[kogir]

Since nobody has linked it yet, there's a comprehensive document covering this and related topics, here: https://www.ycombinator.com/legal/

YC has multiple in-house lawyers. They're not going to risk their business over this. However, I'm unaware of any law that requires the process be completely automated.

[samus]

GDPR and similar laws require action within certain timeframes. If the volume of requests increases, it becomes worthwhile to think about automating timeconsuming parts of those processes.