§ 1403.4 Times, places, and requirements for identification of individuals making requests.
Primary source
Verbatim text below is from the Electronic Code of Federal Regulations (eCFR), a public-domain U.S. government work. Always verify the current version with the eCFR before relying on it for any legal matter.
Full Text
The individual making written requests for information or records ordinarily will not be required to verify that person's identity. The signature upon such requests shall be deemed to be a certification by the requester that he or she is the individual to whom the record pertains, or the parent of a minor, or the duly appointed legal guardian of the individual to whom the record pertains. The Privacy Act Officer, however, may require such additional verification of identity in any instance in which the Privacy Act Officer deems it advisable.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.