|Received:||7/31/2007 5:52:27 PM|
|Commenter:||Wm. Robert Winters|
|Agency:||Federal Trade Commission|
|Rule:||Private Sector Use of SSNs|
Comments:Surely, there must be a way to securely identify people other than SSNs. The risk of compromise far outweighs the value of the number as a universal identifier. The simple act of forcing of anyone who collects personal data to encrypt, using the strongest available encryption techniques, that data at all times when storing it on any media, should make identities safer as a start. This can be enforced by criminal penalties for individuals, and stiff fines on corporations who do not encrypt. That should eliminate most of the data loss problems stemming from lost or stolen computers, and hackers stealing the data. These encryption programs are widely available and I believe, are cost effective for all businesses to use. The slowdown in data transmission caused by the encryption and decryption processes is minimal, and a reasonable cost for the security gained.