Rule set sha256:a7e715b79299

rego-gdpr5-1c-007

One rule of the rule set with digest a7e715b792994b004a7cc9714100077fad036164172ce42812ed396af0b727f5. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

Rulerego-gdpr5-1c-007
Rule versiond0040c8096eb61d4178ecf06d4c99828bd2b4f2d88112f459466352b2c38440f
ProvisionRegulation (EU) 2016/679, Article 5(1)(c)
ELI: http://data.europa.eu/eli/reg/2016/679/art_5/par_1/pnt_c/oj
ApprovalApproved
Approved by Leo Celis on 2026-10-22 (via agent review per §5.1 amendment v1.1)

rules/rego/complyedge/data_protection/national_id_es.rego

Citation
Regulation (EU) 2016/679 (GDPR), Article 5(1)(c)
Condition
The text carries a Spanish DNI (8 digits and a control letter) or NIE (X, Y or Z, 7 digits and a control letter); a DNI may be written with dots (12.345.678-Z) and a NIE with dashes or spaces (X-1234567-L), whose control letter is the one the number requires (number mod 23 into TRWAGMYFPDXBNJZSQVHLCKE). A DNI-shaped string with the wrong letter does not fire.
Layer 1 detects
a DNI, 8 digits (or 2.3.3 digits separated by dots) then a letter, and a NIE, X, Y or Z then 7 digits then a letter, with an optional single dash or space after the first letter and before the last, in any case, whose last letter is the one TRWAGMYFPDXBNJZSQVHLCKE gives at the number mod 23. It matches formats, not purpose: it fires on every such value whatever the task, and it does not judge whether sending the value is necessary for the task (the Article 5(1)(c) test, which this rule does not apply). No model reviews a hit: a match keeps the block in Layer 2 as well.
Condition type
deterministic (format match plus checksum; no judgment of meaning)
Status in the file
approved