What Social Security Does With Your Data

Social Security collects and stores sensitive information about you: your name, Social Security number, earnings history, medical records (if you receive disability), bank account details, and family relationships. The agency uses this data to calculate your benefits, verify your identity, and detect fraud. Social Security does not sell your information to private companies, but it does share it with other government agencies and, in limited cases, with third parties you authorize.

The rules governing what Social Security can do with your data come from federal law, primarily the Privacy Act of 1974 and the Social Security Act itself. These laws set boundaries on collection, use, and disclosure. Understanding these boundaries matters because Social Security's data practices directly affect what information about you enters other government systems and who can access it.

Key Takeaways

  • Social Security shares your information with other federal agencies (IRS, Veterans Affairs, state child support offices) without asking your permission first, as required by law.
  • You have the right to see what information Social Security holds about you by requesting your Personal Earnings and Benefit Estimate Statement or submitting a Privacy Act request.
  • Social Security will not release information to private companies, employers, or creditors without your written consent, with narrow exceptions for law enforcement.
  • If you believe Social Security has misused your data or denied you access to your records, you can file a complaint with the agency's Privacy Officer or pursue a Privacy Act claim in federal court.

Which Government Agencies Receive Your Social Security Data

Social Security routinely shares your information with other federal and state agencies without requiring your permission. The IRS receives your earnings records to verify income for tax purposes. The Department of Veterans Affairs gets your data to determine veteran benefits. State child support enforcement offices receive information to locate parents who owe support. The Department of Homeland Security accesses your records during immigration proceedings. Medicare and Medicaid programs use your Social Security number to coordinate benefits.

State agencies also receive your data. Your state's unemployment office gets wage information to verify claims. Your state's Medicaid program receives data to determine financial need. Your state's education agency may receive information related to student loan programs. These transfers happen automatically under data-sharing agreements between Social Security and these agencies. You do not sign a form authorizing each individual transfer — the authority comes from the statutes that created these programs.

Social Security publishes a list of agencies and purposes in its System of Records Notice (SORN), available on the Social Security Administration website. The SORN describes what data flows where and why. If you want to know the full scope of sharing, that document is the authoritative source, though it is written in legal language.

When Social Security Shares Data With Private Companies and Third Parties

Social Security does not routinely share your information with private companies, banks, insurance firms, or employers. However, the agency will disclose information to third parties if you sign a written authorization form. Common scenarios include: you authorize a representative payee (someone managing your benefits) to receive information about your account; you authorize a lawyer or advocate to discuss your case; you authorize a financial institution to verify your benefit amount for a loan application.

Law enforcement can obtain your information through a court order, subpoena, or warrant. Social Security will comply with these legal demands. Additionally, if you are involved in a criminal investigation or prosecution, Social Security may disclose information to federal, state, or local law enforcement without your consent. The agency has a specific process for handling these requests and maintains records of disclosures made to law enforcement.

Scammers and identity thieves often pose as Social Security representatives to trick you into revealing personal information. Social Security itself will not call you unsolicited, text you, or email you asking for your number, password, or financial details. If someone contacts you claiming to represent Social Security and asking for sensitive information, that is a fraud attempt.

How to Access Your Own Social Security Records

You have a legal right to see what information Social Security holds about you. The fastest way is to create an account on ssa.gov and view your Personal Earnings and Benefit Estimate Statement online. This statement shows your earnings history, estimated benefits, and basic account information. You can create an account using your email, phone number, and Social Security number. The process takes about 10 minutes.

If you prefer not to use an online account, you can request your records in writing using Social Security's Privacy Act Request form. Mail the completed form to the Social Security Administration, Office of the Inspector General, Privacy Officer, 6401 Security Boulevard, Baltimore, MD 21235. Include your name, Social Security number, date of birth, and a description of the records you want to see. Social Security must respond within 30 days, though complex requests may take longer.

You can also visit a local Social Security office in person and request to see your file. Bring a photo ID and your Social Security card. Staff will help you review your records on site. This option works well if you want to ask questions about specific entries while you are looking at them.

What to Do If You Find Errors or Unauthorized Disclosures

If you discover an error in your Social Security records — wrong earnings, incorrect benefit amount, inaccurate personal information — contact Social Security immediately. Call 1-800-772-1213 (TTY 1-800-325-0778) or visit your local office. Bring documentation supporting the correction: W-2 forms for earnings errors, marriage certificate for name changes, or other relevant records. Social Security will investigate and correct the error if it is valid.

If you believe Social Security disclosed your information without authorization or in violation of privacy law, file a complaint with the agency's Privacy Officer. Write to: Social Security Administration, Office of the Inspector General, Privacy Officer, 6401 Security Boulevard, Baltimore, MD 21235. Include your name, Social Security number, a description of what happened, and copies of any relevant documents. The Privacy Officer will investigate and respond within 30 days.

You also have the right to file a Privacy Act claim in federal district court if Social Security violates your privacy rights and causes you harm. These cases are rare and require proving both a violation and actual damages. Consult an attorney if you believe you have grounds for a lawsuit.

Data Security Measures Social Security Uses

Social Security stores your data in secure databases with access controls and encryption. Employees who handle your information must pass background checks and sign confidentiality agreements. The agency uses multi-factor authentication for online accounts and monitors for suspicious activity. Social Security's computer systems are regularly audited for security vulnerabilities.

Despite these protections, data breaches can occur. In 2015, Social Security disclosed that hackers had obtained Social Security numbers and other personal information on roughly 21.5 million people through the Office of Personnel Management database (not Social Security's own systems). Social Security itself has experienced smaller breaches. If a breach occurs, Social Security notifies affected individuals and offers credit monitoring services.

You can strengthen your own account security by creating a strong password, enabling multi-factor authentication on your ssa.gov account, and monitoring your earnings record for unauthorized changes. If you suspect someone has accessed your account without permission, call Social Security immediately and request a password reset.

Your Rights Under Privacy Laws

The Privacy Act of 1974 gives you four main rights regarding federal records about you. First, you have the right to know what information the government collects and maintains about you. Second, you have the right to see that information and get a copy. Third, you have the right to request correction of inaccurate information. Fourth, you have the right to know who has accessed your records and why.

The Social Security Act adds specific protections. Social Security cannot disclose your number for purposes unrelated to Social Security, Medicare, or other federal programs unless you consent in writing. Your Social Security number cannot be used as a general identifier by private businesses without your permission. State and local governments have restrictions on how they can use your number.

These rights are not absolute. Social Security can withhold information in certain circumstances: if disclosure would interfere with an ongoing investigation, if releasing information would harm national security, or if the information is protected by attorney-client privilege. If Social Security denies your request for records, the agency must explain the reason in writing.

Frequently Asked Questions

Can Social Security share my information with my employer?

No, not without your written consent. Your employer cannot contact Social Security to verify your benefits or earnings. However, if your employer is your representative payee (managing your benefits because you are unable to), they receive information about your account as part of that role. You can revoke a representative payee arrangement at any time.

What happens if I think someone stole my Social Security number?

Contact Social Security immediately at 1-800-772-1213 and report the theft. Also file a report with the Federal Trade Commission at identitytheft.gov and consider placing a fraud alert or credit freeze with the three major credit bureaus. Monitor your Social Security earnings record for unauthorized work history entries. Social Security can help you correct your record if fraudulent earnings appear.

Does Social Security sell my data to advertisers or data brokers?

No. Social Security does not sell your information to any private company for any reason. The agency shares data only with government agencies (as required by law) or with third parties you authorize in writing. Data brokers and advertisers cannot purchase Social Security records.

Can I opt out of data sharing with other government agencies?

No. The data sharing between Social Security and other federal and state agencies is required by law. You cannot prevent the IRS, Veterans Affairs, or state child support offices from receiving your information. However, you can limit sharing with private third parties by not signing authorization forms.

How long does Social Security keep my records?

Social Security maintains your earnings record for your lifetime and beyond. After you die, the agency keeps records for administrative purposes and to serve your survivors. There is no automatic deletion date. You can request that certain information be corrected or removed if it is inaccurate, but routine records are retained indefinitely.