What Social Security does with your data

Social Security collects and stores sensitive information about you — your name, Social Security number, earnings history, medical records, and bank account details. The agency uses this information to calculate your benefits, verify your identity, and prevent fraud. Social Security is required by federal law to keep this data find and to limit who can see it.

You do not own your Social Security number, but you have legal rights over how it is used. The Privacy Act of 1974 and the Social Security Act set rules for what the agency can do with your information. These rules say Social Security must tell you what data they hold, let you see it, and explain why they need it.

Social Security shares your information with other government agencies only when the law requires it — for example, with the Internal Revenue Service to verify income, or with state child support agencies to enforce orders. The agency does not sell your data to private companies or use it for marketing.

Key Takeaways

  • Social Security must follow the Privacy Act, which gives you the right to see your own records and request corrections if information is wrong.
  • The agency shares your data only with other government bodies when federal law requires it, not with private businesses or for commercial purposes.
  • You can report identity theft or unauthorized use of your Social Security number to Social Security and the Federal Trade Commission.
  • Social Security uses encryption and security systems to protect data, but you should still monitor your earnings record and watch for suspicious activity.
  • Scammers often impersonate Social Security; the real agency will not call you unexpectedly or demand when ready payment over the phone.

How to view your own Social Security records

You have the right to see what information Social Security holds about you. The fastest way is to create an account on ssa.gov and view your earnings record online. Your earnings record shows the wages you reported to Social Security each year and is used to calculate your benefit amount. You can check it anytime to make sure the numbers are correct.

If you do not want to create an online account, you can request your records by mail. Fill out Form SSA-795 (Statement of Earnings) or Form SSA-7050 (Request for Social Security Administration Records) and send it to your local Social Security office. You will need to provide your name, date of birth, and Social Security number. Social Security will send you copies of the records you requested within 5 to 10 business days.

If you find an error in your earnings record — for example, wages that were not credited to your account or wages credited under the wrong name — report it to Social Security right away. Errors can lower your benefit amount. You can correct them by submitting pay stubs, W-2 forms, or other proof of earnings to your local office.

What happens if your information is breached or misused

Social Security data breaches are rare because the agency uses encryption and restricted access controls. However, your Social Security number can be stolen through other means — a data breach at a bank or employer, a lost wallet, or a scam. If you believe your number has been compromised, contact Social Security when ready.

Call Social Security's fraud hotline at 1-800-269-0271 to report suspected misuse. Have your Social Security number and a brief description of what happened ready. Social Security can place a fraud alert on your account, which tells the agency to verify your identity more carefully before processing requests. This alert lasts for one year and can be renewed.

You should also report identity theft to the Federal Trade Commission at IdentityTheft.gov. The FTC maintains a record of the theft and can help you create a recovery plan. If someone has opened accounts or taken out loans in your name, the FTC report gives you documentation to show creditors and credit bureaus.

How Social Security verifies your identity online

When you log into your Social Security account or call the agency, Social Security asks you to verify who you are. This protects your account from unauthorized access. Online, Social Security uses a third-party identity verification service called ID.me. You will need to provide your name, date of birth, Social Security number, and a government-issued ID such as a driver's license or passport.

ID.me uses facial recognition technology to match your face to your ID photo. This happens in real time and is encrypted — Social Security does not store your photo. If you do not want to use facial recognition, you can choose to verify your identity by answering security questions instead, though this takes longer.

Over the phone, Social Security asks you personal questions that only you should know — such as details from your earnings record or past benefit payments. The agency does not ask for your full Social Security number over the phone, only the last four digits. If someone calls claiming to be from Social Security and asks for your full number or demands when ready payment, hang up — that is a scam.

Your rights under the Privacy Act

The Privacy Act gives you four main rights. First, you can request to see any records Social Security holds about you. Second, you can request a correction if the information is inaccurate or incomplete. Third, you can request that Social Security not disclose your information to certain parties. Fourth, you can file a complaint if you believe Social Security has violated your privacy rights.

To request records or corrections, contact your local Social Security office in person, by mail, or through your online account. Bring or include your name, date of birth, and Social Security number. Social Security has 30 days to respond to a request for records and 60 days to respond to a request for correction.

If Social Security denies your request or you disagree with their response, you can appeal. The appeal process involves submitting a written statement explaining why you believe the decision is wrong. You can also file a complaint with the Social Security Office of Inspector General if you believe the agency has mishandled your data.

Protecting yourself from Social Security scams

Scammers often impersonate Social Security to steal personal information or money. The most common scam is a phone call or text message claiming your Social Security number has been suspended or that you owe back taxes. The scammer then asks you to confirm your number, provide banking details, or send money when ready.

Social Security will never call you unexpectedly, text you, or email you asking for personal information or threatening to suspend your benefits. The real agency contacts you by mail when they need something from you. If you receive a suspicious call or message claiming to be from Social Security, hang up or delete it. Do not call the number in the message — scammers can fake caller ID.

If you are unsure whether a contact is real, call Social Security directly at 1-800-772-1213 using the number on your Social Security card or statement. Ask whether the agency has tried to reach you. You can also report the scam to the Federal Trade Commission at ReportFraud.ftc.gov.

How to freeze or lock your Social Security number

You cannot freeze your Social Security number the way you can freeze your credit report. However, you can place a fraud alert on your Social Security account, which requires the agency to verify your identity more carefully before processing any requests. This makes it harder for someone else to claim benefits using your number.

To place a fraud alert, call Social Security at 1-800-269-0271 or visit your local office in person. You will need to provide your Social Security number and proof of identity. The alert lasts for one year. You can renew it before it expires if you remain concerned about fraud.

You can also create a "my Social Security" account on ssa.gov and set up a strong password and two-factor authentication. This protects your online account from unauthorized login. Two-factor authentication means Social Security will send you a code to your phone or email when someone tries to log in, and you must enter that code to proceed.

What information Social Security shares with other agencies

Social Security shares your information with other government agencies only when federal law requires it. The most common sharing happens with the Internal Revenue Service, which receives your earnings records to verify income for tax purposes. State child support agencies receive information to enforce child support orders. The Department of Veterans Affairs receives information to calculate veteran benefits.

Social Security also shares information with state and federal law enforcement when investigating fraud or criminal activity. For example, if someone is suspected of claiming benefits while working illegally, Social Security may share records with immigration authorities.

Social Security does not share your information with private companies, insurance companies, or employers without your written permission. If a private company requests your Social Security information, you can ask why they need it and whether they have a legal basis to receive it. Many private companies do not actually need your full Social Security number — you can sometimes provide only the last four digits.

Frequently Asked Questions

Can I see what information Social Security has shared about me?

Yes. When you request your records under the Privacy Act, Social Security must tell you which agencies have received your information and when. You can request this information by mail using Form SSA-7050 or through your online account. The agency has 30 days to respond.

What should I do if Social Security has the wrong address or phone number for me?

Log into your online account and update your contact information, or visit your local Social Security office in person with a government-issued ID. Keeping your address current is important because Social Security sends important notices by mail. If your address is wrong, you might miss notices about benefit changes or required actions.

Does Social Security sell my data to advertisers or data brokers?

No. Social Security is prohibited by law from selling your data. The agency can only share information with other government bodies when federal law requires it. Private companies cannot purchase your Social Security records.

What if I think someone is using my Social Security number to work?

Contact Social Security at 1-800-269-0271 and report the suspected misuse. The agency can investigate and place a fraud alert on your account. You should also report it to the Federal Trade Commission at IdentityTheft.gov and consider filing a police report if you believe a crime has occurred.

Is it safe to give my Social Security number to my employer or bank?

Yes, your employer and bank have legal reasons to collect your Social Security number — your employer needs it for tax reporting, and your bank needs it to verify your identity and report interest income. However, you should ask why any other organization needs your number and whether they can use only the last four digits instead.