May 25, 2004

The Honorable Thomas V. Mike Miller, Jr.
Senate President
State House
Annapolis, MD 21401

Dear Mr. President:

In accordance with Article II, Section 17 of the Maryland Constitution, today I have vetoed Senate Bill 117 - Consumer Protection - Privacy of Social Security Numbers.

Senate Bill 117 prohibits a person other than a unit of State or local government from publicly posting or displaying an individual's social security number. It further prohibits printing of an individual's social security number on a card required to access products and service or requiring an individual to transmit his or her social security number over the Internet without a secure connection and encryption protection. In addition, the bill prohibits requiring individuals from using their social security number to access an internet website unless some other unique personal identification or authentication device is also used. The bill does not apply to any requirement to use or release an individual's social security number pursuant to State or federal law, nor does it apply to inclusion of a social security number in certain documents sent via traditional mail or relating to property interests. Prior to January 1, 2005, a person that uses a social security number in a manner prohibited by Senate Bill 117 may continue to do so if the use is continuous or notice is given of the right to stop the use of the social security number. Finally, the bill applies to all health insurance policies issued, delivered or renewed on or after January 1, 2005. Health insurance policies or contracts in effect before January 1, 2005, must be in compliance by January 1, 2006.

This legislation has the laudable goal of protecting the privacy of a person's social security number. Widespread use of social security numbers for identification has created a society subject to a proliferation of identity theft crimes. One section of the bill, however, makes it more difficult for consumers to transact businesses with their insurers. An insurer can only include an individual's social security number in documents sent by mail. Insurers are specifically prohibited from using electronic mail (even if there is a secure connection and the SSN is encrypted) and facsimile transmissions.

Insurers uniformly use e-mail and facsimile transmissions to transact business with consumers at their request and to prohibit this practice would cause undue hardship on Maryland consumers. For example, the insurer United Services Automobile Association (USAA) primarily deals with servicemen and women who are deployed and often have changing needs with respect to life insurance and other insurance products. Prohibiting the use of a social security number for identification via e-mail or facsimile will substantially inconvenience military personnel who are often deployed in areas where traditional mail is not timely. Often, the processing of an application is time-sensitive for these individuals who are deployed in the service of their country. The importance of using one's social security number for identification under these circumstances was highlighted by USAA, which pointed out that there are 1,800 USAA members named "David Johnson".

Moreover, California adopted a statute restricting the use of social security numbers for identification purposes in 2002 that has become the industry standard. This statute allows the use of e-mail and facsimile to permit an insurer to transmit an individual's social security number via e-mail if it is over a secure connection and encrypted. Given the absence of a federal law and the fact that insurers such as USAA deal in multiple states, it is critical that Maryland's law comports with the laws of other states.

For the above stated reasons, I have vetoed Senate Bill 117.

Very truly yours,
Robert L. Ehrlich, Jr.
Governor