One question we frequently get asked about the CHIME National Patient ID Challenge is: Why can’t we use the Social Security Number (SSN) as a patient identifier?
Identify theft is one of the fastest growing crimes in the nation and has a devastating impact on victims. According to a 2014 Pew Research Center report, 18 percent of adults who used the internet reported having important personal identity stolen, including their SSN. Looking at adults ages 18-29, who are typically more active online, 15 percent reported some form of identity theft, up from 7 percent the previous year.
As collection and use of SSNs by various government and industry sectors has grown over the decades, so too have concerns about vulnerabilities. “The routine and often indiscriminate use of SSNs as identifiers creates opportunities for individuals to inappropriately obtain personal information,” according to the Social Security Administration. “Repetitive use and disclosure of SSNs in organizational record keeping systems, multiplies the susceptibility of persons to potential identity theft. Through misuse of SSNs, individuals are subject to the danger of identity theft and its repercussions. Access to an individual’s SSN can enable an identity thief to obtain information that can result in significant financial difficulties for the victim. While this can be disruptive for the individual, it can also lead to civil liability for the organization and its individual employees if someone is harmed by information that has been made available to others.”
While somewhat dated, the National Conference on State Legislatures in 2010 reported that one quarter of state legislatures were eyeing ways to limit the use of SSNs.
Two core tenets of the National Patient ID Challenge are that the winning solution protect patient privacy and be secure. CHIME is firmly committed to finding a solution that protects a patient’s identify even if a data breach occurs. Exposing SSNs to potential theft is an unacceptable risk.
Here are some additional resources about the risks and limitations of using SSNs as a patient identifier:
- American Health Information Management Association: Limiting the Use of the Social Security Number in Healthcare
- Slate: No, You Can’t Have My Social Security Number
- Government Accountability Office: More Could be Done to Protect SSNs
- Office of the National Coordinator: Patient Identification and Patient Matching Final Report
- Department of Veterans Affairs policy directive to reduce use of SSNs
