                                 CODE OF VIRGINIA

RESTRICTED USE OF SOCIAL SECURITY NUMBERS (§ 59.1-443.2)

A. Except as otherwise specifically provided by law, a person shall not:

   1. Intentionally communicate another individual&#8217;s social security number
   to the general public;

   2. Print an individual&#8217;s social security number on any card required for
   the individual to access or receive products or services provided by the
   person;

   3. Require an individual to use his social security number to access an
   Internet website, unless a password, unique personal identification number or
   other authentication device is also required to access the site; or

   4. Send or cause to be sent or delivered any letter, envelope, or package that
   displays a social security number on the face of the mailing envelope or
   package, or from which a social security number is visible, whether on the
   outside or inside of the mailing envelope or package.

B. This section does not prohibit the collection, use, or release of a social
security number as permitted by the laws of the Commonwealth or the United
States, or the use of a social security number for internal verification or
administrative purposes unless such use is prohibited by a state or federal
statute, rule, or regulation.

C. In the case of any (i) health care provider as defined in &#xA7; 8.01-581.1,
(ii) manager of a pharmacy benefit plan, (iii) insurer as defined in &#xA7;
38.2-100, (iv) corporation providing a health services plan, (v) health
maintenance organization providing a health care plan for health care services,
or (vi) contractor of any such person, the prohibition contained in subdivision
2 of subsection A shall become effective on January 1, 2006.

D. This section shall not apply to public bodies as defined in &#xA7; 2.2-3701.

E. No person shall embed an encrypted or unencrypted social security number in
or on a card or document, including, but not limited to, using a bar code, chip,
magnetic strip, or other technology, in place of removing the social security
number as required by this section.

HISTORY: 2005, c. 640; 2008, cc. 562, 820.