness handling — both health-related and case-handling-related — where data sensitivity is at its highest.