Data protection laws require organizations to verify the Identity of the Individual submitting a request to prevent fraud. In addition, most privacy laws in the USA, Europe, and around the world require the verification method to be proportional to the nature of the data involved. For example, suppose you request your transaction history from a financial institution. In that case, they are justified in asking you to provide additional information, such as a photo ID and proof of address.
