I helped implement the GDPR data request flow at a company with segment data.

Some of the big challenges of the system was a) convincing requesters that we couldn’t look them up by name and b) teaching them how to find the things we could look them up by (cookie Id or apple/android advertiser Id).

It was one of the ugly ironies of the system that we had to build a name collection capability when we didn’t want it.