A Social Security number is a person's most unique means
of identification because it never changes. Unlike other identifying information,
a SSN has a significant role in linking records that contain sensitive information
that needs to remain confidential. This unique factor is what makes a SSN
so valuable to those who commit identity theft. Both the broad use of this
identifier and its value has contributed to the growth of identity theft and
Your Responsibility. . .
The Oregon Identity Theft Protection Act prohibits anyone (individual, private
or public corporation or business) who maintains Social Security numbers from:
Printing a consumer's SSN on any mailed materials not
requested by the consumer unless redacted;
Printing a consumer's SSN on a card used by the consumer
that is required to access products or services;
Publicly posting or displaying a consumer's SSN, such
as on a Web site.
Exceptions include requirements by state or federal laws,
including statute, such as W2s, W4s, 1099s, etc., records that are required
by law to be made available to the public, for use for internal verification
or administrative processes, or for enforcing a judgment or court order.
Other exceptions include:
Rules adopted by the courts,
Copies of records possessed by a court, the State Court
Administrator or the Secretary of State
If you use SSNs as an account identifier, you should use
another means to identify your customers' accounts such as an alternate number.