Wettelijk persoonsnummer naar een derde
Een nummer dat de overheid toekent voor identificatie gaat naar een partij zonder wettelijke taak die het vraagt.
- Familie
- Gegevens
- Status
- actief
- Geldt voor
- mobile-app, web, api
Wat er gebeurt
A system reads a national identification number, either from a field the person fills in, from the machine-readable zone or chip of an identity document, or from a record it already holds, and sends it onward to a party that performs no task for which a state assigned that number. The number frequently travels as part of a larger blob, such as raw document data, rather than as a labelled field.
Waarom het ertoe doet
This number is the key that joins registers which are meant to stay apart. Unlike a cookie it cannot be reset, it is the same number for a lifetime, and once a private party holds it, every later dataset can be matched on it. Article 87 leaves the national identification number to each Member State, and several restrict private use precisely because of that property. Which restriction applies, and whether it applies at all, differs per country: establish the national rule before citing this entry outside the jurisdiction whose provision is linked here.
Veelvoorkomende oorzaken
- a document or chip read in full and uploaded as a whole, with the number inside it
- an onboarding flow that asks for the number because a form template contained the field
- an identifier reused as an internal customer key after it entered the system for another purpose
Dit is het níet
A party with a statutory task that requires the number, such as a tax or healthcare body, is not this entry. Nor is a check that returns only a yes or no derived from the number. The distinguishing feature is that the number itself reaches a party for which no statute provides. Two public bodies that may both hold the number and join their records on it is Registers joined on a person number: there the fault is the combination, here it is that the number reaches a party for which no statute provides.
Hoe je het vaststelt
Indicator
A request body or upload containing a value that satisfies the structural check for the national identification number in question, sent to a host operated by a party other than the one with the statutory task. Where the number is embedded in raw document data, the finding is the presence of that field within the payload.
Methode
network-with-identifier
Kwaliteit van de detectie
88 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The receiving party performs the statutory task for which the number exists.met de hand te toetsende bevinding vervalt
- The value is not the statutory number but a structurally similar one, such as a customer or document number.met de hand te toetsende bevinding vervaltApply the checksum or structural rule for that country before claiming anything.
- The number is transmitted only to a processor acting for the party with the statutory task, under its instructions.niet uit de meting af te leidende bevinding krijgt een ander patroon
- The person entered the number themselves in a free-text field with no prompt for it.met de hand te toetsende bevinding wordt zwakkerDifferent finding: the system does not ask for it but does forward it.
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Bepalingen
Veelgehoorde tegenwerpingen
The person consented to identity verification.
Consent to being identified is not consent to a specific number reaching a specific party, and where national law restricts use of the number, consent does not lift that restriction.
We do not use the number, it merely passes through.
Receiving is processing. If it is not used, it did not need to be sent, which is the finding rather than a defence.
It was inside the document data, we did not ask for it.
Reading a document in full is a choice about what to read. The number is in the payload either way, and the party that built the read decided its scope.
Geldt wanneer
to-processing
Aangetroffen in
De onderzoeken waarin dit patroon gemeten is.