[Congressional Record Volume 142, Number 138 (Monday, September 30, 1996)]
[Extensions of Remarks]
[Page E1842]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]




   INTRODUCTION OF THE SOCIAL SECURITY ONLINE PRIVACY PROTECTION ACT

                                 ______
                                 

                            HON. BOB FRANKS

                             of new jersey

                    in the house of representatives

                      Saturday, September 28, 1996

  Mr. FRANKS of New Jersey. Mr. Speaker, I was deeply concerned to 
learn that several national data base companies provide Social Security 
number information online. A Social Security number is one of the most 
sensitive pieces of information a person can know about another person. 
Although it was not meant to be, a person's Social Security number has 
become something close to a national identification number. It is the 
key to unlock countless sensitive documents about a person, such as 
credit reports, driving records, and court documents.
  In fact, with a person's Social Security number, it is possible to 
steal their identity. With it, a person can obtain a Social Security 
card, and then a driver's license, and then credit cards. That is why 
it is imperative that the confidentiality of Social Security number be 
protected.
  However, on at least two national data bases, Lexis-Nexis' P-Trak and 
the Westlaw data base, it is possible to connect a whole cornucopia of 
information with a Social Security number, such as a name, past 
address, maiden name, and birthdate.
  Industry representatives say these services are not a problem since 
they no longer provide Social Security numbers to searches that are 
begun with a name or address. However, those firms continue to provide 
all the other information on the data base to searches begun with a 
Social Security number--an equally worrisome practice.
  Any unscrupulous individual wanted to steal a new identity could 
easily keypunch any random Social Security number and obtain that 
person's personal information. A thief would not care whose Social 
Security number they have, just that there were able to connect to 
other information. By random searching, such a person could get a 
Social Security card and drivers license.
  I understand that there are many legitimate purposes for these 
services. They are used to find people who skip court appearances, fail 
to pay child support, or need to be notified of changes in pension 
plans. However, these purposes do not necessitate a commercial online 
lookup service containing Social Security numbers. Individuals on these 
data bases also have rights to privacy and protection from abuse.
  My bill would seek to require these services to obtain written 
permission before they can list any person's Social Security number on 
their data base. This legislation would not stop people from searching 
for individuals using public records by traditional means, such as 
doing research in a courthouse. My bill would merely require that in 
order to add this sensitive personal information to online searchable 
indexes, the person whose Social Security number is included would have 
to grant consent.
  Mr. Speaker, I understand there are only a few legislative days left 
in this session. Accordingly I, with 11 of my colleagues, have written 
a letter to the Federal Trade Commission asking them to look into the 
appropriateness of these data bases and to see what actions could be 
taken to suspend these services until a more comprehensive review can 
be accomplished. If the Federal Trade Commission fails to adequately 
address this problem, I will reintroduce this measure in the next 
Congress.

                          ____________________