Skip to content

Country pack

United Kingdom PII detection: NHS number, National Insurance number, IBAN

Updated 9 detectorsPack code gb

Short answer

Maskflare's United Kingdom pack has 9 detectors. 3 validate a check digit or letter, 4 test layout or an embedded date, 2 match on pattern alone.

What the United Kingdom pack covers

The United Kingdom pack holds 9 detectors: Driving licence number, IBAN, Licence plate, NHS number, NHS number, unformatted, National Insurance number, Passport number, Phone number and Postcode. 3 of them recompute a check digit or letter, 4 test layout or an embedded date only, 2 are pattern-only, and 3 wait for a keyword before they match.

Examples are synthetic and were run through Maskflare's validators. Click a detector name for its own page where one exists.
DetectorCategoryValidationValid example
Driving licence numberID document numberLayout rulesMORGA753116SM9IJ
IBANbank account number (IBAN)ChecksumGB82 WEST 1234 5698 7654 32
Licence platevehicle identifierLayout rulesAB12 CDE
NHS numbernational ID numberChecksum943 476 5919
NHS number, unformattednational ID numberChecksum9434765919
National Insurance numbersocial security numberLayout rulesAB 12 34 56 C
Passport numberID document numberPattern only123456789
Phone numberphone numberLayout rules+44 20 7946 0958
Postcodepostal codePattern onlySW1A 1AA

Every United Kingdom detector in detail

Driving licence number

An identity document number. Validation: the embedded birth date; the licence's own check characters are not published, so they are not checked. Valid example: MORGA753116SM9IJ; the same shape that fails is MORGA750116SM9IJ.

IBAN

A bank account identifier. Validation: the registered length for the country and the ISO 13616 modulus 97 check. Valid example: GB82 WEST 1234 5698 7654 32; the same shape that fails is GB82 WEST 1234 5698 7654 30.

Licence plate

A vehicle licence plate. Validation: 4 to 10 letters and digits with at least one of each, shaped by the country's plate formats. It needs one of 15 keywords within 48 characters before the value, such as licence plate, licence plate number, license plate, license plate number. Valid example: AB12 CDE.

NHS number

A national identity number. Validation: a modulus 11 check digit over nine digits. Valid example: 943 476 5919; the same shape that fails is 943 476 5910. Full guide: NHS number.

NHS number, unformatted

A national identity number. Validation: a modulus 11 check digit over nine digits. It needs one of 5 keywords within 48 characters before the value, such as chi number, health and care number, nhs, nhs no. Valid example: 9434765919; the same shape that fails is 9434765910.

National Insurance number

A social security or social insurance number. Validation: the letter rules for prefix and suffix; there is no check digit. Valid example: AB 12 34 56 C; the same shape that fails is GB 12 34 56 C. Full guide: UK National Insurance number.

Passport number

An identity document number. Validation: the pattern only, with no checksum or structural validator. It needs one of 9 keywords within 48 characters before the value, such as document number, id card, id no, id number. Valid example: 123456789.

Phone number

A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. A run of digits with no separator is judged by words nearby; the detector's own keywords include anrufen, appeler, appelez, appelle. Valid example: +44 20 7946 0958.

Postcode

A postal code, which identifies a place rather than a person on its own. Validation: the pattern only, with no checksum or structural validator. Valid example: SW1A 1AA.

Local-language context words for United Kingdom

These are the words in the catalogue that confirm a value as belonging to this country's detector. Shared English words such as ID number or tax id are left out here because many packs use them; a word below points at this pack even when other packs are on.

  • Licence plate: licence plate, licence plate number, license plate, license plate number, license tag, number plate, plate, plate no, plate number, reg no, reg plate, registration mark and 3 more
  • NHS number, unformatted: chi number, health and care number, nhs, nhs no, nhs number
  • Passport number: document number, id card, id no, id number, identity card, identity number, passport, passport no, passport number
  • Phone number: anrufen, appeler, appelez, appelle, bel, bellen, call, call me, call me at, call us at, cell, cell phone and 42 more

How Maskflare masks United Kingdom identifiers

Detections are replaced with a token such as mf_mask_d7e0 before the request goes to the AI provider, and with response restoration turned on the real value is put back in the answer. The other actions are redact, partial, hash, format-preserving encryption, generalize, alert and block.

  • Protect now, Finance - Protect now, Healthcare and Developer: mask (a reversible token) when United Kingdom is a primary country.
  • Monitor first: alert (counted, forwarded unchanged) when United Kingdom is a primary country.

Compliance profiles that include the United Kingdom pack: UK GDPR.

Limits worth knowing

  • A passing checksum shows that a value is well formed, not that it was issued to a real person. The examples on this page pass for that reason and are not real.
  • 2 of the 9 detectors here match on pattern alone (Passport number and Postcode), so they can match text that merely has the same shape.
  • Detectors read the text of the request. A value inside an image is found only after OCR, and a value split across lines is not one match.
  • Names, addresses and free-text details are handled by other packs. This page is limited to the United Kingdom identifiers.

Frequently asked questions

What does Maskflare detect for United Kingdom?

9 detectors: Driving licence number, IBAN, Licence plate, NHS number, NHS number, unformatted, National Insurance number, Passport number, Phone number and Postcode.

Are United Kingdom identifiers masked by default?

They are masked when United Kingdom is chosen as a primary country (the default Protect now template uses the action mask), or when the pack is turned on directly. A country pack is not on for organisations that did not choose the country.

Which United Kingdom identifiers have a checksum?

IBAN, NHS number and NHS number, unformatted.

Do the United Kingdom detectors need keywords?

3 of them do: Licence plate, NHS number, unformatted and Passport number.

Rules on this page describe what Maskflare's detectors and validators check. They are read from the detection catalogue and are not the specification of the body that issues the identifier. Examples are synthetic.

Related pages

See it on your own data

Try Maskflare free.
Bring your hardest prompts.

28-day free trial or 10,000 requests, whichever comes first. Point one app at the gateway or enroll a few laptops,
and watch what gets masked. Or talk to us first.