Violation of User Agreement Terms, or. 3. Temporary Fix for an Active Record Noncompliance can fall into one of three tiers: • Type I noncompliance consists of multiple infractions that significantly place PII at risk or have resulted in unauthorized disclosure of PII and are systemic in nature. • Type II noncompliance consists of an infraction that could result in an unauthorized verification being submitted to SSA or a failure to comply with the consent requirements or a failure to comply with securing data containing PII. A Type II noncompliance may also be a failure that might prevent the completion of the Compliance Review. • Type III noncompliance consists of failures that are only minor in nature. Type III noncompliance would not result in either unauthorized disclosure of PII or unauthorized SSN verification requests being submitted to SSA. The following are the three types of noncompliance and their resulting penalties. Tier Noncompliance Penalty
Violation of User Agreement Terms, or. Temporary Fix for an Active Record Noncompliance can fall into one of three tiers: Type I noncompliance consists of multiple infractions that significantly place PII at risk or have resulted in unauthorized disclosure of PII and are systemic in nature. Type II noncompliance consists of an infraction that could result in an unauthorized verification being submitted to SSA or a failure to comply with the consent requirements or a failure to comply with securing data containing PII. A Type II noncompliance may also be a failure that might prevent the completion of the Compliance Review. Type III noncompliance consists of failures that are only minor in nature. Type III noncompliance would not result in either unauthorized disclosure of PII or unauthorized SSN verification requests being submitted to SSA. The following are the three types of noncompliance and their resulting penalties. Tier Noncompliance Penalty Type I Multiple failures to comply with CBSV User Agreement requirements determined by SSA to be detrimental to protection of PII Multiple Type II noncompliance Fraudulent use of CBSV access privileges Other issues considered by SSA to place a significant quantity of PII at risk. Suspension of CBSV user privileges for 90 days Type II Verification not authorized by SSN holder including missing, unsigned, or fraudulent Form SSA-89, Form SSA-89 accepted without date of authorization, Multiple verifications authorized by one Form SSA-89, Form SSA-89 submission date exceeds 90-day timeframe or exceeds alternate timeframe or is submitted before date of authorization. Acceptance of electronic/digital signature on Form SSA-89, Retention requirements not followed, Purpose stated on Form SSA-89 not specific or allowable, Significant alteration of Form SSA-89, Requesting Party fails to keep the SSA-88 current, Agreements between Requesting Party and Principals do not contain required elements or constraints as outlined in Section III.A, Form SSA-89s are not stored securely, Audit trail requirements are not followed. Suspension of CBSV user privileges for 60 days Type III Illegible Form SSA-89 (fields not specified above), Requesting Party address and Principal address (if applicable) are not included on Form SSA-89, Requesting Party information incorrect on the SSA-89, Minor alteration of Form SSA-89 wording Late submission of examination attestation report Suspension of CBSV user privileges for 30 days Annual Renewal This User Agreement does not authorize SSA to...
