Report Summary - A-14-02-12037

Management Advisory Report: Social Security Administration's Data Exchange with Other Agencies (Limited Distribution) (A-14-02-12037)

Our objective was to evaluate the computer data matching agreement process, review compliance with laws governing data matching, and determine ways to improve the process.

We reviewed the Social Security Administration's (SSA) matching agreement process and its compliance with laws and regulations. In addition to interviewing staff and reviewing numerous current matching agreement files and reports maintained by SSA, we selected a sample of 22 matching agreements to test for compliance with Office of Management and Budget (OMB) guidance and the Computer Matching and Privacy Protection Act (CMPPA).

We found that SSA is pro-active in developing and maintaining matching agreements, and is largely in compliance with laws and regulations concerning matching agreements. However, we believe SSA can improve its matching process by

Resolving difficulties in initiating matching agreements.

Increasing the duration of the matching agreements.

Performing cost benefit analyses (CBA) in a timely manner.

We recommended that SSA

1. Create a policy that requires the Office of the Commissioner to be notified when matching agreements are taking excessive time to implement due to difficulties with other agencies.

2. Continue to work with OMB on passage of the legislative proposal to change or amend CMPPA to increase the duration of matching agreements.

3. Obtain CBA updates for all matching agreements every 30 months when a matching agreement is renewed.

Regarding recommendation one, SSA agreed that the Commissioner should be notified when extraordinary circumstances exist and agreements with other agencies are taking excessive time to implement. SSA provided information on actions taken by SSA to address implementation of recommendations two and three.

This report contains information that is sensitive and confidential. For security reasons, distribution of this report was limited to those with a need to know.