Texas counties illegally posting Social Security numbers online, AG says
County, district clerks are pushing for legislation to make the practice legal
Computerworld - Like dozens of county governments around the country, Fort Bend County in Texas has for the past several years been posting public records containing Social Security numbers on its Web site. The records are accessible to anyone in the world with an Internet connection and are routinely sold to list brokers, real estate companies and mortgage firms.
On Feb. 23, Texas Attorney General Greg Abbott ruled that such disclosure of Social Security numbers in public documents is a violation of both state and federal privacy laws and is a criminal offense punishable by jail time and fines. The ruling followed an inquiry by Fort Bend's district attorney in 2005 about how its county clerk was expected to deal with Social Security numbers when they were present in public records.
Abbott's ruling has caused an uproar among county and district clerks in the state who are panicked by the prospect of being held criminally liable for actions they say were carried out as part of their normal business. Many have shut down or severely restricted public access to court records and are seeking help from state legislators who have hastily introduced a House bill seeking to absolve clerks of criminal and civil liabilities for disclosing confidential information.
The bill, sponsored by Texas Rep. Jim Keffer, also seeks to allow county and district clerks to continue disclosing such information in the future "notwithstanding" existing federal and state privacy laws.
"When we first saw the [attorney general's] opinion, we were just panicked. We were like, 'This couldn't be happening,'" said Janice Gray, district clerk at Coryell County and vice president of the County and District Clerks Association of Texas.
In response, Abbott said he would abate his opinion for 60 days while state legislators deliberate the issues raised by the ruling. "Immediately after the opinion was issued, legislative leaders contacted this office with serious concerns about logistical implications surrounding the rapid implementation of statutorily-mandated [Social Security number] confidentiality," he wrote in a Feb 28 note to Fort Bend county attorney Roy Cordes. "The real-world consequence [of the opinion] was a virtual halt to a tremendous amount of business and commerce in Texas," he said.
At issue is the controversial practice by many county governments of posting public records containing confidential personal information on the Internet without first redacting sensitive data.
The list of documents posted on county Web sites as part of the public record includes copies of property and tax records, motor vehicle information, and court files. In some cases, documents relating to military discharges, family court decisions, juvenile court records, probate law documents and death certificates are also available. Many of these documents include Social Security and driver's license numbers, bank account details and sometimes even protected health information.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts