Agent WranglersBank and government ID
When you must know who a person is, accept the ID they already hold, such as BankID or the EU wallet. Keep national ID numbers out of your data.
- Required 1
- Optional 2
Required
Keep national ID numbers out of your data
ACC-74Store a national ID number, such as a Swedish personal number, only when a law or a written need requires it. Keep it encrypted in one table, and out of logs, web addresses and analytics.
Optional
Accept the EU Digital Identity Wallet where strong ID is needed
ACC-72If your service must identify people strongly, plan to accept the EU Digital Identity Wallet. Record in the decision log whether Article 5f of the eIDAS rules makes it a duty for you.
Offer BankID sign-in to Nordic users
ACC-73If you serve Swedish or Norwegian users who need a verified identity, offer BankID through an identity broker or a bank agreement. Start each Swedish sign-in with a QR code or an app switch, never a typed ID number.
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/accounts/bank-and-government-id">Agent Wranglers accounts and identity playbook</a>. In code you write, add a comment next to it with the same link.