I was ordering my mom's death certificate.
For context: in Finland, you can get a death certificate with no one questioning why if you are e.g. the descendant's child. If there is no family connection, you have to provide proof of, for example, research purposes.
The certificate is requested online through state's official identification system, the same one you can use to sign documents, take care of your taxes etc. So it is considered 100% sure the applicant is me.
The ID system is also linked with information about my relatives, so technically, it contains proof that I really am the descendant's child.
For the deceased's information, I provided my mother's social security number, date of birth and all. And checked a box with "I am the deceased person's child or grandchild".
All good. Thought about getting the certificate right away.
NOPE.
The applications are MANUALLY REVIEWED.
By a REAL STATE AUTHORITY.
Who writes a DECISION ON GRANTING THE DOCUMENT FOR ME.
Ok, it is not a formal decision (although, as a lawyer I raised my eyebrows a tad too high when seeing them call it a "decision" which in this context refers to a _formal decision_ and not any informal crap, long story short but I could get the state in a small but inconvenient trouble lol) but anyway IT IS DONE BY A REAL PERSON, IN REAL WORKING HOURS.
It would be SO EASY to make it automatic. So easy.
And I'm not buying any "personal information, IT security, GDPR blahblah" crap here, namely because the state has already automatized some processes of granting social support for the living citizens, which can be easily argued to carry a tad more IT security and GDPR interest anyway than a deceased person's cause of death.