HOW TRUNCATED SOCIAL SECURITY NUMBERS AFFECT YOU and YOUR ORGANIZATION

The use of SSNs as personal identification numbers--combined with the proliferation of personal computers and internet information brokers--has created an entirely new climate for identity theft, which now occurs more than 400,000 times per year and is growing at a rate of 40% annually.

For identity thieves the SSN is the key that opens the doors of banks and other credit institutions. The mass breaches of personal data from information brokers ChoicePoint and LexisNexis were reported in the media earlier this year and other similar breaches continue to be reported. Fraudulent accounts had been opened with these companies for as little as $100 to $200, allowing criminals to access and alter numerous personal records.

After these security breaches were revealed to the public, many data providers began restricting access to their data, even for valid users of their service, such as legitimate private investigators. The most significant change has been the truncating of social security numbers. Instead of listing the complete SSN (999-99-9999), the SSN is listed as 999-99-xxxx, and I agree with this alteration.

Unfortunately, since SSNs have become the primary identification numbers for individuals, private investigators have been required to rely on them in the course of conducting investigations to locate witnesses, perform background checks, uncover fraud, etc. Many courts and law enforcement agencies have search parameters in place that require complete SSNs in order to provide thorough and accurate search results.

We conducted an informal search of more than 20 Albuquerque-area courts and law enforcement agencies to determine how truncated SSNs would affect their records searches. Almost all agencies reported that, in order to be thorough and accurate, they would need to have a complete SSN. Most agencies could only conduct a partial search by name and date of birth.

None of the agencies we surveyed are able to search using a truncated SSN but a few agencies will compare their name and DOB search results with the truncated number, if they are provided with one. Some agencies requested additional descriptors or identifiers (a driver's license number, address, etc.). Many of the agency representatives with whom we spoke commented that a search conducted without a full SSN would not be complete and that this would present the greatest problem in cases when the subject has a common name or has changed his/her name.

Although some data providers are not yet truncating SSNs, it is likely that eventually all of them will be required to do so. In addition, pending legislation may further restrict access to personal information. For example, a bill to regulate information sharing, sponsored by Sens. Charles Schumer (D-NY) and Bill Nelson (D-FL), would subject businesses that sell personal data to regulation by the Federal Trade commission.

While appreciating the need for personal data safeguards, The National Council of Investigation & Security Services (NCISS) is currently working with Congress to block overly broad regulatory language that would hamper private investigators from providing essential services, such as preventing fraud, locating witnesses, and securing evidence.

I agree that it is vital to protect personal data from misuse and we support many of the measures that are currently being contemplated to create a more secure environment. I even support truncating Social Security numbers. However, there are enough existing challenges inherent in obtaining accurate information through records searches; therefore, it is imperative that courts and law enforcement agencies adjust their database parameters to respond to the current reality of truncated Social Security numbers.

Please forward this newsletter to anyone who is in a position to act on this issue now, before it becomes a more serious problem for all of us.