[net.mail] unnecessary data disclosure

emks@uokvax.UUCP (11/10/83)

#N:uokvax:3200001:000:642
uokvax!emks    Nov  7 08:36:00 1983

I just read a note in net.mail that disturbed me.  It mentioned the use of
social security account numbers (SSANs) as "identification" or "verification"
or for some related use.  How many services like this "demand" that you give
them your SSAN???

I know that you don't HAVE to give it to them, but a lot of folks don't know
that.  I know that on Gov't forms, we have to print a PAS notice (or attach
one) before we can get away with asking questions like that.

I don't relish the thought of a bunch of unsecure systems having privacy act
data on them...  What do YOU think??

		kurt

		...ctvax!uokvax!emks
		...alberta!tinker!uokvax!emks

mark@cbosgd.UUCP (Mark Horton) (11/10/83)

I know that the SSN was not intended to be used for identification.
Yes, there is a law preventing people from asking for it without
telling you whether it is required and what will happen if you refuse.
However, apparently this law only applies to the federal government,
leaving private industry to do whatever they want.

In particular, banks always demand it when you apply for a loan,
and the medical industry uses it as a universal patient ID number,
especially for insurance purposes.