,i  #aac? ,,congress  #a/ ,session  ,h4 
,r4 #bbbi  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,june #c1 #bjac ,mr4  
,ross 7= himself & ,ms4 ,ca/or (        
,florida7 introduc$ ! foll[+ bill2 :i* 0
 ref]r$ to ! ,committee on ,ways &      
,means  ,a ,,bill  ,to require !        
,commission] ( ,social ,security to     
issue uni=m /&>ds = ! me?od = truncation
 ( ,social ,security acc\nt numb]s 9    
ord] to protect su* numb]s f be+ us$ 9 !
 p]petration ( fraud or id5tity !ft & to
 provide = a prohibition on ! display to
 ! g5]al public on ! ,int]net ( ,social 
,security acc\nt numb]s by ,/ate & local
 gov]nm5ts & private entities1 & = o!r  
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,safegu>d+ ,social         
,security ,numb]s ,act ( #bjac4  #b4    
,f9d+s ,congress makes ! foll[+ f9d+s3  
7#a7 ,! ,f$]al ,gov]nm5t requires       
virtually e individual 9 ! ,unit$ ,/ates
 to obta9 & ma9ta9 a ,social ,security  
acc\nt numb] 9 ord] to pay taxes or to  
qualify = old-age1 survivors1 &         

disability insurance b5efits "u title   
,,ii ( ! ,social ,security ,act4  7#b7  
,_m ,gov]nm5t ag5cies & private entities
 also use ,social ,security acc\nt      
numb]s z id5tifi]s to track individual  
records or z in=mation t an individual  
mu/ pres5t to v]ify 8 or h] id5tity4    
,?us1 ,social ,security acc\nt numb]s   
are r\t9ely collect$1 record$1 &        
transf]r$ by public & private entities4 
7#c7 ,z an un9t5d$ consequ5ce ( ^! uses1
 ,social ,security acc\nt numb]s h      
become "o ( ! tools t c be us$ to       
facilitate crime1 fraud1 & invasions ( !
 privacy ( ! individuals to :om ! numb]s
 are assign$4  7#d7 ,accord+ to !       
,social ,security ,adm9i/ration's       
,inspector ,g5]al1 #af p]c5t ( ! #ii1jjj
 fraud cases x inve/igat$ 9 ! #a-ye>    
p]iod end+ ,septemb] #cj1 #bjjf1 involv$
 ! misuse ( ,social ,security acc\nt    
numb]s4  7#e7 ,! ,social ,security      
acc\nt numb] is also a key piece (      
in=mation us$ 9 ! p]petration ( id5tity 
!ft4 ,9 cal5d> ye> #bjjf1 ov] #bdj1jjj  

individuals report$ to ! ,f$]al ,trade  
,commission t !y _h be5 ! victims ( an  
id5tity !ft4 ,id5tity !ft is a s]i\s    
crime t c cause sub/antial f9ancial     
losses & =ce victims to sp5d significant
 "t re/or+ ! accuracy ( _! cr$it        
records4  7#f7 ,social ,security acc\nt 
numb]s are publicly display$ by "s      
,gov]nm5t entities4 ,9 mo/ jurisdictions
 ?r\gh\t ! ,unit$ ,/ates1 ,/ate & local 
law requires t c]ta9 docum5t>y records1 
su* z bus9ess fil+s1 prop]ty records1 & 
bir? & m>riage c]tificates1 be made     
available to ! g5]al public4 ,"s ( ^!   
records conta9 p]sonally id5tifiable    
in=mation ( individuals1 includ+ ,social
 ,security acc\nt numb]s4 ,increas+ly1  
,/ate & local recordkeep]s are display+ 
public records on ! ,int]net1 :]e ^!    
records are widely accessible at no co/ 
or = a m9imal fee4 ,!re are kn[n        
in/ances ( crim9als us+ p]sonally       
id5tifiable in=mation f onl9e public    
records to commit id5tity !ft4  7#g7    
,private in=mation resell]s also r\t9ely

 record & transf] individuals' ,social  
,security acc\nt numb]s & o!r p]sonally 
id5tifiable in=mation4 ,9 a #bjjf /udy1 
! ,gov]nm5t ,acc\ntability ,(fice       
7,,gao7 0 able to pur*ase truncat$ or   
full ,social ,security acc\nt numb]s f  
#e ( #ba ,int]net in=mation resell]s t 7
 survey$4  7#h7 ,! ,,gao has conclud$1  
bas$ on available evid5ce1 t unau?oriz$ 
access to p]sonal data su* z ,social    
,security acc\nt numb]s is a frequ5t    
occurr5ce4 ,a survey ( #ag ,f$]al       
ag5cies by ! ,committee on ,ov]sight &  
,gov]nm5t ,re=m ( ! ,h\se (             
,repres5tatives f\nd t ^! ag5cies suff]$
 m ?an #ghh data brea*es f ,janu>y #bjjc
 ?r\gh ,july #bjjf4  7#i7 ,9 _m         
in/ances1 public & private entities seek
 to protect ,social ,security acc\nt    
numb]s f abuse by truncat+ a portion (  
ea* numb]4 ,h[ev]1 because truncation   
me?ods are n uni=m1 x is possible to    
obta9 a full ,social ,security acc\nt   
numb] by recon/ruct+ ! numb] bas$ on    
p>tial in=mation obta9$ f diff]5t       

s\rces4  7#aj7 ,9 a report issu$ 9 ,june
 #bjjg1 ! ,,gao f\nd t truncat$ ,social 
,security acc\nt numb]s 9 ,f$]al        
docum5ts /or$ z public records rema9    
vuln]able to misuse1 9 "p because       
diff]5t truncation me?ods us$ by !      
public & private sectors p]mit !        
recon/ruction ( full ,social ,security  
acc\nt numb]s4 ,f$]al entities su* z !  
,dep>tm5t ( ,ju/ice1 ! ,int]nal ,rev5ue 
,s]vice1 & ! ,judicial ,conf]5ce ( !    
,unit$ ,/ates truncate by display+ ! la/
 #d digits ( ! ,social ,security acc\nt 
numb]4 ,9 contra/1 ! ,,gao f\nd t       
in=mation resell]s sometimes sell       
records conta9+ ,social ,security acc\nt
 numb]s t are truncat$ to display ! fir/
 #e digits4  7#aa7 ,! fir/ #e digits (  
an individual's ,social ,security acc\nt
 numb] are assign$ bas$ on ! location 9 
:i* ! acc\nt numb] 0 issu$ & ! ord] 9   
:i* ! acc\nt numb] 0 issu$4 ,! la/ #d   
digits ( an individual's ,social        
,security acc\nt numb] are r&omly       
g5]at$1 creat+ a unique acc\nt numb] =  

ea* individual4 ,_m public & private    
entities ask consum]s to supply ! la/ #d
 digits ( ,social ,security acc\nt      
numb]s z a way to v]ify consum]s'       
id5tities1 provid+ an additional reason 
= id5tity ?ieves to seek to acquire ^!  
digits4  7#ab7 ,! ,,gao report$ 9 #bjjf 
t x _h be5 unable to id5tify any indu/ry
 /&>ds or guidel9es = truncat+ ,social  
,security acc\nt numb]s4 ,moreov]1 !    
,,gao c\ld n id5tify any cons5sus among 
,gov]nm5t (ficials ab\t :i* me?od =     
truncation bett] protects ,social       
,security acc\nt numb]s f abuse4  7#ac7 
,! ,,gao has /at$ t /&>diz+ ! truncation
 ( ,social ,security acc\nt numb]s w\ld 
bett] protect ^! numb]s f misuse4 ,s9ce 
#bjje1 ! ,,gao has on multiple occasions
 recomm5d$ ! e/abli%m5t ( uni=m /&>ds = 
truncation ( ,social ,security acc\nt   
numb]s4  7#ad7 ,giv5 ! ,social ,security
 ,adm9i/ration's role 9 assign+ ,social 
,security acc\nt numb]s1 ! ,commission] 
( ,social ,security may be 9 ! be/      
position to det]m9e :e!r & h[ truncation

 %\ld be /&>diz$4  7#ae7 ,! truncation (
 ,social ,security acc\nt numb]s1 ev5 by
 ,f$]al ,gov]nm5t ag5cies1 is n         
compreh5sively requir$ or regulat$4     
,curr5tly1 ! ,social ,security          
,adm9i/ration does n h ! legal au?ority 
to regulate ! use ( ,social ,security   
acc\nt numb]s by o!r entities4  7#af7   
,because ! ,f$]al ,gov]nm5t creat$ &    
ma9ta9s ! sy/em ( requir$ ,social       
,security acc\nt numb]s1 & because !    
,f$]al ,gov]nm5t does n p]mit           
individuals to exempt !mselves f ^?     
requirem5ts1 x is appropriate = ! ,f$]al
 ,gov]nm5t to take /eps to curb ! abuse 
( ,social ,security acc\nt numb]s4  #c4 
,requirem5t to issue uni=m /&>ds = !    
me?od = truncation ( ,social ,security  
acc\nt numb]s  7a7 ,9 g5]al ,!          
,commission] ( ,social ,security %all   
issue uni=m /&>ds--  7#a7 = ! me?od =   
truncation ( ,social ,security acc\nt   
numb]s 9 ord] to facilitate ! protection
 ( su* numb]s f be+ us$ 9 ! p]petration 
( fraud or id5tity !ft2 &  7#b7 = !     

me?od = encryption 7or o!r me?od (      
secur+ f disclosure7 ( ,social ,security
 acc\nt numb]s transmitt$ by means ( !  
,int]net4  ,su* uni=m /&>ds %all n apply
 ) respect to a ,social ,security acc\nt
 numb] ( a deceas$ individual4  7b7     
,requirem5ts  7#a7 ,9 g5]al ,9 e/abli%+ 
! uni=m /&>ds requir$ "u subsection 7a71
 ! ,commission] ( ,social ,security %all
 consid] ! matt]s describ$ 9 p>agraph   
7#b7 & consult )1 at a m9imum1 ! heads (
 ! foll[+ ,f$]al ag5cies3  7,a7 ,!      
,dep>tm5t ( ,ju/ice4  7,b7 ,! ,f$]al    
,trade ,commission4  7,c7 ,! ,dep>tm5t (
 ! ,treasury4  7#b7 ,specific           
consid]ations ,= purposes ( p>agraph    
7#a71 ! matt]s describ$ 9 ?is p>agraph  
are ! foll[+3  7,a7 ,! ext5t to :i*     
v>i\s me?ods = truncation ( ,social     
,security acc\nt numb]s w assi/ 9 !     
prev5tion ( fraud & id5tity !ft1 tak+   
into acc\nt ! foll[+3  7i7 ,! risk t a  
truncat$ ,social ,security acc\nt numb] 
c be comb9$ ) o!r p]sonally id5tifiable 
in=mation to d]ive or acquire a complete

 ,social ,security acc\nt numb]4  7ii7  
,! risk t ! num]ical digits n mask$ 9 ! 
truncation process w reveal p]sonally   
id5tifiable in=mation ab\t an           
individual4  7iii7 ,! risk t a truncat$ 
,social ,security acc\nt numb] c be us$ 
to d]ive or acquire f o!r s\rces a full 
,social ,security acc\nt numb]4  7,b7 ,!
 me?ods 9 use = ! truncation ( ,social  
,security acc\nt numb]s by ! ,f$]al     
,gov]nm5t1 ,/ate & local gov]nm5ts1 &   
private entities & ! ext5t ( use ( ea*  
me?od by ! ,f$]al ,gov]nm5t1 ,/ate &    
local gov]nm5ts1 & private entities4    
7,c7 ,! reasons :y ,social ,security    
acc\nt numb]s are collect$ & record$ by 
! ,f$]al ,gov]nm5t1 ,/ate & local       
gov]nm5ts1 & private entities4  7,d7 ,! 
effect ( ea* propos$ me?od = truncation 
on ! uses = ,social ,security acc\nt    
numb]s by ! ,f$]al ,gov]nm5t1 ,/ate &   
local gov]nm5ts1 & private entities4    
7,e7 ,any comm5ts reg>d+ propos$ me?ods 
= truncation submitt$ to ! ,commission] 
f--  7i7 exp]ts on privacy & data       

security1 consum] advocacy gr\ps1 &     
id5tity !ft assi/ance organizations2    
7ii7 ! ,f$]al ,gov]nm5t or ,/ate or     
local gov]nm5ts1 includ+ ,/ate          
,attorneys ,g5]al2  7iii7 repres5tatives
 ( private entities t transf]1 display1 
record1 or o!rwise utilize ,social      
,security acc\nt numb]s on a regul>     
basis2  7iv7 ! ,comptroll] ,g5]al ( !   
,unit$ ,/ates2 &  7v7 any o!r           
appropriate entities4  #d4 ,application 
( uni=m /&>ds  7a7 ,f$]al ,gov]nm5t ,on 
& aft] ! date t ! ,commission] ( ,social
 ,security det]m9es 9 regulations issu$ 
pursuant to section #f1 ! uni=m /&>ds   
issu$ "u section #c7a7 %all apply to !  
,f$]al ,gov]nm5t--  7#a7 :5ev] ! ,f$]al 
,gov]nm5t displays a ,social ,security  
acc\nt numb]2 &  7#b7 to ! ext5t        
practicable1 :5ev] ! ,f$]al ,gov]nm5t   
transf]s1 records1 or o!rwise utilizes a
 ,social ,security acc\nt numb]4  7b7   
,/ate & local gov]nm5ts2 private        
entities  7#a7 ,display or transmission 
by a ,/ate or local gov]nm5t by means ( 

! ,int]net  7,a7 ,prohibition  7i7 ,9   
g5]al ,subject to clause 7ii71 a ,/ate1 
a political subdivision ( a ,/ate1 or   
any (fic]1 employee1 or contractor ( a  
,/ate or a political subdivision ( a    
,/ate1 %all n display to ! g5]al public 
on ! ,int]net all or any portion ( any  
,social ,security acc\nt numb]4  7ii7   
,exceptions ,a ,/ate1 a political       
subdivision ( a ,/ate1 or any (fic]1    
employee1 or contractor ( a ,/ate or a  
political subdivision ( a ,/ate may     
display to ! g5]al public on !          
,int]net--  7,i7 a portion ( a ,social  
,security acc\nt numb] if su* display   
complies ) ! uni=m /&>ds = ! me?od =    
truncation & encryption ( su* numb]s    
issu$ by ! ,commission] ( ,social       
,security "u section #c2 &  7,,ii7 all  
or any portion ( a ,social ,security    
acc\nt numb] ( a deceas$ individual4    
7,b7 ,p5alties ,a ,/ate1 a political    
subdivision ( a ,/ate1 or any (fic]1    
employee1 or contractor ( a ,/ate or a  
political subdivision ( a ,/ate t       

violates subp>agraph 7,a7 %all be       
subject to a civil p5alty ( n m ?an     
#e1jjj p] day = ea* day t ! ,/ate or    
political subdivision violat$ su*       
subsection4  7,c7 ,en=cem5t ,! ,attorney
 ,g5]al may br+ a civil action aga9/ a  
,/ate1 a political subdivision ( a      
,/ate1 or any (fic]1 employee1 or       
contractor ( a ,/ate or a political     
subdivision ( a ,/ate1 9 any appropriate
 ,unit$ ,/ates ,di/rict ,c\rt = a       
violation ( subp>agraph 7,a74  7,d7     
,effective date ,subp>agraphs 7,a7 ?r\gh
 7,c7 %all take effect on ! date t is #a
 ye> aft] ! date on :i* regulations are 
issu$ "u section #f & %all apply to     
violations occurr+ on or aft] t date4   
7#b7 ,display by o!r means ,x is ! s5se 
( ,congress t if a ,/ate1 local         
gov]nm5t1 or private entity displays a  
,social ,security acc\nt numb] 9 a mann]
 o!r ?an t describ$ 9 p>agraph 7#a71 !  
,/ate1 local gov]nm5t1 or private entity
 %\ld comply ) ! uni=m /&>ds issu$ "u   
section #c to ! same ext5t t ! ,f$]al   

,gov]nm5t or a ,/ate or local gov]nm5t  
is requir$ to comply ) su* /&>ds "u     
subsection 7a7 & p>agraph 7#a7 ( ?is    
subsection4  #e4 ,grants to ,/ate &     
local gov]nm5ts to come into compliance 
) ! prohibition on ! display to ! g5]al 
public on ! ,int]net ( ,social ,security
 acc\nt numb]s  7a7 ,9 g5]al ,!         
,attorney ,g5]al %all aw>d grants to    
,/ates & political subdivisions ( ,/ates
 to c>ry out activities to remove1      
r$act1 or truncate1 9 accordance ) !    
uni=m /&>ds = ! me?od ( truncation issu$
 "u section #c1 all ,social ,security   
acc\nt numb]s on =ms & records (        
executive1 legislative1 & judicial      
ag5cies ( ,/ates & political            
subdivisions ( ,/ates t1 z ( ! date t is
 #a ye> aft] ! date on :i* regulations  
are issu$ "u section #f1 w\ld be        
display$ to ! g5]al public on ! ,int]net
 9 violation ( section #d7;b77#a74  7b7 
,application ,a ,/ate or political      
subdivision ( a ,/ate desir+ a grant "u 
?is subsection %all submit an           

application to ! ,attorney ,g5]al at su*
 "t1 9 su* mann]1 & conta9+ su*         
in=mation z ! ,attorney ,g5]al may      
reasonably require4  7c7 ,au?orization (
 appropriations ,!re is au?oriz$ to be  
appropriat$ to ! ,attorney ,g5]al to    
c>ry out ?is subsection1 #aj1jjj1jjj =  
ea* ( fiscal ye>s #bjad & #bjae4  #f4   
,regulations ,n lat] ?an ! date t is #f 
mon?s aft] ! date ( ! enactm5t ( ?is    
,act1 ! ,commission] ( ,social ,security
 %all issue regulations to c>ry out ?is 
,act4  #g4 ,,gao ,report ,n lat] ?an #ah
 mon?s aft] ! effective date ( !        
regulations issu$ by ! ,commission] (   
,social ,security "u section #f1 !      
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all report to ,congress on ! ext5t to  
:i* ! uni=m /&>ds requir$ "u section #c 
h result$ 9 ! adoption ( su* /&>ds by   
private entities1 & :e!r ^! /&>ds are   
likely to provide great] protection     
aga9/ fraud & id5tity !ft ?an !         
practices adh]$ to prior to su* date4 ,!
 report %all include--  7#a7 a          

recomm5dation reg>d+--  7,a7 :e!r su*   
/&>ds %\ld be m&atory = ,/ate & local   
gov]nm5ts & private entities1 & if s1 "u
 :at circum/ances2 &  7,b7 :e!r mak+ su*
 /&>ds m&atory = su* entities 7) respect
 to ea* circum/ance id5tifi$ "u         
subp>agraph 7,a77 w\ld help prev5t      
fraud1 id5tity !ft1 & unau?oriz$ access 
to consum]s' p]sonally id5tifiable      
in=mation2 &  7#b7 recomm5dations = su* 
additional legislation or adm9i/rative  
action z ! ,comptroll] ,g5]al det]m9es  
appropriate to fur!r r$uce ! risks (    
fraud1 id5tity !ft1 & unau?oriz$ access 
result+ f ! transf]1 sale1 display1     
record+1 or o!r utilization ( ,social   
,security acc\nt numb]s4  #h4           
,preemption ( ,/ate law ,?is ,act & !   
am5dm5ts made by ?is ,act %all sup]s$e a
 provision ( ,/ate law only if1 & only  
to ! ext5t t1 su* provision conflicts ) 
a requirem5t ( ?is ,act or an am5dm5t   
made by ?is ,act4  #i4 ,def9itions ,9   
?is ,act--  7#a7 ! t]m display to !     
g5]al public on ! ,int]net means1 9     

connection ) all or any portion ( a     
,social ,security acc\nt numb]1 to po/  
or to p]mit ! cont9u$ pres5ce ( su*     
numb]1 or any portion ( su* numb] 9 a   
viewable mann] on an ,int]net site t is 
available to ! g5]al public1 includ+ any
 ,int]net site t requires a fee = access
 to in=mation accessible on or ?r\gh !  
site2  7#b7 ! t]m ,social ,security     
acc\nt numb] means ! acc\nt numb]       
assign$ to an individual by !           
,commission] ( ,social ,security 9 !    
ex]cise ( ! ,commission]'s au?ority "u  
section #bje7;c77#b7 ( ! ,social        
,security ,act 7#db ,u4,s4,c4           
#dje7;c77#b77 & includes any d]ivative (
 su* numb]2 &  7#c7 ! t]m ,/ate means   
ea* ( ! #ej ,/ates1 ! ,di/rict (        
,columbia1 ! ,commonweal? ( ,pu]to      
,rico1 ! ,unit$ ,/ates ,virg9 ,isl&s1   
,guam1 & ! ,commonweal? ( ! ,nor!rn     
,m>iana ,isl&s4