A caller wants to access sensitive account information. Before you can help, you need to verify their identity. What steps would you take to confirm you are speaking with the actual account holder?

Situation

As a student assistant in the registrar's office, I once handled a request from a person claiming to be a former student who needed her transcript urgently. She didn't have her ID but insisted she was the account holder.

Task

I had to verify her identity without releasing private academic records to the wrong person, following the university's strict data privacy rules.

Action

I politely explained that I needed to protect her information and asked for her student number and date of birth, which matched our system. I then called the phone number on file to confirm she was the requestor. Once verified, I processed the transcript and explained the steps to her, so she understood why it took a few extra minutes.

Result

She appreciated the thoroughness and later emailed a thank-you note. My supervisor commended me for adhering to the verification process without causing friction.