41 CFR § 105-64.105

41 CFR · Public Contracts and Property Management

§ 105-64.105 — When may Social Security Numbers (SSNs) be collected?

41 CFR § 105-64.105

TitleTitle 41: Public Contracts and Property Management PartPart 105-64: GSA Privacy Act Rules

SourceeCFR (current through Mar 6, 2026)

This text of 41 C.F.R. § 105-64.105 (When may Social Security Numbers (SSNs) be collected?) is published on Counsel Stack Legal Research, covering United States primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

41 C.F.R. § 105-64.105 (2026).

Text

§ 105-64.105 When may Social Security Numbers (SSNs) be collected?

(a)Statutory or regulatory authority must exist for collecting Social Security Numbers for record systems that use the SSNs as a method of identification. Systems without statutory or regulatory authority implemented after January 1, 1975, will not collect Social Security Numbers.

(b)In compliance with OMB M-07-16 (Safeguarding Against and Responding to the Breach of Personally Identifiable Information) collection and storage of SSN will be limited to systems where no other identifier is currently available. While GSA will strive to reduce the collection and storage of SSN and other PII we recognize that some systems continue to need to collect this information.

Free access — add to your briefcase to read the full text and ask questions with AI

§ 105-64.105 When may Social Security Numbers (SSNs) be collected?

(a) Statutory or regulatory authority must exist for collecting Social Security Numbers for record systems that use the SSNs as a method of identification. Systems without statutory or regulatory authority implemented after January 1, 1975, will not collect Social Security Numbers.

(b) In compliance with OMB M-07-16 (Safeguarding Against and Responding to the Breach of Personally Identifiable Information) collection and storage of SSN will be limited to systems where no other identifier is currently available. While GSA will strive to reduce the collection and storage of SSN and other PII we recognize that some systems continue to need to collect this information.