A requirement of the California Consumer Privacy Act (CCPA), a "verifiable consumer request" is a request for data access, correction, or deletionâone in which the consumerâs identity has been verified using reasonable means.
The VCR stipulation applies whether the request is made directly by the consumer, on behalf of the consumer's underage child, or by an authorized agent on behalf of the consumer.
Essentially, the CCPA requires that businesses verify the identity of any indivudal for whom a data request has been submitted.
If a consumer's identity isnât verified before fulfilling a request for access, deletion, or correction, itâs possible a company could end up fulfilling a fraudulent request.
Personal data security is an important part of the CCPAâand the CCPAâs language about verifiable consumer requests is meant to reflect this fact.