0704-0545 OPM Verify Eligibility SSN Justification Memo

DEPARTMENT OF DEFENSE
DEFENSE HUMAN RESOURCES ACTIVITY
DEFENSE MANPOWER DATA CENTER
4800 MARK CENTER DRIVE, SUITE 04E25-01
ALEXANDRIA, VA 22350-6000

July 31, 2019
MEMORANDUM FOR DEFENSE PRIVACY, CIVIL LIBERTIES, AND TRANSPARENCY
DIVISION
THROUGH: RECORDS, PRIVACY AND DECLASSIFICATION DIVISION
SUBJECT: Justification for the Use of the Social Security Number (SSN) in Personnel Security
Breach Notification and Mitigation Services Records System (DITPR ID 27974)
This memorandum is to satisfy the requirements of the Department of Defense
Instruction (DoDI) 1000.30, “Reduction of Social Security Number (SSN) Use Within DoD,”
requiring justification to collect and use the SSN in the Personnel Security Breach Notification
and Mitigation Services Records System.
The purpose of this system is to have a central repository for providing notification
and the provisioning of breach mitigation services to individuals affected by the breach of
certain information in the Office of Personnel Management (OPM) background
investigation databases. These records may also be used as a management tool for
tracking, reporting, and evaluating program effectiveness.
As required in DoDI 1000.30, the acceptable use for the Social Security Number (SSN)
has been identified as 08, Computer Matching. The Defense Manpower Data Center (DMDC) is
assisting OPM in the notification of those affected by the recent privacy breach of OPM’s
background investigation databases. Use of the SSN is the only common identifier between
DMDC and OPM that would facilitate breach notification assistance.
The data collected is covered by System of Record Notice (SORN) DMDC 20,
“Personnel Security Breach Notification and Mitigation Services Records,” which provides the
authorities to collect, and is available at: http://dpcld.defense.gov/Privacy/SORNsIndex/DODwide-SORN-Article-View/Article/627463/dmdc-20/. The electronic records are secured to
protect (PII) in accordance with the Privacy Act of 1974 and DoD 5400.11-R, “Department of
Defense Privacy Program.”

Michael V. Sorrento
Director