Reports: Social Security numbers still vulnerable
State, local, and federal government agencies have recently begun taking action to protect SSNs, but they are still widely accessible, two new government reports say.
The government is taking steps to protect consumers by reducing its use of Social Security numbers, yet with identity theft complaints numbering in the millions, counties across the country are still making the numbers available in bulk or online to businesses and the public.
The President's Identity Theft Task Force released a report (PDF) Tuesday marking the progress of federal agencies in combating identity theft. Steps taken include better assisting identity theft victims and increasing prosecutions and other deterrent measures--federal identity theft convictions increased 26 percent from 2006 to 2007, according to the report.
Many steps have also been taken to simply limit the federal government's use of personal data such as Social Security numbers. The report called Social Security numbers "one of the most valuable commodities for identity thieves."
The task force, which was established by President Bush in 2006, is comprised of representatives from 15 federal agencies. Tuesday's report follows up on the federal government's progress in implementing the 31 steps recommended to combat identity theft in the task force's 2007 strategic plan (PDF).
The Federal Trade Commission's Identity Theft Data Clearinghouse contains over 1.6 million consumer complaints, the report points out.
While the federal government works to improve its use of consumer data, local governments continue to make Social Security numbers widely available, according to a separate survey (PDF) by the Government Accountability Office.
In response to an inquiry from Senator Chuck Schumer (D-N.Y.) about the bulk sales of public records online, the GAO surveyed a sample of 247 counties, including the 97 largest counties by population, about the reasons they make records available in bulk or online, what types of records are available, and who is interested in the records.
Many counties make public records available in bulk because of state open records laws, the GAO said. Actions by state and local governments taken to protect Social Security numbers are a "recent phenomenon," the GAO said. It was estimated that about 12 percent of counties have completed redacting or truncating of Social Security numbers and another 26 percent are in the process.
State, local, and federal actions taken to limit the distribution of Social Security numbers "may strike an appropriate balance between protecting SSNs from misuse and making a portion available for appropriate parties to firmly establish the identity of specific individuals," the GAO said.
The President's Identity Theft Task Force noted that in January 2008, the IRS began redacting all but the last four digits of taxpayers' social security numbers on all federal tax lien documents filed in public records and issued to taxpayers and their representatives, and the agency is considering redacting the numbers on other documents as well. Also, the Office of Personnel Management led an interagency initiative to eliminate the unnecessary use of Social Security numbers in federal government human resource functions.
The GAO said that while recent actions to protect Social Security numbers represents a positive step, "these actions will only protect SSNs in future transactions, as millions of records with SSNs have already been obtained in bulk or online."