InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comThu, 23 May 2013 00:30:30 GMT20http://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspx[quote][b]darrylmybiz (9/3/2012)[/b][hr]Yes, the SSN appears in a non-encrypted form a database.[/quote]It's databases like this that cause identity theft and a world of other pains to people who don't know that some company has violated what is supposed to be a sacred trust. Do everything you can to convince management that the SSN's should be deleted or encrypted. If you're doing backups, the backups should be destroyed properly. This is a serious offense to many different statutes by many federal agencies not to mention a clear violation of best practices. If management doesn't budge, consider blowing the whistle on them because this is a very, very bad thing and it needs to be fixed at any cost.If you don't believe there's anything wrong with storing clear text SSNs, then please email me your SSN so I can show you what can happen.If you agree that storing clear text SSNs is a bad thing but are afraid to approach management and afraid to blow the whistle even anonymously, then PM me with the name of the company and I'll make sure they go through an information security audit.Mon, 03 Sep 2012 19:47:36 GMTJeff Modenhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxAmong other things not the least of which is that.Mon, 03 Sep 2012 19:30:22 GMTJeff Modenhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspx[quote][b]Jeff Moden (9/3/2012)[/b][hr][quote][b]darrylmybiz (9/3/2012)[/b][hr]Yes, the SSN appears in a non-encrypted form a database.[/quote]Heh.. that's cool. What company do you work for?[/quote]I take it that you're asking this question so you can be sure you never appear in their database?Mon, 03 Sep 2012 18:33:41 GMTdwain.chttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspx[quote][b]darrylmybiz (9/3/2012)[/b][hr]Yes, the SSN appears in a non-encrypted form a database.[/quote]Heh.. that's cool. What company do you work for?Mon, 03 Sep 2012 13:42:36 GMTJeff Modenhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxI'd suggest you take that issue up with management, it's a risk.Now, back to your original question, what is the definition of ValidSSN?Mon, 03 Sep 2012 13:12:25 GMTGilaMonsterhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxYes, the SSN appears in a non-encrypted form a database.Mon, 03 Sep 2012 12:05:31 GMTdarrylmybizhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxPerhaps ValidSSN is returning a masked version of the SSN?Mon, 03 Sep 2012 00:01:42 GMTdwain.chttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspx[quote][b]darrylmybiz (9/2/2012)[/b][hr]SSN does stand for social security number. The company I work for receives encrypted medical data from companies. The SSN, name, address, etc. are fields used to verify members medical information. The several SSN's used in this example are fictitious.[/quote]I guess the question here is, does the SSN ever appear in a non-encrypted form in your sstored data?Sun, 02 Sep 2012 23:59:20 GMTJeff Modenhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxSSN does stand for social security number. The company I work for receives encrypted medical data from companies. The SSN, name, address, etc. are fields used to verify members medical information. The several SSN's used in this example are fictitious.Sun, 02 Sep 2012 18:58:33 GMTdarrylmybizhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxWhat does the function ValidSSN do?p.s. I hope SSN doesn't stand for social security number, because social security numbers should be stored encrypted if they're stored at all.Sun, 02 Sep 2012 11:46:46 GMTGilaMonsterhttp://www.sqlservercentral.com/Forums/Topic1353244-1292-1.aspxHave a table with a SSN column that is a float data type. My objective is to obtain the correct query to keep the column at 9 digits, change the data type from float to nvarchar and obtain the update query to make the change.This is the SSN column before the my query: SSN 020210101 100110010Ran this query:select dbo.ValidSSN(cast(SSN as bigint)), * from temp.__do_metroReceived this result after the query: SSN 020200000000 100100000000Sun, 02 Sep 2012 10:34:10 GMTdarrylmybiz