1. Home
  2. Sensitive Data Guide
  3. Attorney/Client Privileged Information

Social Security Numbers

Data Classification Level: High

Key: Permission Levels

  • Permitted
  • Permitted with Information Assurance (IA) Consultation
  • Not Permitted

For IA consultation, please contact the ITS Service Center

Protecting sensitive data is a shared responsibility. You are responsible for ensuring that your use of permitted services complies with laws, regulations, and policies where applicable.

Permitted

Permitted with IA Consultation

Not Permitted

Data Type Description 

Social Security numbers are unique, nine-digit numbers issued to U.S. citizens, permanent residents, and temporary (working) residents for taxation, Social Security benefits, and other purposes. Social Security numbers are a primary target for identity thieves. While Social Security numbers are a type of Personally Identifiable Information (PII), the legal requirements for protecting them are much more stringent than for other PII. U-M has not used Social Security numbers as identifiers for students and employees since 2004.

Data Steward: HR Records & Information Services

Examples 

  • Numbers in this format: 123-45-6789
  • Tax forms (W-2, W-4, W-9, 1099, and so on) that require Social Security numbers
  • Taxpayer Identification Number—issued by the Social Security Administration or the Internal Revenue Service (IRS)
  • Employer Identification Number—issued by the IRS

Laws/Regulations/Policies 

Michigan Social Security Number Privacy Act
Michigan Identity Theft Protection Act, MCL 445.63
Social Security Number Privacy and Protection (DS - 10)
Andrew File System (AFS): 
Not Permitted
BlueJeans Video Conferencing: 
Not Permitted
Canvas: 
With Approval
Cloud Storage Included with Software: 
Not Permitted
CTools: 
With Approval
Data Warehouse: 
Permitted
Desktop Backup (Powered by CrashPlan): 
With Approval
MiDesktop: 
With Approval
Digital Signage: 
Not Permitted
Echo360 - Lecture Capture and LectureTools: 
Not Permitted
eResearch: 
Not Permitted
Flux: 
With Approval
Globus: 
With Approval
ITS Exchange Email and Calendar: 
With Approval
Amazon Web Services GovCloud at U-M: 
With Approval
Amazon Web Services (AWS) at U-M: 
With Approval
Box Additional Apps (Non-Core): 
Not Permitted
Box at U-M Core Apps: 
With Approval
Google Non-Core Services: 
Not Permitted
Google Drive at U-M: 
Not Permitted
Google Mail and Calendar at U-M and Inbox by GMail: 
With Approval
Google at U-M Core Services: 
Not Permitted
MiDatabase: 
With Approval
MiServer: 
With Approval
MiShare: 
Permitted
MiStorage with CIFS: 
With Approval
MiStorage with NFS: 
Not Permitted
MiVideo: 
Not Permitted
MiWorkspace: 
With Approval
Personal Accounts (Dropbox, OneDrive, iCloud, etc.): 
Not Permitted
Personally Owned Devices (phone, tablet, laptop, etc.): 
With Approval
Qualtrics: 
With Approval
ServiceLink: 
With Approval
Statistics and Computation Service: 
Not Permitted
MiBackup: 
Permitted
Turbo Research Storage with NFS: 
Not Permitted
Turbo Research Storage with NFSv4+Kerberos or CIFS: 
With Approval
Michigan Medicine Exchange/Outlook Email and Calendar: 
With Approval
Armis: 
With Approval
Imaging Services: 
Permitted
SignNow at U-M (E-Signature): 
Permitted
Piazza Q&A: 
Not Permitted
Dedoose: 
Not Permitted
Gradescope: 
Not Permitted
Electronic Research Notebook at U-M: 
Not Permitted
Microsoft Azure at U-M: 
With Approval
Google Cloud Platform at U-M: 
With Approval
Perusall: 
Not Permitted