Social Security Card Uses? In my years living in the United States, I've used my SSN several times, but I've never been required to use my Social Security Card. Is there any process or activity that requires the card that your Social Security Number is printed on?
They can be used for ID. For government purposes various type of cards have points and a certain number of points is needed for various purposes. A social security card can be used as such. For example, when we go to get a drivers license, you can bring an ATM Card, Passport, Utility Bill, SS Card (as examples) for ID. Each of those has a different value (passport high, utility bill low). They add the values you present and they have to be above a threshold.
The information in telephone books is public. so are postal change-of-address records. So are records of the ownership of real estate. So are vital statistics such as birth records. So are voter registration lists -- i myself purchased a voter registration list (in digital form) for a municipality which showed people's names, addresses, and the years when they voted, when I was a political candidate for local office in NJ. It cost about $100. I believe that many states also make driver's license information available for a fee to marketers. Credit records are available for certain limited purposes, also. No doubt there are other public sources I haven't thought of. If such a site relies on public records, or other publicly available data, it is not illegal. Many such sites offer to remove names on an opt-out basis, but there is no legal requirement that sites do so. This kind of information is not considered nto be "private facts" under US tort law. Aside from opting out, if the sites provide that option, I don't think you have any recourse. One could ask the local legislature to pass a law prohibiting such sites, or making them require consent, similar to the GDPR that the EU has. But I don't know of any such law in the US to date.
Verifying the identity of the person making an SAR is a requirement (for fairly obvious reasons) but there's no specified way this is to be done. As the ICO puts it: If you’re not sure the requester is who they say they are, you must check this quickly. You shouldn’t ask for formal ID unless it’s necessary and proportionate. Instead, you could ask questions that only they would know, about reference numbers or appointment details for example. Or you can ask for ID that you can actually verify. There’s little point insisting on photo ID if you don’t know what the requester looks like – it should be proportionate. The key word to take account of here is &quot;proportionate&quot; - and this is going to hinge on not just the data the SAR is asking for but the type of data that the Data Controller/Processor is handling. A police force is likely to be storing far more sensitive data about the data subject than e.g. a retailer and you'd expect a more robust identification process. The fact that the law doesn't specify ID requirements is what will lead to different organisations having different requirements - they've ultimately had a large amount of leeway in determining what is appropriate themselves, and that leads naturally to variation. In general terms (rather than specifically for SARs) requiring two forms of ID is not uncommon, it does after all increase the security of the process. Pick-pocketing someone's wallet will often get you their driver's license but it will rarely get their wallet and their recent utility bill. Successfully intercepting a utility bill won't get you their driver's license. It's not perfect but it raises the difficulty of circumventing the check. Are there rules on what requirements may be deemed unlawfully or excessively onerous as preconditions for complying with a SAR? If Bob feels the ID requirements are too extreme they can complain to the ICO and if they agree they can &quot;advise&quot; the data controller to ease up on the requirements and if this fails to reach a satisfactory outcome Bob ca take legal action - but I doubt the examples given would raise any concern. Even the two-forms level is only on a par with the requirements many agencies have for renting a car. why do they need your address (and what if you are a vagabond/nomad with NFA?) In addition to the ID-aspects having your address may be necessary in terms of communicating with you regarding the SAR. If you're someone of no fixed address this requirement may provide difficulties of course - but SARs are by no means unique in this regard. Talking to the data controller and seeing if they would be willing to accept either an alternative second form of ID or waiving the requirement altogether would be the logical first step in such circumstances.
Social Security numbers are called Social Security numbers because were invented to implement the Social Security Act of 1935, which was one of the important programs adopted by Congress as part of the New Deal during the Great Depression. These individual identifying numbers made it easier for the government to compile and collate information about the payroll taxes on the wages and salaries of workers potentially entitled to Social Security benefits which was (and is) collected by employers to pay for Social Security benefits. Compiling this data was necessary because under the Act one's lifetime history of Social Security payroll taxation history is used to determine if you, or your dependents, are eligible for Social Security benefits at all, and if so, to determine how big the benefit check should be according to formulas adopted by the government agency administering the program. This agency is now called the Social Security Administration. But, this agency has been relocated in the federal government bureaucracy now and then since the Act was passed in 1935 as part of general reorganizations of the federal government bureaucracy. Keep in mind that all of this data collection and collation was done by hand. Computers adequate to assist government agencies in administering government programs wouldn't come into being for another thirty years. The &quot;security&quot; referenced is the economic security that the Social Security Act of 1935 provided to elderly people, widows, and orphans. Before the Social Security Act was adopted, the elderly, widows, and orphans, who often lacked the ability to earn a living wage in the economic marketplace, routinely faced extremely high poverty rates, and employer survivor's and disability benefits were uncommon. In time, Social Security numbers began to be used as a tool for the government to identify people for purposes other than administering the Social Security Act, such as for purposes of administering state and federal income taxes. But, by then, the name &quot;Social Security number&quot; for these identifying numbers originally used to administer the Social Security program was already firmly established.
You're misreading the law. You need to keep reading the section you referenced (emphasis added): The disclosure...shall be made in writing and delivered through the consumer’s account with the business, if the consumer maintains an account with the business, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with the business Thus, the option to have the disclosure sent by mail only applies to consumers who do not have an account with the business. Since presumably a large number of sites only maintain personal information for users with accounts, such sites need not provide a mail option. Further, it doesn't say there needs to be a button: you just need the ability to say you'd like it mailed to you in the request somehow, and then they need to comply when you do.
Generally, yes, you do have to have 10 years of work for Medicare, though the formula is based on "credits" and is a bit more complicated. See https://www.ssa.gov/planners/credits.html#h1. It can in some cases be possible to "count" overseas work towards eligibility, due to agreements with certain countries. See https://www.ssa.gov/planners/retire/international.html. However, according to the Agreement Pamphlet for Japan: Although the agreement between the United States and Japan allows the Social Security Administration to count your Japanese credits to help you qualify for U.S. retirement, disability or survivor benefits, the agreement does not cover Medicare benefits. As a result, we cannot count your credits in Japan to establish entitlement to free Medicare hospital insurance. Note: I am also not in the legal profession, which is also the case for most people on this site. Even of those who are lawyers, they're not your lawyers, and nothing you see on this site is legal advice.
Your question lacks some details. So you registered a domain name, and later find someone else used that domain name (in the past) for a hobby website? Then no, you don't need to worry about it. If that person has a current trademark on the name used in the domain name, and your website provides/sells products or services in the same area, then you could have a problem. But that doesn't sound like it's the issue.
Yes. It is legal for them to do so. Also, they are often required, by their insurers and lawyers, if not as a matter of law, to maintain them for seven years in most cases, so that the information is available if a lawsuit arises from any of their dealings with you (e.g. if they receive notice of a lawsuit involving a Zipcar you were allegedly using or had under your control at the time of an accident, or if there is a class action lawsuit over alleged breach of contract or consumer laws involving their charges to you). There are virtually no circumstances, with the possible exception of certain credit card account information, when someone has a duty to destroy records maintained about you under U.S. law. In this particular instance, everything on your driver's license is a matter of public record in any case, so your privacy interest is reduced for this reason as well.