| Country |
Last reviewed |
National identification numbers/any other identifier of general application
|
|
|---|---|---|---|
| Austria | 05.06.2018 | No, the ADPA does not contain provisions as regards national identification numbers or any other identifier of general application. |
|
| Belgium | 08.10.2018 | n/a | |
| Czech Republic | 13.09.2018 | n/a |
|
| Denmark | 06.09.2018 | § 11 - specific rules on when public authorities and private companies may process national identification numbers. |
|
| Finland | 13.11.2018 | Under the Data Protection Act, a Personal Identity Code (PIC) may be processed with the explicit consent of the data subject or when it is important to unequivocally identify the data subject for the purposes provided by law or for carrying out an assignment prescribed by law. Processing is also allowed for carrying out rights and responsibilities of the data subject or the controller, or for the purposes of scientific or historical research or for statistical purposes. PIC may also be processed for certain additional purposes listed in the Data Protection Act such as lending, debt collection, and insurance. | |
| France | 22.10.18 | Article 22. The Social Security Number (“SSN”) benefits from specific protection. A decree from the Council of State (the French administrative supreme court), will determine the categories of controllers and the purposes of processing for which this number can be processed. 3 exemptions are listed (e.g. processing for the sole purpose of producing official statistics carried out by the official statistics department, processing for scientific or historical research purposes etc.) Article 55. In the event of an emergency and in order to manage a health alert, the SSN number may be used those entrusted with a public service task and named on a list established by the health and social security minister, taken after the opinion of the CNIL. Article 19 of the Decree provides that in that case, the SSN has to be encrypted. |
|
| Germany | 23.05.2018 | No | |
| Hungary | 01/04/2019 | Covered by separate legislation. | |
| Ireland | 12.09.2017 | Not mentioned in the General Scheme. |
|
| Italy | 25.10.2018 | n/a | |
| Netherlands | 17.09.2018 | In line with art. 6 GDPR, art. 44 UAVG provides that national identification numbers may only be processed if such processing is provided for by law, and only for those purposes as stipulated in the relevant legislation. | |
| Poland | 07.09.2018 | n/a | |
| Slovakia | 13.09.2018 | n/a | |
| Spain | 07.09.2018 | n/a | |
| Sweden | 06.09.2018 | The Act stipulates that information regarding personal identification numbers or classification numbers may only be processed without consent where clearly justified in light of (i) the purpose of the processing; (ii) the importance of positive identification; or (iii) some other worthy reason. The Government may issue regulations on other justifications for the processing of personal identification numbers of classification numbers. | |
| UK | 22.05.2018 | n/a |
