[jacquesm]

> I think they should be automated, though..

I agree. But that's mostly a convenience, and if the number of requests is low enough then you could do it by hand.

With reocities.com I did a hybrid approach, I did allow people to make the deletion requests in an automated way but then I still manually reviewed them. The reason is that there the link between the accounts and the users did not make it when we backed-up as much of Geocities as we could, so to avoid people requesting the deletion of other people's data or pranksters that would request 1000's of accounts to be deleted we needed an extra step for verification.