Indeed, we didn't want to blame Conquest but we had (still have?) to figure out under which circumstances the wrong patient ID winds up in Conquest's database. The Dutch BSNs are typically of length 9 where our patient IDs have a length of 8 digits. Also, the BSN should satisfy this modulus-11 check ('11-proef'), see https://nl.wikipedia.org/wiki/Burgerservicenummer#11-proef (in Dutch). For some phantom data or test data people may come up with a patient ID that resembles an SSN, but this should be considered an exception.
Perhaps one could also argue that 'incomplete' queries (which could not be sent to the host) should not be stored in the database? Or maybe this can be made configurable behavior? What do you think?