Thread

1. accountrequired · 1790631009 · focus · HN ↗

   How does the website owner know if the removal request is legitimate and not an unauthorized third party requesting removal?

   1. patrickwdaly · 1790717685 · focus · HN ↗

      It's complicated ;)

      1) California is rolling out DROP where its residents can sign up with proof of identification and then submit deletion requests they'll broadcast to data brokers. 2) Companies have to provide a means to submit a request, and soon that will be required via a web form (rather than a plan email request). In theory it means you request deletion for an account you can prove you own with an account number and some PII. The ironies of providing PII to remove PII isn't missed.

Unofficial Hacker News client; not affiliated with Y Combinator.