When collected for legal requirements: Complete the online form Full SSNs Collected for Legal Requirements for each system or process collecting or storing full SSNs and submit it to the University Information Security office. Contact the Information Security Office at itsec-ec@harvard.edu to request access to the reporting form, as needed.
When collected for business purposes and not a legal requirement: Submit the online Full SSN Collection Exception request form, which includes the data required for annual reporting of the location and volumes of these records. Contact the Information Security Office at itsec-ec@harvard.edu to request access to the exception request form, as needed.