Skip the navigation

California law restricts disclosure of Social Security numbers

By Patrick Thibodeau
July 1, 2002 12:00 PM ET

Computerworld - WASHINGTON -- A California law took effect today that limits disclosure of Social Security numbers, forcing businesses to remove this ubiquitous and essential identifier from forms sent to customers and used in correspondence and on identification cards.
The law, which affects any company doing businesses in California, is at the vanguard of legislation to stop identity theft and could affect business practices nationally as well as the development of laws in other states and federal laws.
"We don't have California-only systems," said Kirk Hearth, chief privacy officer at Columbus, Ohio-based Nationwide Financial Services Inc. Hearth said it was much easier to apply the California rule nationally then to segment customer data by state.
The intent of the law is to make it harder for thieves to get a hold of this crucial identifier. The Federal Trade Commission said in 1999 that it received about 450 complaints per week from possible victims of identity theft. By the end of last year, the number had skyrocketed to some 3,000 calls each week. The Social Security Administration last year reported some 65,200 allegations of Social Security number misuse, up from 11,000 in 1998.
Although companies had relatively little time to comply with the law, which was adopted last October, Hearth said the added protections were "something that a lot of us had wanted to do for some time."
The law prohibits including an individual's Social Security number on any correspondence to that person unless the law requires it. It also requires the use of encryption if the number is transmitted over the Internet.
Nationwide spent about $130,000 to comply with the law. Although the company removed Social Security numbers from some customer correspondence, Nationwide also used other techniques to hide the numbers. One involved using an algorithm that took a key to decrypt, while another hid the first five digits of the Social Security number. Another technique used by other companies involves including the Social Security number in a bar code, an industry group official said.
Congress has nearly a dozen bills pending that would restrict the use of Social Security numbers. Sens. Dianne Feinstein (D-Calif.) and Judd Gregg (R-N.H.) are sponsoring one bill that would prohibit anyone from selling or displaying a Social Security number without the cardholder's consent. That bill is seen as the leading measure, although Congress isn't expected to act on any of these bills this year, privacy and trade group observers said.
The risk for businesses is that a law could be adopted either in Congress or inanother large state that sets different requirements from those in the California law, said John C. Scott, director of retirement policy for the American Benefits Council in Washington, an industry group that represents large financial services firms as well as companies such as Caterpillar Inc. and Campbell Soup Co.
The question for businesses and industry groups "is whether they want to have a federal standard or whether they want to have this done state by state," said Scott. "Obviously, California will be a model for many other states," he said.

Read more about Privacy in Computerworld's Privacy Topic Center.



Additional Resources
Forrester Consulting - Optimizing Users and Applications in a Mobile World
WHITE PAPER
Solving application issues over the WAN requires careful consideration. Based on their independent research, Forrester Consulting offers recommendations on how to tackle application performance issues, insufficient bandwidth and the inability to quickly restore users in a disaster.

Read now.

Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Privacy White Papers
Overcome Top 7 Admin Challenges of Active Directory
As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
Insiders Can Ruin Your Company. Take Action.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
Top Solutions and Tools to Prevent Devastating Malware
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
Streamline Compliance and Increase ROI
Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
X-Ray of the PCI Process-4 Proactive Steps
This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
All Privacy White Papers
Privacy Webcasts
A Road Map for Best Practice Social Media Acceptable Use Policy
Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
Data Protection and Disaster Recovery with iSCSI and VMware
Get this on demand webcast now
Optimizing Networks for the Cloud
Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
All Privacy Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs