I work for a local trucking company. We deliver to many job sites in all places for our customers who are running them. Today two drivers went to military base. Typically one provides their birth date, license number, and social security number to an armed service member at the front gate. Once approved they can enter.
Upon arrival both drivers were stopped at the gate. Both drivers received a phone call from someone who works a the company (our customer) who may or may not have actually been on site. They were asked to provide their social security number to the unknown person at the company so that they could use that for the background check at the base. Both drivers refused. Management was furious, and called each of them and told them they should provide their SSN to the unknown person from the company who was asking for it. They still did not provide their information and eventually turned back and left without making the delivery.
They believe that they should not because they do not know that the company might do with it. They could lose it, they could use it for fraud, or one of their own employees who may have criminal record or no work authorization.
There is supposed to be a procedure in place for visitor authorization. The company is supposed to provide us with a written request for the information to be used for the background check at the base. This was brought up before they left and they were told not to worry about it. Obviously this was not done prior to their arrival.
The company will likely ask someone else to try this again this week and I am concerned they will ask me. My thoughts are that that company did not put in the required authorization request in the first place, or were scrambling to do it at the last minute. I am also concerned about providing my SSN to anyone other than a uniformed service member.
Is it illegal for a company to ask for an employee to provide their SSN to a customer? Even for the purposes of a background check? If so, how can anyone be sure that it will be used properly and disposed of? Like I said, the company could write it down and lose it, or someone else could find it, or it could be used for another purpose other than the one time background check.
Can the employees face disciplinary action for refusal?
I might make it clear up front that I am not comfortable providing this information myself to anyone other than a service member. Could I face retaliation? If so, should I file a complaint with HR or the EEOC? Are there any legal protections to keeping ones personally identifiable information private in a situation like this?