A requirement of the California Consumer Privacy Act (CCPA), a "verifiable consumer request" is a request for data access, correction, or deletion—one in which the consumer’s identity has been verified using reasonable means.
The VCR stipulation applies whether the request is made directly by the consumer, on behalf of the consumer's underage child, or by an authorized agent on behalf of the consumer.
Essentially, the CCPA requires that businesses verify the identity of any indivudal for whom a data request has been submitted.
If a consumer's identity isn’t verified before fulfilling a request for access, deletion, or correction, it’s possible a company could end up fulfilling a fraudulent request.
Personal data security is an important part of the CCPA—and the CCPA’s language about verifiable consumer requests is meant to reflect this fact.