Educause Security Discussion mailing list archives

Legacy use of partial SSNs as identifiers


From: Martin Manjak <mm376 () ALBANY EDU>
Date: Tue, 2 Jun 2009 13:17:16 -0400

Prior to legislation in many states prohibiting the use of SSNs and, and
later, partial SSNs , a lot of schools were using these values to
generate student IDs. While moving away from SSN related values to some
form of unique, random identifier was a significant challenge,
converting the old IDs--and all the records keyed on them-- into the new
formats posed more formidable obstacles.

I'm curious as to whether any institutions still have legacy identifiers
that utilize partial SSNs, and what, if anything, you're considering
doing with them. Presumably, the bulk of those records belong to
individuals who are no longer active students.

Feel free to reply off list if you prefer.

--
Martin Manjak
Information Security Officer
University at Albany
CISSP, GIAC GSEC-G, GCIH, GCWN
518/437-3813
mm376 () albany edu

Current thread: