Member States may further determine the specific conditions for the processing of a national identification number or any other identifier of general application. In that case the national identification number or any other identifier of general application shall be used only under appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation.
Article 87
Processing of the national identification number
Common Questions
Frequently Asked Questions
What does Article 87 let EU countries do?
It lets each Member State set its own specific conditions for processing a national identification number or any other identifier of general application. So the GDPR does not harmonise this area completely: whether and how such numbers may be used can differ from country to country, on top of the Regulation's general rules.
Are there limits on how a national identification number can be used?
Yes. Where a country makes use of this option, the national identification number or other general identifier may be used only under appropriate safeguards for the rights and freedoms of the data subject, as required by the Regulation itself. In other words, national conditions cannot strip away the GDPR's protection; they add rules on top of it.