2006 Code of Virginia § 59.1-443.2 - Restricted use of social security numbers.

59.1-443.2. Restricted use of social security numbers.

A. Except as otherwise specifically provided by law, a person shall not:

1. Intentionally communicate an individual's social security number to thegeneral public;

2. Print an individual's social security number on any card required for theindividual to access or receive products or services provided by the person;

3. Require an individual to use his social security number to access anInternet website, unless a password, unique personal identification number orother authentication device is also required to access the site; or

4. Send or cause to be sent or delivered any letter, envelope, or packagethat displays a social security number on the face of the mailing envelope orpackage, or from which a social security number is visible, whether on theoutside or inside of the mailing envelope or package.

B. This section does not prohibit the collection, use, or release of a socialsecurity number as permitted by the laws of the Commonwealth or the UnitedStates, or the use of a social security number for internal verification oradministrative purposes unless such use is prohibited by a state or federalstatute, rule, or regulation.

C. In the case of any (i) health care provider as defined in 8.01-581.1,(ii) manager of a pharmacy benefit plan, (iii) insurer as defined in 38.2-100, (iv) corporation providing a health services plan, (v) healthmaintenance organization providing a health care plan for health careservices, or (vi) contractor of any such person, the prohibition contained insubdivision 2 of subsection A shall become effective on January 1, 2006.

D. This section shall not apply to (i) public bodies as defined in 2.2-3701or (ii) records required by law to be open to the public, and shall not beconstrued to limit access to records pursuant to the Virginia Freedom ofInformation Act ( 2.2-3700 et seq.).

E. No person shall embed an encrypted or unencrypted social security numberin or on a card or document, including, but not limited to, using a bar code,chip, magnetic strip, or other technology, in place of removing the socialsecurity number as required by this section.

(2005, c. 640.)