A Customer Account Deletion Request Workflow
Published September 6, 2026.
Recognize a deletion request even when the customer does not use legal terminology. Confirm its scope, log the received time, provide the required notice, and route it to the privacy workflow. Ordinary account closure may not satisfy a data deletion request.
Protect the requester and the record
Use approved identity verification proportionate to the request. Do not collect extra identity material simply because the request concerns privacy. Preserve the case record and prevent marketing or service actions from obscuring the request.
Explain the next checkpoint and avoid guaranteeing that every record will be erased. Legal, security, transaction, or dispute records may follow defined retention rules. The privacy owner should determine and communicate any applicable exception.
Track acknowledgment time, verification delay, completion, exceptions, and reopened requests. Review the workflow with privacy and security owners whenever systems or retention rules change.
Related operating guidance includes privacy request routing and support record minimization. The Federal Trade Commission privacy and security resources provide authoritative business context.