Article 53. Processing of a national identification number

(1) The processing of a national identification number, including by collecting or disclosing documents containing it, may be carried out in the cases provided for in art. 6(1).

(2) The processing of a national identification number, including by collecting or disclosing documents containing it, for the purpose provided for in art. 6(1)(f), namely for the purposes of the legitimate interests pursued by the controller or by a third party, shall be carried out subject to the controller putting in place the following safeguards:

1. a) the implementation of appropriate technical and organisational measures to ensure, in particular, compliance with the principle of data minimisation, as well as to ensure the security and confidentiality of the processing of personal data in accordance with art. 32;
2. b) the setting of storage periods according to the nature of the data and the purpose of the processing, as well as of specific time limits within which the personal data shall be erased or reviewed with a view to erasure;
3. c) regular training on their obligations for persons who, under the direct authority of the controller or the processor, process personal data.