Re: Universities riskiest place for SSN

["Hoag, Martin" <Marty.Hoag () NDSU EDU>]

    I think the SSN is also included in the 1098-T or whatever it is that goes to every student to show what they paid 
for qualified tuition and related expenses. But in searching to remind myself of the number I saw something about 
allowing the identification number (e.g., SSN) to be truncated on the printed copy that goes to the individual (e.g., 
to ***-**-6789 or XXX-XX-6789). But I'm not a lawyer nor a tax expert...  See 
http://www.irs.gov/irb/2009-51_IRB/ar10.html (search for truncate).      

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Willis 
Marti
Sent: Monday, November 08, 2010 3:36 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Universities riskiest place for SSN

On 11/8/2010 3:12 PM, Dan Peterson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I agree that High-Ed does report things that private industry does 
> not; however, why does Higher-Ed need the student SSN in the first 
> place
There are several reports to Federal and, in our case, state agencies that require SSNs.  And there are loads of former 
students that still have interactions with the University. We officially replaced SSNs with a "UIN" in 2005, but we're 
still cleaning out legacy grade sheets, etc.

--
Cheers,
  Willis Marti
  Director&  CISO
  Networking and Information Security
  Texas A&M University