Is asking for a SSN# for validation purposes illegal? Someone I work with claims that it is. I’m in Illinois if that makes any difference.
Here’s the situation. I occasionally have to give out support ID’s (GOD ID) on our MVS system. For this to work I need three things. The user’s ID, their last name and SSN#. All three of these things must match the users ACF profile to obtain one. The support person is refusing to give up his SSN. In light of what’s going on with identity theft lately, I don’t blame him. Granted our system should probably ask for like the last 4 digits. But that’s not how it’s set up. But everytime this guy calls he refuses to give it up saying, “it’s illegal, I don’t have to”. Your right, you don’t have to, but when you don’t, you don’t get a support ID. Even though I can do a lookup in ACF to get it anyway, I have to know that you’re not some terrorist, ok?
Anyway, this person firmly believes it’s illegal to require this for authentication. I’m not looking to know whether it’s wrong or not, just is it illegal.