Glossary
Data Deletion Request
A data deletion request asks a system to permanently remove a specific principal's data, an action whose irreversibility sets it apart from an ordinary read or even most ordinary write requests, where a mistake can usually be corrected afterward. Once data is genuinely deleted, a wrongly authorized deletion typically can't be undone the way a wrongly authorized read or edit often can.
This asymmetry justifies verifying the requester's identity and authority more rigorously for a deletion request than for routine access — the cost of a false approval is categorically higher than the cost of the same false approval on a reversible action, which is exactly the kind of case where extra friction at the point of authorization is worth its cost.