Ohio recalls voter registration CDs; Social Security numbers included
The data was to be used for get-out-the-vote efforts in upcoming primary elections
Computerworld - The Social Security numbers of potentially millions of registered voters in Ohio were included on CD-ROMs distributed to some 20 political campaign operations in recent months as campaigns geared up for spring primary election races.
The problem was discovered Tuesday when one of the political campaigns contacted the Ohio secretary of states office to say that the personal data was on the discs, even though it wasnt requested, said James Lee, a spokesman for Secretary of State J. Kenneth Blackwell.
All of the political organizations that received the CDs were immediately contacted and have agreed to return the discs for replacements that wont include the Social Security numbers, Lee said. The records of about 7.7 million registered voters in Ohio are listed on the CDs, but Lee said he didn't know how many voter records included Social Security numbers. The records show which elections a voter participated in since 2002, along with their names and addresses.
For many years, Ohio voter registration forms included a space where the voter could choose to include a Social Security number, but it was optional, he said. Earlier this year, the forms were changed to include only the last four digits of the number to better protect a voters private information.
The Social Security numbers were included when the CDs were created, Lee said. When we did one of our data merges, some data included some Social Security numbers accidentally, he said. Its just a data issue that can be fixed now by leaving out that column.
Once the affected CDs are returned sometime in the next two weeks, updated discs will be issued. Asked if any printouts from the CDs will also be returned or destroyed, Lee said he doesnt believe any printouts were made. We consider the issue resolved, he said.
Political campaigns use the voter registration lists to conduct phone canvassing, create mailing lists for brochures about candidates and to put together door-to-door efforts.
This is the second time since March that the issue of privacy has arisen in Ohio government agencies. Last month, an Ohio man sued the state for posting his and other residents Social Security numbers for years on state Web sites where publicly searchable records are stored, showing retail purchases made using credit cards or bank loans (see Ohio secretary of state sued over ID info posted online).
Lee Tien, a senior staff attorney for the Electronic Frontier Foundation, a San Francisco-based, nonprofit digital rights and privacy group, said the Ohio incident is particularly egregious because there has been no public notification of the data disclosure by state officials.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Is Your Big Data Solution Production-Ready? Read "Is Your Big Data Solution Production-Ready?" now, and discover best practices and actionable steps to implementing a production-ready big data solution.
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Simplify and Consolidate Data Protection for Better Business Results Learn about IBM® Tivoli® Storage Manager Operations Center, which provides advanced visualization, built-in analytics and integrated workflow automation features that leapfrog traditional backup...
- Data Protection and Disaster Recovery with iSCSI and VMware Get this on demand webcast now
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have. All Privacy White Papers | Webcasts