How Safe is Your Employment Application Data?
Carlos asks: "I recently returned to the U.S. after working overseas for the past 16 years. As I visit job sites and corporate sites, I'm finding two issues with applying online I hope Slashdot readers could comment on. I understand security and background checks are important to most employers. However, it seems to me that far too many online applications are asking for sensitive data, such as my social security number and driver's license number. How long is my data stored in their database? Who has access to such data? It seems that every month we hear about a company that has customer/client data stolen or mishandled. I feel that such data shouldn't be required during 'step one' (ie filling out the initial online account in the career section). I'll provide such data when I've been contacted by a staff for an interview. Do Slashdot readers simply bypass such employers, or do they just hand over their identity?"
Another point relates to the pages upon pages we have to endure with an online application. Some companies make the process smooth, for example using a form of OCR with an uploaded resume. There's nothing worse than getting to step 9 (out of 20 steps) and getting a timeout error in your browser. I hope HR people who are reading this, will take a closer look at their employment process. I'm sure some readers might say, 'They make the process hard on purpose — weeding out the lazy applicants.' I fully understand this point and I'm not looking for an easy way into a company, but filling out 20 step applications at 30 companies a day, everyday, can eat a lot of time when hunting for a position."
" However, it seems to me that far too many online applications are asking for sensitive data, such as my social security number and driver's license number."
They get the SSN when you get a job. Your license number isn't really sensetive.
My driver's license number. Every time I buy beer, or cash a check at the bank, somebody gets to see my ID anyway.
technically illegal? oops looks like we have somebody without herd mentaltity applying for the position.. umm. oops.. I mean... "the position has been taken by a candidate with more on-job experience"
Your license number isn't really sensetive.
I'm not sure if I agree. I think the issue here is that you can't predict who is using the license number and how, and frankly, I don't think people have become particularly creative with misusing the license number (which, in most states, if not all states, is a fixed number.)
I think this will become an issue with time. It's becoming a back up to the SSN, and since it seems to be on the same path that the SSN was on in the late 70s/early 80s, then I'm going to safely bet that in the next 10 years or so that you're going to have to end up protecting your license number in the same way you protect your SSN.
It sounds like your experience is another example of pain from putting sensitive information on-line (in this case, on Dice) without fully appreciating the possible results. That in turn is an example of a wider problem: giving up sensitive information to anyone who doesn't have a vested interest in storing, using and destroying it properly.
An entire generation is about to learn from this mistake, but probably suffer its consequences for much of the rest of their lives. I imagine the problems will eventually get so bad that privacy/data protection starts to become a headline grabber and failing to respect them becomes culturally unacceptable. International agreements with far more teeth than today's will follow, and sooner or later, something like a class action identity theft lawsuit with huge punitive damages will put the fear of God into any organisations that don't comply properly. This may actually happen in a few years, if current trends continue. But for now, the only smart thing to do is be very careaful about what information you give to anyone.
Oh, and in case anyone hadn't guessed: my answer to employers who want sensitive information up-front is to skip them. It's not a universal practice, I won't support it, and most importantly, this means I'll never suffer the consequences of screw-ups by a random organisation I once applied to.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
Most jobs are found through personal networking. Online applications are a "going through the motions" task to demonstrate the company hired the "Best Qualified Applicant"--the person they already wanted to give the job to. This is also true for resume collectors.
It is a far better use of your time to talk with the people who would become your future co-workers.
Additional Rule of Thumb: The company/agency will be as careful with your application data as it will be with your employee data.
227-3517