9-digit EIN, optionally formatted as XX-XXXXXXX. SSN-shaped values are a HIPAA and IRS red flag — do not use.
The practice owner's SSN is keyed by mistake. A state-tax-ID is used where the payer requires EIN. A group's NPI is keyed here instead of the EIN.