[techjuice]

You should consult your GDPR specialized attorney on these matters to insure you are in legal compliance. When this law came into effect you should have drafted corporate rules and requirements for user validation and processes for how to handle users that did not have all of this information to help determine if their requests could be legally invalidated or other means of validation. This would also help protect your company insuring you would exhaust all legal measures allowed to properly process requests while still protecting your company.

If you are not a company you should consult a GDPR specialized attorney to help draft up processes for handling these matters to help insure you are in legal compliance and properly protect yourself legally.

[jason_slack]

I understand what you are saying, but there must be guidelines for how to handle deletion requests when identity can't be verified? Otherwise aren't we just making up policy?