Member States may further determine the specific conditions for the processing of a national identification number or any other identifier of general application. In that case the national identification number or any other identifier of general application shall be used only under appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation.
Learn the basics of GDPR in the course 1-Hour GDPR Introduction: The Basic Facts for Employees.