By · Last updated 2026-04-29

返回博客GDPR 与合规

欧盟标识缺口:Steuer-ID、NIR、Personnummer

通用个人信息工具以美国标识为基础构建。德国Steuer-ID、法国NIR、瑞典Personnummer和挪威Fødselsnummer在这些工具中完全无法识别。

April 29, 20268 分钟阅读
EU identifier gapSteuer-ID detectionFrench NIR anonymizationSwedish PersonnummerNordic identifier GDPR

欧盟标识缺口:Steuer-ID、NIR、Personnummer

美国开发的个人信息工具专为美国数据设计,能够准确检测SSN、美国电话格式和美国驾驶证。欧盟标识的运作逻辑截然不同,遵循各自的结构规范和校验规则。针对美国格式的正则表达式无法匹配德国Steuer-ID,这一结构性差距并非细枝末节。

欧盟标识的独特性

德国Steuer-ID共11位:第一位不得为零,任何位值连续重复不超过三次,末位为校验位,由联邦中央税务局发布的公开算法验证。任何美国SSN规则都无法识别该格式。

法国NIR共15位,每位均有特定含义:第1位编码性别,第2至3位编码出生年份,第4至5位编码出生月份,第6至7位编码出生省份,第14至15位构成校验密钥。任何美国格式规则都无法识别NIR。

瑞典个人号码(Personnummer)采用YYMMDD-XXXX格式,挪威出生号码(Fødselsnummer)含11位数字,采用两阶段校验算法。这些格式并非美国格式的细微变体,而是由各国法律规定的独立体系,在美国没有对应格式。

合规缺口的实际影响

一个覆盖18个欧盟国家的泛欧洲人力资源平台,如果使用美国开发的个人信息工具,将遗漏绝大多数国家身份标识。每份包含Steuer-ID、NIR、Personnummer或Fødselsnummer的文件都会在标识暴露的状态下通过检查。

这一缺口是系统性的,而非配置问题,根本原因在于工具从一开始就不具备识别这些格式的能力。

欧盟完整覆盖的要求

GDPR合规的欧盟最低覆盖范围涵盖多个地区的标识。

德语区(DACH): 德国Steuer-ID和护照号;奥地利社会保险号(Sozialversicherungsnummer);瑞士带校验位的AHV号。

法国: NIR、健保卡号(Carte Vitale)、SIRET和SIREN。

英国: NHS号、国民保险号(格式AA-NN-NN-NN-A)和UTR(独特纳税人参考号)。

北欧: 瑞典个人号码(YYMMDD-XXXX)、挪威出生号码、芬兰个人身份码(Henkilötunnus,DDMMYY-XXXX格式)、丹麦中央人口登记号(CPR,DDMMYY-XXXX格式)。

南欧: 西班牙DNI/NIE、意大利财政代码(Codice Fiscale,16位字母数字)、波兰PESEL和捷克出生号码(Rodné číslo)。

从美国开发的工具迁移至覆盖欧盟标识的完整解决方案后,许多组织发现原有工具对欧盟标识的检测率仅为30%至40%,大部分欧洲国家身份标识均未被检测到。

有关GDPR技术义务的更多信息,请参阅GDPR合规资源

完整覆盖的实现方式

托管式欧盟实体库涵盖上述所有格式,并在国家格式发生变化时自动更新,无需团队编写自定义代码或提交变更请求。

对于标准库以外的标识,自定义实体构建器支持无代码方式添加规则。更新机制和审计日志详情请参阅安全与合规说明

参考资料

准备好保护您的数据了吗?

开始使用 285 种实体类型在 48 种语言中匿名化 PII。

About this page

We update this page when our platform or the law changes.

Read our founder note for how we work.

Each change shows up in the timestamp at the top.

Related reading

We follow these rules

  • GDPR (EU 2016/679).
  • ISO/IEC 27001:2022.
  • NIS2 (EU 2022/2555).
  • HIPAA safe harbor under 45 CFR § 164.514(b)(2).

Our promise

We do not sell your data.

We do not train models on your text.

We store your files in Germany.

You can delete your account at any time.

You own your work.

Where we run

Our servers live in Falkenstein, Germany.

We use Hetzner. They hold ISO 27001 certification.

All data stays in the EU.

Backups run every day.

Need help?

Email support@anonym.legal.

We reply within one business day.

How we test

We run a full check suite on every release.

Each surface gets its own sweep script and report.

Human reviewers spot-check the output each week.

We track recall and precision on a labelled set.

Bad runs block the deploy.

What we never do

  • We never sell your information to third parties.
  • We never train models on what you upload.
  • We never keep your work after you delete it.
  • We never share keys with any outside firm.
  • We never run ads inside the product.

Plans in plain words

We sell credits, not seats.

One credit covers one short job.

Long jobs use a few credits each.

You can top up at any time.

Unused credits roll over each month.

Read the plans page for current rates.

Who built this

A small team of engineers and lawyers built this.

We ship from Europe and work in the open.

Our founder note spells out why we started.

Where to start

How the parts fit

A browser add-on cleans text inside Chrome.

A Word plug-in handles drafts in Office.

A small desktop tool works on whole folders.

An agent protocol link feeds large models safely.

All four share one core engine and one rule set.

Words from our team

We started this work after a lunch about cookies.

One friend kept getting odd ads on her phone.

We asked why a court file leaked through a draft.

We sketched the first build on a napkin that week.

By month three we had a tiny demo for a friend.

She used it on her first case the next day.

Common questions we hear

Can the tool read scanned PDFs? Yes, with OCR.

Does it work on long files? Yes, in small chunks.

Can I roll my own rule set? Yes, save it as a preset.

Does it run offline? The desktop build runs offline.

Do you keep my files? No, the cloud build wipes after each run.

Will it learn from my work? No, we never train on inputs.

A short tour of the workflow

Upload a file or paste a snippet of prose.

Pick the entities you want gone from the draft.

Choose a method: replace, mask, hash, encrypt, or redact.

Press run and watch the side panel show each hit.

Skim the result and tweak any rule that misfired.

Save the cleaned file or send it to a teammate.