FTC Realtime, part 2

The panel started at 1:45 p.m. with an introduction by Valerie Abend, Deputy Assistant Secretary for Critical Infrastructure Protection and Compliance Policy, U.S. Department of Treasury.  She explained the many needs and uses of the SSN by the Treasury Department, including the I.R.S.

The following is a summary:

Robert Ryan, VP, TransUnion, talked about TransUnion’s use of the SSN as an identifier in processing of millions of daily information reports received by credit bureaus.   SSN is important to ensure correct application of information.  The SSN is used for unique credit reports for millions of individuals.  The SSN is necessary to identify the credit report.  SSN is important when a person disputes some information in the credit report especially when the information is not accurate.  Use SSN to maintain accuracy of identifying the right person.  TransUnion has to comply with many State and Federal laws that require use of SSN to identify people.

Stan Szwalbnest, JP Morgan Chase said they use SSNs for identifying accounts, identifying individuals, reporting earnings to I.R.S., reporting to law enforcement, help identify business records in disasters and many other ways. 

Roberta Meyer, American Council of Life insurances:  Insurance companies use SSN for identifying life insurance applicants, making reports in compliance with laws.  SSNs are universal, unique and do not change over time.  This helps identify persons for life insurance policies going for many many years.  SSN necessary to accurately identify persons for reports.  There are many, many ways that companies use the SSN to identify people for all kinds of internal/external reports.  Many State and Federal laws require use of SSN for reporting purposes.  Tax departments require earnings report by SSN.  The Bank Secrecy Act and the Patriot Act require specific “know your customer” rules and procedures.  The SSN is vital to this procedure.  Insurance companies have to use SSNs to comply with federal law requirng that companies do not hire employees convicted of fraudulent activities.  Many state laws require use of SSN regarding property transactions, long term care partner programs, which was expanded by recent legislation.  All these situations require use of SSN to identify the person.  SSNs are needed to identify persons for medical records to get correct records.  SSNs are used to administer retirement/benefit plans.  There are many other reasons for using the SSNs legitimate business and consumer purposes.

Robert Townsend, licensed professional investigator over 40 years.  His comments are from his work as a day to day investigator.  SSN should be used under particular circumstances for legitimate reasons.  Why PI get the SSN?  Paid to get and link all information associated with the SSN.  Obtaining and linking SSNs is all done for money. Client paid for background information.  If you prosecute the violators, prosecute the original client paying for the investigation in addition to person illegal obtaining SSN.

Use SSN locate missing children.  SSN is unique personal identifier to distinguished one person from another.  Limit SSN information to licensed PIs with insurance.  PI need to identify the person being investigated.  Special Master System?  If there is a legal case being investigated by attorney or an investigator, he suggests a system where the investigator gets a the equivalent of a civil search warrant.  Judges would review applications for such a civil search warrant to determine if legitimate action.  If litigation goes further and more information is needed to determine assets, relatives, trace funds.  Should have judicial approve of this further investigation.

Michael Lamb, LexisNexis.  Unique identifiers, such as SSNs, are necessary to combat ID theft.  Data thieves have always existed and they steal other peoples identity.  Need to give tools, such as SSN,to combat ID theft.  LN has information needed to assist and help consumers to fight ID theft and get there ID back or keep safe.  Lexis helps firms meet legal obligations under the KYC and other laws.  Assist LE and other police help in crime.

SSN is the unique ID and will never change as person’s address, telephone etc will change.  Use partial SSNs?  Have over 15K variation of Will Johnson in the Lexis database.  Using the SSN last four digits, there are over 4k Will Johnson sharing the same last 4 digits.  If applying for credit or a job, you want data system and information to be accurate.  SSN identifier assists this.  Using partial number make information less accurate possibly.  Taking away full SSN, anti fraud programs will not work as well.  If take away use of full SSN, consumer may be negatively affected in financial and business matters.  SSN used to trace benefits for retirement, recover missing children, assist in crime fighting.  Do you want to have less chance of helping consumers in crime fighting and finding information.

Annie Anton, ThePrivacyPlace.org.  Right now personal information about you is being exchanged by many businesses and government agencies including law enforcement.  SSN is defacto National ID number.  Privacy concerns because use SSN as personal identifier and authenticator.  The SSN should not be used as authenticator.  

That’s it for today.

Bill Lowrance

President PIAVA

president@piava.org

FTC Workshop Realtime

I am blogging from the FTC Conference Center in Washington, DC.  There are about 90 to 100 people attending.  There are still seats available.  So, if you are in  the area, come on down! I came in late, but here is some of the discussion:

SSN Display & Use as Internal Identifier 

Now a representative from Ernst & Young is explaining how companies or businesses can successfully remove SSNs from business records.  E&Y has a consulting service to assist businesses with this process.  They are emphasizing that companies establish a standard policy and train employees  about how to handle data.  In addition, SSNs should be removed from all documents.  Access to information should be limited to only those “with need to know.”  The major systems that need attention are time keeping, payroll systems, salary data and human resources.

E&Y discussed the ways SSNs are used by businesses to keep their records–employee identifier and database tracking.  Once reports are generated, however, hard copies or data files may spread beyond the original source.  Security must control access to the data containing SSN identifiers.

There is a discussion of what other unique identifiers can be used to identify a person.  Such things as place of birth, additional PIN number, mother’s maiden name etc.  Companies are adopting these measures, but it takes time. 

Lunch Break at 12:30 p.m.

I saw some well known PI people here today.  Jimmie Meesis, PI Magazine, PI Magazine,  Bruce Hulme, NCISS, NCISS, Larry Sabbeth, NCISS, Pat Clawson, famous MI PI and PIAVA member Nicole Bocra.  After lunch, the topic is “SSN Use to LInk Data Externally.”  The panel is Robert Ryan, VP, TransUnion, Stan Szwalbenest, JP Morgan Case Comsumer and Retail Franchise, Roberta Meyer, VP and Associate General Counsel, America Council of Life Insurances, Robert Townsend, National Association of Legal Investigators, Michael Lamb, VP and General Counsel, LexisNexis Risk & Informaion Analytics Group, and Annie Anton, Associate Professor of Software Engineering, NC State University.  Robert Townsend is a private investigator from Orange County, CA.

So long for now,

Bill Lowrance

President PIAVA

president@piava.org

Comments?

Later today, I will write about legality of pretexting and investigations, not a legal opinion, you understand, but educational and practical.

On the Blog side here, if you want to comment to any post, click on “No Comment” at bottom of the post.  Then you can comment in the dialogue box.

Thanks and so long for now,

Bill Lowrance

President PIAVA

president@piava.org

On A Lighter Note–Geek Noozeology

 For the advance Geeky investigator, the leading edge person, the Third Wave PI, here are 10 Geek Websites where real geeks gather Geek Sites Here.  I especially like Geekologie  Thanks to Nelson Doyle, PIAVA’s “Best” Geek of the Day! 

Bill Lowrance

President PIAVA

president@piava.org

20 Ways To Protect From ID Theft

I ran across a Blog listing 20 ways to protect yourself from ID Theft.  Read good points:

20 Amazing-Ways

FTC Today Washington DC

In previous post (November), I let you know that the FTC is having its Workshop on Social Security Numbers and Identity Theft.  Today the workshop begins. I hope to be there and, if connections are available, will blog from the meeting.  If you are in the DC Metro area, come to the workshop.  Details are below:

  Agenda

8:30 a.m. Registration

9 a.m. Welcome

9:30 a.m. Panal 1, How SSNs are Used to Commit ID Theft

The workshop ends at 5 p.m. today and resumes tomorrow at 8:15 a.m.

Federal Trade Commission (FTC)

December 10 & 11, 2007 

On December 10 and 11, 2007, the Federal Trade Commission will host a public workshop, “Security in Numbers: SSNs and ID Theft,” to explore the uses of Social Security numbers in the private sector and the role of SSNs in identity theft.  This workshop continues the work of the President’s Identity Theft Task Force, and, in particular, its recommendation to explore ways to reduce unnecessary uses of the SSN.  The workshop will provide a forum for public-sector, private-sector, and consumer representatives to discuss the various uses of SSNs by the private sector, the necessity of those uses, alternatives available, the challenges faced by the private sector in moving away from using SSNs, and how SSNs are obtained and used by identity thieves.  The workshop will be free and open to the public. 

Registration is FREE and details can be found at this link.

http://www.ftc.gov/bcp/workshops/ssn/index.shtml

Some individual, bussinesses and organizations sent comments to the FTC.  Check out here:

http://www.ftc.gov/os/comments/ssnprivatesector/index.shtm

Registration is free and can be found at this link:

http://www.ftc.gov/bcp/workshops/ssn/index.shtml.

It is important for private investigators to attend this conference, because the FTC is preparing to promulgate its
recommendations and policies concerning Social Security Number access by the private sector. Those recommendations will most likely have an impact on pending Congressional legislation.

Comments?