When a request is made, the authority may require appropriate identification, such as a driver's license, a photograph or similar information that confirms the record sought pertains to the data subject; unless, the record is accessible pursuant to the Freedom of Information Law.