Elimination of Social Security Numbers as Primary Identifiers

Elimination of Social Security Numbers (SSNs) as Primary Identifiers

Federal and state law requires the collection of your Social Security number (SSN) for certain purposes (for example, IRS reporting forms). However, widespread use of an individual's SSN is a major privacy concern. With incidents of identity theft increasing, steps to secure an individual's SSN become more important.

A large number of colleges and universities use SSNs as primary identifiers for faculty, staff, and students, which exposes institutions to risk because of changing legal and security environments. Therefore, many institutions are planning for the migration away from SSN use as a primary identifier. Undertaking such a task raises issues, challenges, and opportunities for any institution.

EDUCAUSE has identified links concerning the elimination of SSNs as primary identifiers that may be useful to the higher education community. Many of these links have been contributed by EDUCAUSE members. If you have additional resources you would like to include on this page, send the information to: contribute@educause.edu

Institutional Plans for the Elimination of Social Security Numbers as Primary Identifiers

• Arizona State University Office of General Counsel Legal Information: Social Security Numbers
• Ball State University Social Security Number Guidelines
• Georgia Institute of Technology ID Number Information Page
• Penn State Social Security Number Project
• Rutgers University Student ID Number Conversion
• Temple University Identification Number (TUid) Project
• UNC Charlotte Regulations on the Use of Social Security Numbers
• University of Florida Identification Numbers FAQ
• University of Illinois Guidelines for Handling Social Security Numbers
• University of Illinois at Urbana-Champaign ILCSO (Illinois Library Computer Systems Organization) SSN Masking Program
• The University of Iowa: Protecting Social Security Numbers
• University of Minnesota Guideline--Use of Social Security Number (SSN)
• The University of North Carolina Guidelines on Use of the Social Security Account Number
• University of Texas-Austin Data Theft and Identity Protection Information
• Western Kentucky University SSN Protection Plan Summary

Institutional Policies for the Elimination of Social Security Numbers as Primary Identifiers

• Ball State University Social Security Number Policy
• Central Michigan University Social Security Number Privacy Policy
• Columbia University SSN Policy
• Drexel University Policy for Personal ID Number
• Kansas State University Policy on the Collection, Use and Protection of Social Security Numbers
• Michigan State University Social Security Number Privacy Policy
• Northwestern University Information Security Policy and Standards: Secure Handling of Social Security Numbers
• Stony Brook University Policy
• University at Buffalo (SUNY) Social Security Number Policy
• University of Arizona Policies and Procedures
• University of California-Los Angeles (UCLA) Policy
• University of Connecticut Policy on the Use of the Social Security Numbers
• University of Detroit Mercy Social Security Number Privacy Policy
• University of Illinois SSN Policy
• The University of Iowa SSN Policy
• University of Northern Iowa Policy on Use of Social Security Numbers
• University of Pittsburgh SSN Policy
• The University of Texas System Information Resources Use and Security Policy
• University of Washington Electronic Information Privacy Policy on Personally Identifiable Information

Federal Government Resources

• Electronic Communications Privacy Act (ECPA) of 1986
  Public Law 99-508, passed by the 99th Congress.
• Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g; 34 CFR Part 99
  FERPA is a federal law that protects the privacy of student education records.
• Federal Trade Commission (FTC) Identity Theft Resource Page
  This FTC site provides a list of steps to take for individuals who believe that their identity has been stolen.
• Gramm-Leach-Bliley Act (GLB Act) of 1999
  Public Law 106-102, passed by the 106th Congress.
• Health Insurance Portability and Accountability Act (HIPAA) of 1996
  Public Law 104-191, passed by the 104th Congress. The U.S. Department of Health & Human Services (HHS) site allows you to download the entire HIPAA law, a summary of the HIPAA law, clarification of HIPAA, and the Administrative Simplification Compliance Act (ASCA).
• The Privacy Act of 1974, 5 U.S.C. § 552a, (As Amended)
  The Privacy Act of 1974, as amended, states that "It shall be unlawful for any Federal, State or local government agency to deny to any individual any right, benefit, or privilege provided by law because of such individual's refusal to disclose his social security account number."
• Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (USA PATRIOT Act or USAPA)
  The USA PATRIOT Act made significant amendments to over 15 statutes, including FERPA and ECPA. The Electronic Privacy Information Center (EPIC) site provides an introduction and overview of the act, as well as a history and other resources.

State Government Resources

• Arizona State Law, A.R.S. § 15-1823 , Effective 6/30/02
• Arizona State Law, A.R.S. § 44-1376 , Effective 1/1/05
• California Department of Consumer Affairs: "Your SSN: Controlling the Key to Identity Theft"
• California State Law, SB 1386 (Chaptered) , Effective 7/1/03
• Maryland State Law, SB199, Amending Article § 10-624 , Effective 10/1/00
• Maryland State Law, SB199, Amending Article § 10-633 , Effective 10/1/00
• Maryland State Law, HB37, Article § 15-110 , Effective 7/1/01
• Rhode Island Public Law, Title 16 § 16-38-5.1 , Effective 7/18/01

Nongovernmental Organization Resources

• Center for Democracy and Technology Privacy Legislation Chart
  This chart shows current legislation affecting SSN privacy and identity theft.
• Computer Professionals for Social Responsibility FAQ on SSNs and Privacy
  This FAQ covers questions on Social Security Numbers and Privacy.
• EPIC (Electronic Privacy Information Center) SSN Resource Page
  This site offers information on hot topics, controversies, and court cases regarding privacy and SSNs.
• Identity Theft Resource Center (ITRC)
  ITRC is a national organization dedicated to helping people to prevent and recover from identity theft.
• Privacy Rights Clearinghouse Identity Theft Resources
  This site provides links to identity theft fact sheets, publications, and other informational sites.
• Privacy Rights Clearinghouse SSN Fact Sheet
  "Your Social Security Number: How Secure Is It?" is a fact sheet that provides an information resource for consumers nationwide.