GN 03325: Disclosure and Verification of Social Security Numbers (SSN)
TN 5 (05-18)
A. Policy for requesting the Numident record
Under the Privacy Act, an individual has the right to access any information in our records about him or her, including a copy of Form SS-5 (Application for a Social Security Card) and the Numident record. A Numident is a query display of the information taken from an individual's original application for a Social Security card and subsequent applications for replacement SSN cards.
The only official document verifying an individual's SSN is the SSN card. A third party may ask an individual to obtain a Numident to verify his or her SSN. The third party may also seek valuable personal information contained in the Numident record. While the number holder (NH) is entitled to his or her own Numident record, he or she may be unwittingly disclosing more information than is necessary to verify his or her SSN. Disclosing Numident information unnecessarily to third parties greatly increases the NH's vulnerability to identity theft and SSN fraud. In addition, persons can easily duplicate or alter Numident records.
B. Processing requests for Numident records
Certain third parties may request Numident records without an individual’s consent. The Office of Privacy and Disclosure and regional offices (RO) may disclose Numident records without consent to the Department of Homeland Security, U.S. Citizenship and Immigration Services, as discussed in GN 03313.095A.1. In urgent and sensitive situations only, ROs may authorize a field office to release a full Numident record to a third party without consent, if the request complies with disclosure policies in GN 03300.000.
Central Office (CO) processes routine requests for Numident records, including requests that pertain to deceased individuals. Send the request together with the fee, if applicable, to:
SSA, OEIO FOIA Workgroup6100 Wabash Avenue
P.O. Box 33022
Baltimore, MD 21290-3022
1. First party requests for Numident records
First party requesters for Numident records must meet the access requirements in
GN 03340.015B.2 Requirements to be Met by Individuals Requesting Access
GN 03340.025 Providing Access – Parental Rights
GN 03340.030 Providing Access – Incompetent Individual’s Rights
2. Third party requests for Numident records
Third party requesters must submit a valid consent document with Numident record requests in accordance with the consent and query procedures in
GN 03305.001 Disclosure with Consent
GN 03305.004 Disclosing Queries
We provide information about who may consent in GN 03305.005. If the consent document does not meet our requirements, return it to the requester with a written explanation of why we cannot honor the request. We can accept a new consent document from the same requester once the consent document satisfies all of our requirements. Once it does, send the request, together with the fee, to the address listed in this section.
3. Fees for processing requests for Numident records
All requesters must pay the fees we charge for processing requests for Numident records. This includes both first and third party requesters. Do not send a request for Numident records to CO without the correct fee amount. If a request does not include the fee or the fee amount is incorrect, return the request to the requester with a written explanation of why we cannot process it. Once we receive the correct fee amount and the request meets all other requirements, we can process the request. More information about the fees we charge is on our website at www.ssa.gov/foia/request.html.
C. Numident record status requests
We process requests for Numident records on a first come basis. It can take 30 days or longer to process a request. After waiting the initial 30-day period, a requester may contact us for the status of his or her request. To process a request for status, after the initial 30-day waiting period, use the following steps:
Obtain enough information to locate the request and the name and telephone number of the requester. Advise the requester that someone will contact him or her to provide the status within five business days.
Contact the FOIA Workgroup at (410) 966-4034 and request they contact the requester directly to provide the status. If necessary, leave a message and provide all pertinent information related to the request.
D. Field Office (FO) instructions for SSN printout requests
Effective August 1, 2014, we discontinued providing manual SSN printouts and verifications to claimants and third parties. Manual verification requests in emergency situations are processed via the local Point of Contact.
1. For individuals requesting an SSN Printout:
Inform the NH we no longer provide SSN printouts and advise him or her to apply for a replacement card.
NOTE: Individuals living in an area where SSA invoked disaster procedures are still eligible to receive an SSN Printout. For more information regarding requests for SSN Printouts, see RM 10225.005.
2. For agencies requesting an SSN Printout
For SSN verification requests from agencies administering emergency services in disaster situations and in cases of hardship where an existing data exchange does not exist or meet the need, FOs should follow the process described in this section.
3. For law enforcement agencies requesting an SSN Printout
Although we no longer provide SSN Printouts, you should still follow current policy to address requests from law enforcement in GN 03312.000. If the request meets the requirements for disclosure, you may still verify the SSN (without using the SSN Printout).
E. Instructions for first party SSN verifications in emergency situations
For SSN verifications during emergency situations or in cases of hardship, follow the process in this section:
If a third party (a local or State agency) sends an individual to the FO to obtain verification of his/her SSN, assist the individual in applying for a replacement SSN card with the appropriate required evidence. For more information on these requirements, see RM 10210.015. Upon request, you may provide verbal verification of the SSN to the replacement card applicant.
-
If the individual states the third party sent them to the FO to obtain verification of his or her SSN, obtain written consent from the individual (Form-SSA-3288).
Inform the individual that we will contact the requesting third party to provide verbal verification of his or her SSN.
-
Refer the individual’s name, SSN, signed SSA-3288, and third party contact information to your regional Privacy Act Coordinator (PAC).
NOTE: Individuals living in an area where SSA invoked disaster procedures are still eligible to receive an SSN printout. For more information on these procedures, see GN 00401.001.FOs may also contact their regional PAC for further assistance with verbal third party SSN verifications. This includes cases of hardship where an existing data exchange does not exist or meet the need.
F. Instructions for third party SSN verifications in emergency situations
When the FO receives a referral from a third party, employees should:
review the SSA-3288 to ensure that all required fields are complete and include the necessary third party information;
retain a copy of the signed SSA-3288 to ensure a record of the individual’s consent;
contact the designated third party (within the same business day if possible);
confirm that individual you are speaking to is the designated third party and authorized to receive the SSN verbal verification (e.g., name of organization, EIN, or other requirements. For more information on identity requirements, see GN 03380.010.
ask the third party to provide a sufficient explanation (at management’s discretion) of the emergency or hardship need;
explain that we can only inform him or her if the information provided agrees with our records (we will not disclose the SSN to the third party); and
provide a verbal “yes” or “no” response for verification of the SSN.
The regional Data Exchange Coordinator, regional Communications Director, regional PAC, and local managers will work with local third parties to establish a long-term process to eliminate the third party’s need for a verbal SSN verification. This may include:
The regional Data Exchange Coordinator, regional Communications Director, regional PAC, and local managers will work with local third parties to establish a long-term process to eliminate the third party’s need for a verbal SSN verification. This may include:
accepting the Beneficiary Verification (BEVE) provided by the individual (obtained online or by phone); or
waiting until the individual receives the SSN replacement card.
G. Instructions for SSN verifications in non-emergency situations
When we receive a request to verify an SSN in a non-emergency situation, employees should:
review the SSA-3288 or submitted consent to ensure that all required fields are complete and include the necessary third party information (Box 1, “Verification of Social Security Number” should be checked);
verify the identifying information on the form against our records;
stamp the FO address on the original and annotate “Information provided matches our records” or “Information provided did not match our records;” and
retain a copy of the signed SSA-3288 or valid consent, with the annotated response, to ensure record of the individual’s consent and the agency’s response.
NOTE: You do not need to annotate the SSA-3288 or valid consent if we provide another record in our response that displays the SSN.