The Cavalier Daily
Serving the University Community Since 1890

Keeping ID numbers secure

ASK MOST University students what our student identification numbers are, and we'll rattle them off without a second thought. This struck me recently when I had to submit a paper using only my student identification number for "anonymity" purposes. We make ourselves vulnerable constantly without ever thinking about it, whether logging on to ISIS from a library computer, filling out applications for University services or even swiping into the dining hall when we've forgotten our card. Some of our professors post test scores and grades using our student identification numbers too.

But there's something that makes our identification numbers more sensitive than other information. The University still hasn't moved away from the old and unsafe system of using students' social security numbers as unique identifiers.

According to the Utility Consumers' Action Network, identity theft is on the rise worldwide. Social security number fraud is the leading mode of identity theft. Because social security numbers are so readily available, it is relatively easy for an unauthorized person to gain access to one's bank accounts, credit accounts and other personal information. With only your name and social security number, somebody is also able to open up a new bank and credit card account in your name.

The Federal Educational Rights and Privacy Act of 1974 requires written consent if educational records or personally identifiable information are released. Social security numbers fall under this provision. FERPA applies to any institution receiving federal funding, including state universities. According to the Privacy Rights Clearinghouse, the display of students' social security numbers on identification cards, class rosters or grade listings qualifies as a release of personally identifiable information in violation of FERPA. The 1992 U.S. District Court case Krebs v. Rutgers decided that while social security numbers may be obtained by public universities in order to process financial aid applications or for student employment purposes, the numbers are classified as educational records and may not be used or displayed without consent.

Additionally, public universities are subject to the Privacy Act of 1974, which requires that schools provide a disclosure statement informing students of how their social security numbers are used each time students release them.

Recognizing the dangers of social security fraud, the Virginia General Assembly moved last year to require that randomly-generated identification numbers be assigned to newly obtained and renewed Virginia drivers' licenses. The College of William & Mary began assigning new student identification numbers prior to the fall 2003 semester. Virginia Tech and many other schools across the state give students the option of not using their social security numbers for identification purposes, although they must request it.

The University Registrar's office currently does allow students to request generic identification numbers, although all requests must be approved. However, if you receive federal financial aid, you're out of luck -- at this time, the University does not have a way to separate your social security number and student identification number.

This condition is contradictory; the University's own policy on the disclosure of University records clearly states, "Unless disclosure is required by Federal or State law, no University activity may require persons to disclose their social security numbers for any purpose or in connection with any activity, nor can that University activity refuse, wholly or partially, any service, privilege, or right to those individuals not furnishing that number." Since when did it become federal law that I provide my social security number to check out a library book?

The University ID Card Office is currently investigating the implications of changing to a system-assigned, random-number system. According to Vicky Bradt of the University Office of Business Operations, "Because the student number is used by many of the University's systems and departments, a change in the ID card system cannot be made without first fully understanding all of the possible issues created for the other University systems."

As University of Virginia students, our strong commitment to the honor code sometimes leads to a blind faith in it. Often we do not pause to think about privacy issues because we trust that nobody will take advantage of us. Many students fail to realize that the honor code is only binding to students and does not apply to University administrators, faculty or staff, to whom we often provide this information without hesitation. The fact remains that the University is leaving all of its students vulnerable to identity theft by assigning our social security numbers as student identification numbers.

Todd Rosenbaum's column appears Fridays in The Cavalier Daily. He can be reached at trosenbaum@cavalierdaily.com.

Local Savings

Comments

Latest Video

Latest Podcast

Ahead of Lighting of the Lawn, Riley McNeill and Chelsea Huffman, co-chairs of the Lighting of the Lawn Committee and fourth-year College students, and Peter Mildrew, the president of the Hullabahoos and third-year Commerce student, discuss the festive tradition which brings the community together year after year. From planning the event to preparing performances, McNeil, Huffman and Mildrew elucidate how the light show has historically helped the community heal in the midst of hardship.