§ 59.1-443.2. Restricted use of social security numbers.
A. Except as otherwise specifically provided by law, a person shall not:
1. Intentionally communicate another individual's social security number tothe general public;
2. Print an individual's social security number on any card required for theindividual to access or receive products or services provided by the person;
3. Require an individual to use his social security number to access anInternet website, unless a password, unique personal identification number orother authentication device is also required to access the site; or
4. Send or cause to be sent or delivered any letter, envelope, or packagethat displays a social security number on the face of the mailing envelope orpackage, or from which a social security number is visible, whether on theoutside or inside of the mailing envelope or package.
B. This section does not prohibit the collection, use, or release of a socialsecurity number as permitted by the laws of the Commonwealth or the UnitedStates, or the use of a social security number for internal verification oradministrative purposes unless such use is prohibited by a state or federalstatute, rule, or regulation.
C. In the case of any (i) health care provider as defined in § 8.01-581.1,(ii) manager of a pharmacy benefit plan, (iii) insurer as defined in §38.2-100, (iv) corporation providing a health services plan, (v) healthmaintenance organization providing a health care plan for health careservices, or (vi) contractor of any such person, the prohibition contained insubdivision 2 of subsection A shall become effective on January 1, 2006.
D. This section shall not apply to public bodies as defined in § 2.2-3701.
E. No person shall embed an encrypted or unencrypted social security numberin or on a card or document, including, but not limited to, using a bar code,chip, magnetic strip, or other technology, in place of removing the socialsecurity number as required by this section.
§ 59.1-443.2. Restricted use of social security numbers.
A. Except as otherwise specifically provided by law, a person shall not:
1. Intentionally communicate another individual's social security number tothe general public;
2. Print an individual's social security number on any card required for theindividual to access or receive products or services provided by the person;
3. Require an individual to use his social security number to access anInternet website, unless a password, unique personal identification number orother authentication device is also required to access the site; or
4. Send or cause to be sent or delivered any letter, envelope, or packagethat displays a social security number on the face of the mailing envelope orpackage, or from which a social security number is visible, whether on theoutside or inside of the mailing envelope or package.
B. This section does not prohibit the collection, use, or release of a socialsecurity number as permitted by the laws of the Commonwealth or the UnitedStates, or the use of a social security number for internal verification oradministrative purposes unless such use is prohibited by a state or federalstatute, rule, or regulation.
C. In the case of any (i) health care provider as defined in § 8.01-581.1,(ii) manager of a pharmacy benefit plan, (iii) insurer as defined in §38.2-100, (iv) corporation providing a health services plan, (v) healthmaintenance organization providing a health care plan for health careservices, or (vi) contractor of any such person, the prohibition contained insubdivision 2 of subsection A shall become effective on January 1, 2006.
D. This section shall not apply to public bodies as defined in § 2.2-3701.
E. No person shall embed an encrypted or unencrypted social security numberin or on a card or document, including, but not limited to, using a bar code,chip, magnetic strip, or other technology, in place of removing the socialsecurity number as required by this section.
§ 59.1-443.2. Restricted use of social security numbers.
A. Except as otherwise specifically provided by law, a person shall not:
1. Intentionally communicate another individual's social security number tothe general public;
2. Print an individual's social security number on any card required for theindividual to access or receive products or services provided by the person;
3. Require an individual to use his social security number to access anInternet website, unless a password, unique personal identification number orother authentication device is also required to access the site; or
4. Send or cause to be sent or delivered any letter, envelope, or packagethat displays a social security number on the face of the mailing envelope orpackage, or from which a social security number is visible, whether on theoutside or inside of the mailing envelope or package.
B. This section does not prohibit the collection, use, or release of a socialsecurity number as permitted by the laws of the Commonwealth or the UnitedStates, or the use of a social security number for internal verification oradministrative purposes unless such use is prohibited by a state or federalstatute, rule, or regulation.
C. In the case of any (i) health care provider as defined in § 8.01-581.1,(ii) manager of a pharmacy benefit plan, (iii) insurer as defined in §38.2-100, (iv) corporation providing a health services plan, (v) healthmaintenance organization providing a health care plan for health careservices, or (vi) contractor of any such person, the prohibition contained insubdivision 2 of subsection A shall become effective on January 1, 2006.
D. This section shall not apply to public bodies as defined in § 2.2-3701.
E. No person shall embed an encrypted or unencrypted social security numberin or on a card or document, including, but not limited to, using a bar code,chip, magnetic strip, or other technology, in place of removing the socialsecurity number as required by this section.
