(I'm probably from another country, since my such number doesn't have eight digits.) There are three ways to authenticate myself, none of which is knowing that

(I'm probably from another country, since my such number doesn't have eight digits.) There are three ways to authenticate myself, none of which is knowing that magic number. Many institutions choose to do it simpler and more convenient, which is then their problem if anything untoward happens. (BTW: None of the authentication mechanisms are available to minors, which fits in well with another aspect of the law: If an adult or a legal person enters into an agreement with a minor and something goes wrong, that's not the minor's problem.)