Can I skip verifying consumer requests in New York? What are the requirements?

Verifying Consumer Requests in New York

In New York, consumer requests for access to their records must be verified before being granted access to personal information [4 NYCRR 209.3(c)(1)]. The identity of a data subject requesting access to their record may be verified by providing reasonable verification of their identity [4 NYCRR 209.3(c)(2)]. In the case of an individual who seeks in-person access to or amendment of record(s), an employee identification card, a driver’s license, or other similar document shall constitute reasonable verification of identity [4 NYCRR 209.3(c)(2)]. When access to or amendment of record(s) is requested by mail, the requirement for verification of identity shall be met if the individual provides minimum identifying data, such as date of birth and some item of information in the record that only the concerned individual would likely know [4 NYCRR 209.3(c)(3)].

Therefore, it is not possible to skip verifying consumer requests in New York. The identity of the data subject must be verified before granting access to their records.

Jurisdiction

New York

• Privacy