Verification of Requests
Verification of Requests
Confirm who is asking before you fulfill
For every privacy request that requires it, Optacy verifies the requester’s identity before manual or automated fulfillment begins.
The first step in fulfillment
Verification is the first step before manual processing or automated fulfillment for rights that require it. Confirm identity once, then move into the rest of your workflow with confidence.
Email verification
For most businesses, the preferred approach is to verify the requester’s email address. Optacy sends a link they can click to confirm they own the inbox used to submit the request.
Match against your systems of record
For advanced workflows, Optacy can find the requester in your system of record, confirm the record exists, and match any other field you prefer: phone number, document ID, or more.
Skip verification when it is not required
By default, we skip verification for rights that do not require it, such as “Do Not Sell or Share My Personal Information.”
Additional Methods of Verification
Require that we connect to your ID verification system? Or additional questions from background checks? Not a problem, just contact us here.
Verification of Requests FAQ
Optacy emails the requester a link containing a special token, and clicking it confirms they own the inbox used to submit the request. For toll-free number requests, you enter the requester’s email on the request’s Details screen and send the verification email. When the consumer verifies within the allowed window, Optacy marks the request Acknowledged and records it in the Audit Trail.
Verification is required for most privacy rights. Under the CCPA, for example, a business must verify the consumer’s identity before providing a copy of their information or deleting it. It is typically not needed for “Do Not Sell or Share My Personal Information” requests or general responses that disclose no personal information, so Optacy skips verification for those rights by default.
Once a request is verified, it moves into fulfillment. You can mark it Verified yourself or let Smart Actions do it, and a Smart Action can email your team that the request is ready. Optacy also sends a webhook event that includes the verification status, so your systems can start retrieving or deleting data. Requests that can’t be verified can be closed as Unverifiable.
Join the Optacy community today
Have any questions? Call us.
From the US: +1 (855) 5-OPTACY (855-567-8229)
From outside the US: +1 (302) 864-2253