2026-22356NoticeWallet

Social Security Updates the Filing Cabinets Behind Your Social Security Number

Published Date: 11/3/2026

Notice

Summary

The Social Security Administration is updating how it manages records for Social Security Numbers (SSNs). These changes clarify where records are kept and who’s in charge, with new rules kicking in December 3, 2026. If you’re involved with SSNs, these updates affect how your info is handled, and you have until December 3 to share your thoughts.

Analyzed Economic Effects

6 provisions identified: 1 benefits, 4 costs, 1 mixed.

Treasury Do Not Pay Access Added

SSA added a new routine use that lets it disclose SSN-related records to the U.S. Department of the Treasury so Treasury can review SSA payment and award eligibility through the Do Not Pay Working System to identify, prevent, or recoup improper payments. This new disclosure authority is effective December 3, 2026.

Applications Flagged for Fraud Are Stored

The SSN master files will contain records of people who applied for an SSN but were not assigned one because: (1) SSA suspects the supporting documents may be fraudulent and is verifying them; (2) SSA determined the documents were fraudulent; (3) SSA needs further verification or more documents; or (4) processing is incomplete. These stored records include mailing addresses and descriptions of the documentation submitted.

More Data From Contractors and SSA Systems

SSA expanded the record source categories to explicitly include Federal contractors and vendors and additional SSA systems of records such as the Claims Folders System and the Master Beneficiary Record. That means SSA may obtain and combine information about you from these contractors/vendors and other internal SSA systems when maintaining SSN records.

Use of Cloud and Backup Storage Made Explicit

SSA clarified that SSN records are maintained at SSA facilities and also in additional locations in connection with cloud-based services and as backups for business continuity purposes. Your SSN information may therefore be stored in cloud environments as part of SSA's recordkeeping.

Stricter Identity Proof Required for Access

To find out whether SSA has a record about you or to get access, you must provide identifying information and either a notarized statement or a written certification of identity when requesting records by mail; in person you must provide an identity document (preferably with a photo). If you lack documents, you must certify in writing your identity and acknowledge the criminal penalty for false requests.

Required Security Training and Access Controls

SSA affirmed security measures for SSN records: access limited to authorized employees and contractors, use of technical controls (passwords, codes), audit mechanisms, annual security awareness training for authorized individuals, and annual signing of a sanctions acknowledgement for those with access to personally identifiable information.

Key Dates

Published Date
Effective Date
11/3/2026
12/3/2026

Department and Agencies

Department
Independent Agency
Agency
Social Security Administration
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register