Verifying a consumer before acting on their data
Minimum identity checks before revoking consents or actioning deletion.
Act only on requests from the email address associated with the consent. If the addresses differ, ask the consumer to write from the connected address — never enumerate what data or services exist for an address the requester doesn't control.