The ID must be 10 characters or less and not contain any sensitive data (date of birth, initials, name etc).