Skip to main content

Why do we verify email addresses for Data Subject Requests (DSRs)?

Updated over a week ago

To protect both our clients and individuals submitting Data Subject Requests (DSRs), we verify the ownership of the email address provided. This prevents unauthorized or fraudulent requests that could lead to the accidental disclosure or deletion of personal data.

How we verify an email address

  • When you submit a DSR, we send a one-time password (OTP) to the email address you entered.

  • You must confirm the OTP to prove that you own and can access that email account.

  • Once confirmed, we mark the email address as Verified (shown with a βœ“ symbol in the request inbox).

Why this matters

  • βœ… Prevents abuse or impersonation in DSR requests.

  • βœ… Ensures only the rightful data subject can request access, correction, or erasure.

  • βœ… Provides transparency and trust for our clients when handling data requests.

This simple step helps maintain compliance while keeping your data safe.

Did this answer your question?