Skip to content Social Security Online |
Legislation of the 110th Congress |
www.socialsecurity.gov |
Legislation and Congressional Affairs Home Page | Site Map | This is an archival or historical document and may not reflect current policies or procedures | |
Social Security Legislative Bulletin |
Number: 110-6 House Committee on Ways and Means reports favorably the “Social Security Number Privacy and Identity Theft Prevention Act of 2007” On July 18, 2007, the House Committee on Ways and Means voted 41-0 to approve H.R. 3046, a bill to amend the Social Security Act to prevent Federal, State and local governments from displaying Social Security numbers (SSNs) to the public, showing the numbers on identification tags and cards and, in most cases, selling the numbers. For purposes of this bill, the definition of an SSN includes any derivative of the SSN. Federal, State, and local governments would be prohibited from: Selling SSNs. Limited exceptions to sales would be allowed, as follows:
Displaying SSNs to the general public, including the transmission of SSNs over the Internet without encryption or other security measures. (Further exceptions to the sale or display to the general public may be made for other purposes by regulation.) Displaying SSNs on checks issued for payment and accompanying documents. This requirement would be effective one year after enactment. Displaying SSNs on identification cards and tags, or including on such cards or tags a magnetic strip, bar code or other means of communication which conveys the SSN , issued to employees, patients and students at public institutions, or the families of such individuals. This requirement would be effective one year after enactment. Displaying SSNs on Medicare cards, or including on such cards a magnetic strip, bar code or other means of communication which conveys the SSN. This provision would be effective two and one half years after enactment. Employing prisoners in jobs that provide them with access to SSNs. This provision would be effective with employment of prisoners commencing on or after the date of enactment. However, for prisoners so employed on the date of enactment, this provision would be effective 90 days after enactment. Unless noted otherwise, initial final regulations prescribed by the Commissioner would be issued not later than the last day of the 18 th month following enactment. Provisions would take effect one year after issuance of such regulations . In the case of displays to the general public, the provisions would apply only to displays originally occurring after such 1-year period. The government and private sectors would be required to truncate SSNs: In accordance with regulations prescribed by the Commissioner not later than the last day of the 18 th month following enactment. This provision would take effect one year after issuance of such regulations. A temporary exception would permit:
The private sector would be prohibited from: Selling or purchasing SSNs. Limited exceptions to sales and purchases would be allowed, as follows:
Displaying SSNs to the general public, including the transmission of SSNs over the Internet without encryption or other security measures. (Further exceptions to the sale, purchase or display to the general public may be made for other purposes by regulation.) Obtaining another person's SSN to locate or identify the individual with the intent to harass, harm, physically injure or use the individual's identity for an illegal purpose. Displaying SSNs on checks. Making unnecessary disclosures of another individual's SSN to government agencies. Displaying the SSN on cards or tags, or including on such cards or tags a magnetic strip, bar code or other means of communication which conveys the SSN, issued to access goods, services, or benefits. Displaying the SSN on cards or tags, or including on such cards or tags a magnetic strip, bar code or other means of communication which conveys the SSN, issued to employees, their family members, or other individuals. Initial final regulations prescribed by the Commissioner would be issued not later than the last day of the 18 th month following enactment. Provisions would take effect one year after issuance of such regulations. In the case of displays to the general public, the provisions would apply only to displays originally occurring after such 1-year period. Additional Provisions: To ensure that the sale or purchase of SSNs for purposes of public or private medical research is permitted only in compliance with the Health and Insurance Portability and Accountability Act (HIPAA) of 1996, the Commissioner shall maintain ongoing consultation with the Office of Civil Rights of the Department of Health and Human Services. Prohibitions on the sale or display to the general public of SSNs by the government or private sectors, or on the purchase of SSNs by the private sector, would not apply with respect to SSNs of deceased individuals. Public and private sectors would be required to safeguard, to the satisfaction of the Commissioner, SSNs they have in their possession from unauthorized access by employees or others. State law governing use of SSNs would not be preempted where State law is stronger. Sale , purchase, or display of SSNs in the public or private sector would be permitted by regulation in other circumstances, when appropriate. In making this determination, regulators would consider whether the authorization would serve a compelling public interest or would pose an unreasonable risk of identity theft or financial harm, and would consider the costs and burdens to the public, businesses, and government. If sale, purchase, or display were to be authorized, the regulation would provide for restrictions to prevent identity theft, fraud, deception, crime, and risk of bodily, emotional, or financial harm. The Commissioner would be required to enter into an arrangement with the National Research Council, which would be required to conduct a study to evaluate the feasibility of banning the use of the SSN as an authenticator. The Council would be required to report its finding and recommendations to the Commissioner and to Congress no later than one year after the date initial final regulations prohibiting the Government from selling or displaying SSNs are issued by the Commissioner (as noted above, such regulations must be issued not later than the last day of the 18 th month following enactment). Enforcement New criminal penalties (up to 5 years imprisonment and fine up to $250,000 under Title 18 USC) and civil penalties (up to $5,000 per incident) would be created for violations of the law relating to:
Effective for violations occurring after enactment, with certain exceptions. New criminal penalties (as much as 20 years in prison and fine up to $250,000 under Title 18 USC) and civil penalties (up to $5,000 per incident) would be created for Social Security Administration employees who fraudulently sell or transfer SSNs or Social Security cards. Effective for violations occurring after enactment. Prison sentences would be enhanced for SSN misuse associated with repeat offenders (up to 10 years), drug trafficking or crimes of violence against persons (up to 20 years), or terrorism (up to 25 years). Effective for violations occurring after enactment. The bill permits enforcement by the Social Security Administration (which would have civil monetary penalty authority); the Department of Justice (which enforces criminal violations of Federal law); and State attorneys general (who would be granted civil enforcement authority over private-sector users and State and local government). In addition, individual victims affected by violations of this bill by Federal agencies would be provided with limited legal recourse to stop an agency's violation and recover any actual damages they may have suffered. Top of Page |
Privacy Policy | Website Policies & Other Important Information | Site Map |