Re: Last 4 digits of SSN and birthdate

[Tim Howard <Timothy_G_Howard () RAYTHEON COM>]

this is clearly a case of "know it when you see it" as it appears to be a
straightforward issue of too much information about a person that could
support an identity thief.  I for one would not want my SSN last 4 and
birthdate together with the other information.  As far as legal
prohibitions, take a look at the Privacy Act, which deals with government
organizations and personal information.  If you are a state university,
you may need to follow the PA anyway.

Good luck!



Raytheon
Tim Howard
Information Security Manager
Raytheon Information Solutions
301.943.4732 cell;      timothy_g_howard () raytheon com



Elizabeth Shannon <eshannon () PITTSTATE EDU>
10/26/2005 01:49 PM
Please respond to
The EDUCAUSE Security Discussion Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>


To
SECURITY () LISTSERV EDUCAUSE EDU
cc

Subject
[SECURITY] Last 4 digits of SSN and birthdate






A representative of University Advancement contacted me and wanted to
know if printing a person's birthday (MM/DD/YYYY) and the last 4 digits
of the person's SSN on pledge cards was acceptable.  The reason for
"needing" this info is it allows staff to search the alumni database
much faster.  Other info printed on the card: first name, middle
initial, last name, phone number, and address.

I can not find any sources prohibiting their request, but I am not
comfortable with displaying this info. I am concerned with the
precedence this  may set with other departments.  Any suggestions or
links to info would be appreciated.

Elizabeth Shannon
Pittsburg State University - Kansas