41 CFR 105-64.105
§ 105-64.105 When may Social Security Numbers (SSNs) be collected?
United States · 41 CFR — Public Contracts and Property Management · Status: effective
Cite this
- Citation
- 41 CFR 105-64.105, § 105-64.105 When may Social Security Numbers (SSNs) be collected?, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/198771
- Permanent ID
ys:prov:198771@1- SHA-256
40d49aeb8e91fb3e536b89873c08b1ef0778ca6ff38ea3b7aa956568d4f2e453
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) Statutory or regulatory authority must exist for collecting Social Security Numbers for record systems that use the SSNs as a method of identification. Systems without statutory or regulatory authority implemented after January 1, 1975, will not collect Social Security Numbers.
(b) In compliance with OMB M-07-16 (Safeguarding Against and Responding to the Breach of Personally Identifiable Information) collection and storage of SSN will be limited to systems where no other identifier is currently available. While GSA will strive to reduce the collection and storage of SSN and other PII we recognize that some systems continue to need to collect this information.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.