Privacy Law Library

Minnesota Social Security Number Protection Law

MN SSN Protection

Data security

Restricts how businesses use Social Security numbers: no public display, no printing on access cards or on mailed materials unless required by law, no unencrypted transmission over the Internet, no SSN-only website logins, no SSN-based account numbers (outside benefits and payroll), and no sale of SSNs. Businesses must also limit internal access to employees who need the numbers. The section applies to uses on or after July 1, 2008.

Where
Minnesota
Citation
Minn. Stat. 325E.59
Status
In force
In force since
2008-07-01
Last amended
2008-07-01
Enforced by
Minnesota Attorney General (general authority under Minn. Stat. 8.31)
People can sue
No
Penalties
The section contains no penalty provision of its own; enforcement relies on the Attorney General's general consumer-protection authority.
Applies to
  • Persons and entities other than government entities; the University of Minnesota and Minnesota State colleges and universities are covered (325E.59, subds. 1, 5)
  • Does not apply to documents recorded or required to be public under chapter 13 or other law (subd. 4)

Practices it requires

  • Do not publicly post or display SSNs, print them on cards needed to access products or services, or print them on mailed materials unless required by law (forms and applications excepted).Minn. Stat. 325E.59, subd. 1(a)(1), (2), (5), (c)
  • Do not use a full SSN as a primary account identifier (except for retirement, benefit, HR, or payroll administration) and do not sell SSNs obtained in business; release for marketing is never a legitimate purpose.Minn. Stat. 325E.59, subd. 1(a)(6)-(7), (b)

Security duties

  • Do not require SSN transmission over the Internet unless the connection is secure or the number is encrypted, and do not allow SSN-only access to a website without a password or other authentication.Minn. Stat. 325E.59, subd. 1(a)(3)-(4)
  • Restrict access to SSNs to employees, agents, or contractors who need them to perform their job duties.Minn. Stat. 325E.59, subd. 1(d)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: Enforcement mechanism: the section has no express enforcement clause; attribution to the Attorney General's general authority under 8.31 is an inference. | The statute was first enacted by Laws 2005, ch. 163, s. 85; 'effective_date' uses the July 1, 2008 application date stated in subd. 1(e) rather than the 2005 enactment date.

Research reference, not legal advice.