If you can’t verify a consumer making a right to know request, don’t release any information and direct them to your privacy policy instead. If you can’t verify a consumer making a delete request, respond by offering to treat it as an opt-out of sale request instead of a delete request. While you don’t need to verify an opt-out of sale request, if you use verification procedures and you reasonably believe the request is fraudulent, you can deny a request on that basis if you inform the consumer about your reasoning.