Testing 100 companies found privacy requests often led to confusion and dead ends.