Country pack
Luxembourg PII detection: matricule, IBAN
Short answer
Maskflare's Luxembourg pack has 4 detectors. 2 validate a check digit or letter, 1 tests layout or an embedded date, 1 matches on pattern alone.
What the Luxembourg pack covers
The Luxembourg pack holds 4 detectors: IBAN, National identification number (matricule), Phone number and Postal code. 2 of them recompute a check digit or letter, 1 tests layout or an embedded date only, 1 is pattern-only, and 1 waits for a keyword before it matches.
| Detector | Category | Validation | Valid example |
|---|---|---|---|
| IBAN | bank account number (IBAN) | Checksum | LU28 0019 4006 4475 0000 |
| National identification number (matricule) | national ID number | Checksum | 1983120101294 |
| Phone number | phone number | Layout rules | +352 621 123 456 |
| Postal code | postal code | Pattern only | L-1111 |
Every Luxembourg detector in detail
IBAN
A bank account identifier. Validation: the registered length for the country and the ISO 13616 modulus 97 check. Valid example: LU28 0019 4006 4475 0000; the same shape that fails is LU28 0019 4006 4475 0001.
National identification number (matricule)
A national identity number. Validation: an embedded birth date, a Luhn check and a Verhoeff check. Valid example: 1983120101294; the same shape that fails is 1983120101290.
Phone number
A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. Valid example: +352 621 123 456.
Postal code
A postal code, which identifies a place rather than a person on its own. Validation: the pattern only, with no checksum or structural validator. It needs one of 9 keywords within 48 characters before the value, such as code postal, plz, post code, postal code. Valid example: L-1111.
Local-language context words for Luxembourg
These are the words in the catalogue that confirm a value as belonging to this country's detector. Shared English words such as ID number or tax id are left out here because many packs use them; a word below points at this pack even when other packs are on.
- Postal code:
code postal,plz,postleitzahl
How Maskflare masks Luxembourg identifiers
Detections are replaced with a token such as mf_mask_d7e0 before the request goes to the AI provider, and with response restoration turned on the real value is put back in the answer. The other actions are redact, partial, hash, format-preserving encryption, generalize, alert and block.
- Protect now, Finance - Protect now, Healthcare and Developer: mask (a reversible token) when Luxembourg is a primary country.
- Monitor first: alert (counted, forwarded unchanged) when Luxembourg is a primary country.
Compliance profiles that include the Luxembourg pack: GDPR - EU/EEA.
Limits worth knowing
- A passing checksum shows that a value is well formed, not that it was issued to a real person. The examples on this page pass for that reason and are not real.
- 1 of the 4 detectors here matches on pattern alone (Postal code), so it can match text that merely has the same shape.
- Detectors read the text of the request. A value inside an image is found only after OCR, and a value split across lines is not one match.
- Names, addresses and free-text details are handled by other packs. This page is limited to the Luxembourg identifiers.
Frequently asked questions
What does Maskflare detect for Luxembourg?
4 detectors: IBAN, National identification number (matricule), Phone number and Postal code.
Are Luxembourg identifiers masked by default?
They are masked when Luxembourg is chosen as a primary country (the default Protect now template uses the action mask), or when the pack is turned on directly. A country pack is not on for organisations that did not choose the country.
Which Luxembourg identifiers have a checksum?
IBAN and National identification number (matricule).
Do the Luxembourg detectors need keywords?
1 of them do: Postal code.
Rules on this page describe what Maskflare's detectors and validators check. They are read from the detection catalogue and are not the specification of the body that issues the identifier. Examples are synthetic.