UA posts portions of SSNs on Internet

"I think the last four numbers could be dangerous to the student," said Sam Leyvas, executive director of Arizona Students Association.

The University of Arizona allows professors to display partial Social Security numbers, coupled with test scores and grades in some cases, on unprotected Internet websites.

"It is not illegal to use a part of the Social Security number," said UA attorney Michael Proctor. "(But) I encourage professors to use a different number because of the sensitivity surrounding Social Security numbers."

He said the postings do not violate the Family Education Rights and Privacy Act, which governs the use of personally-identifiable information including Social Security numbers.

But The Arizona House of Representatives supported Leyvas' arguments yesterday by passing a bill 51-4 that mandates universities abandon the use of Social Security numbers by 2001.

The bill allows universities to use Social Security numbers for tax purposes for student employees and financial aid. About two-thirds of the student population receive some sort of financial assistance, said UA Financial Aid Director Phyllis Bannister.

"That tends to put many students in the position that they have to use their Social Security numbers," she said.

The UA has started moving away from the use of Social Security numbers, Bannister said, but the change will take more than two years. The university is accepting bids to convert current database systems to use random ID numbers.

"We certainly are moving in the direction of this legislation," Bannister said.

Boston University in the fall stopped using the last four SSN digits to post grades.

"We did it to protect student privacy," said Melissa Janot, assistant BU university registrar. "A lot of students didn't want to use their Social Security number."

According to the Federal Bureau of Investigation, identity theft is the number one growing category of crime.

Many banks and credit card companies use the last four digits of Social Security numbers as security codes to access accounts. Someone in possession of the final four numbers could change an address or order convenience checks from a credit card company, Leyvas said.

"That's how easy it is," he said. "It's even worse for credit cards (because anyone) could start making charges on the account. I'm sure there's a lot more that can be done."

Banks use the last four digits to authorize changes in accounts, said Steve Roman, a spokesman for Bank One.

"To prove that that is their account, we ask for the last four digits of the Social Security number," he said. "We are not aware of any negative effects."

Bank of America, however, changed their policy several months ago and assigned customers a random number.

"We've realized that that (using Social Security numbers) poses a security concern," said Lance Santana, Bank of America's customer service supervisor. "Prior to the change, Bank of America used that number because it was a known identifier."

Leyvas said students should be especially concerned because Social Security numbers are so widely used on campus.

"(For) a regular person on the street it's not as much of a concern," he said. "But university students have a much greater concern."