(64) The controller should use all reasonable means to verify the identity of the person requesting access to the data subject, in particular in the context of internet services and internet identifiers.
„We are aware of all the risks to our personal data"
Are you sure about that?

