Okta’s Verification Process for Individual Rights Requests

We have reasonable methods in place for verifying rights requests for individuals who choose to exercise these rights, such as a request to know or delete their personal data. The process described here applies to our role as a business, not as a service provider to our customers. We are unable to respond to requests in our role as a service provider to our customers. We encourage you to submit any such requests directly to the business with whom you interact or have a direct relationship with to use Okta services.

For requests we receive as a business, we will match the identifying information provided by you to the personal information we already maintain to verify your identity. At minimum, we will ask for your name, email address, country, and state or province. When verifying requests, our verification standards vary depending on the sensitivity of the request. If we cannot verify your identity, we may deny your request. In some cases, we may require additional information, in which case we will contact you.

If you are an authorized agent making a request to know or delete, we also require you to email [email protected] to: (i) provide us with a copy of your written authorization to confirm your right to make the request and direct the requesting individual to verify their identity directly with us or, if applicable, (ii) provide a copy of your power of attorney to exercise these rights on behalf of another.

Click here for the request form.