The ID must be 15 characters or less and not contain any sensitive data (date of birth, initials, name etc).