[sebastien_b]

> until I uploaded a load of personal ID documents [passport / driving licence, etc] to confirm my identity.

I don't use anything that I'm totally dependant on, so this hasn't been a problem for me (getting an account closed - might have happened with Facebook, maybe), but your post made me think of what I'd do with such a request:

First, I'd say something like "Well, since you're asking for *very* personal and confidential info, first I will need you to confirm *your* identity by you sending me [unredacted ID card|License|Passport] as well as proof of employment such as [Complete unredacted paystub|Complete unredacted employment contract] to ensure you really are who you say you are before proceeding".

To which they would invariably reply "Well we can't do that because it would violate the privacy of our employees (oh, the irony!), but rest assured we will keep the info you provide strictly confidential, blah blah blah".

At that point I'd fire back "Seriously?!??" along with samples of past leaks/privacy violations from that company, along with a blurb about how I can't talk about this request anymore since I'm now in the process of forwarding this to my local Attorney General (or "on the advice of my council"), etc.