Start of Sect 3.5: "This means that any merchant who uses BankID
must identify his users by their personal identity numbers." This is
not correct, a different unique number is used. The remainder of the
paragraph is correct.