GDPR article 12[0] explicitly permits this: > Without prejudice to Article 11, where the controller has reasonable doubts concerning the identity of the natura

GDPR article 12[0] explicitly permits this: > Without prejudice to Article 11, where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in Articles 15 to 21, the controller may request the provision of additional information necessary to confirm the identity of the data subject. Article 17 deals with requesting the deletion of data and article 21 deals with objecting to the processing of your data. In fact, not verifying the identity of individuals could be legally dangerous because you are in effect allowing an individual to tamper with another individual's data. [0] https://gdpr-info.eu/art-12-gdpr/ https://gdpr-info.eu/art-12-gdpr/