diff --git a/source/guides/data-protection.rst b/source/guides/data-protection.rst
index ff9613b12f1ce48de9eb6948090637130b6fa86a..d911a605d56cc892fa4d812982cbc2508d88a2ba 100644
--- a/source/guides/data-protection.rst
+++ b/source/guides/data-protection.rst
@@ -48,3 +48,8 @@ a single subject.
 
 4.  Once the subject has received the export, click **Mark as answered** to
     record how long it took to process this request.
+
+.. warning::
+
+    These steps only outline the data export from a software view. Your institute should provide organizational steps 
+    to verify actual identity of the requester. Furthermore, secure transfer of exported data needs to be set up.  
\ No newline at end of file
diff --git a/source/guides/subject-management.rst b/source/guides/subject-management.rst
index 58a37712b0877b91cc8d3a318eb2b31e160bfc4e..2375546242ad8c9472acb4c80e96a1c044ab9106 100644
--- a/source/guides/subject-management.rst
+++ b/source/guides/subject-management.rst
@@ -272,6 +272,9 @@ sufficient legal basis to keep the data.
     This is only available for users with permissions that are granted to staff
     members who are data protection coordinators or the like.
 
+    If deletion was requested by a subject you should follow your institutes 
+    rules on verifying identity of requester.
+
 In order to delete the externally and internally stored data of a subject,
 please proceed as follows: