ID Verification Implementation Guide for OneTrust & Experian

OneTrust supports an integration with Experian Precise ID plus Multifactor Authentication (MFA) for Privacy Rights Automation enterprise customers to verify the identity of the consumer before honoring their request. Using an implemented pre-approved decision workflow incorporated with Experian products, customers can connect to their Experian instance via OneTrust to initiate identity verification.

Consumers will submit their Personally Identifiable Information (PII) to a OneTrust web form that will be passed to Experian for verification. The new data subject request will trigger a call to Experian, sending a One-Time Password (OTP) SMS to the consumer, which will return an ID that can be stored with the request for later verification of Experian's OTP. After submitting the DSAR form, customers will be directed to a customizable OTP entry page to validate the OTP sent by Experian.

Customers who elect for the Experian CCPA integration can choose to implement knowledge-based challenge questions as an additional verification method.

Customers will be responsible for testing the configuration and consumer flows as Experian offers unique URIs for staging versus production environments. Of the PII returned from Experian, OneTrust will only store the final decision.