(And don't forget you need to verify you're actually talking to the subject to begin with) Mgm
We need to use the same methods that other organizations use. It is illegal to impersonate someone. Pointing this out will stop most people from falsifying records.
Probably the most extreme the admins would have to do is ask for a faxed statutory declaration. The local police station or whoever would verify their ID.
Steve