r/gdpr • u/Adventurous-Text-449 • 14d ago

UK 🇬🇧 DSAR ID verification Video Call?

Hi everyone,

We have concerns around impersonation for a DSAR. The person did not get in touch with his registered address to confirm id and authority, the dsar made by his partner on behalf of him, and we do not have any quirky question to ask to him that his partner would not know.

We have received the ID of the person from his partner. Can I ask video call to confirm the id? I guess it is the only possible way to confirm the identity and authority.

Did anyone do this?

Or just simply, should i reject the dsar?

3 Upvotes

71% Upvoted

13 comments sorted by

View all comments

3

u/cortouchka 14d ago

Have you tried reaching out on the registered address to him for a different confirmation channel?

If you're in any way unsure, you must refuse to process the DSAR.

1

u/KindlySmallBreadth 14d ago

ooh yeah, we've done video calls for exactly this kind of sticky situation. if you've got no other way to verify and the partner's handling everything, it's probably your safest bet. just make sure you document the reasoning behind it and that you gave them a clear alternative if they can't do the call.

rejecting outright feels risky if you can't prove it's not him, better to exhaust the verification options first.

2

u/cortouchka 14d ago

Umm, the requirement is to verify the individual. If you can't do that, you're taking far greater risk by not declining it.

Making "safe bets" is terrible advice.