Working with Employee Social Security Numbers

Warning:

In some cases, your scripts may expose social security numbers to any user with administrator access. To prevent unintended access to this information, ensure only authorized users have access to scripts that may expose this information.

Social security numbers are masked and encrypted by default when displayed on the screen or when records or transactions are printed. Only administrators or users with permission to access social security number data can view the numbers unmasked.

Users permission to access social security number data is based on the level of the Employee Social Security Numbers permission. This permission is associated with their assigned roles. This permission can be at one of the following two levels:

Masked – Social security numbers appear in masked form such as (********* or ***********). If 11 characters are displayed, it indicates that hyphens were used when the social security number was entered.
Full – The complete social security numbers is displayed such as (123-11-1234).

Users assigned standard roles can access social security number data as follows:

Role	Permission Level
Administrator	Full
Employee Center	Masked
Payroll Manager	Full
Payroll Setup	Full
System Administrator	Full

Social security number data is masked or displayed based on role access level when a user does any of the following:

Views the employee list
Views or edits HTML or PDF formats of forms
Views reports
Customizes reports
Saves or views saved reports

Social Security Numbers in Search

To ensure the security of your employees’ social security numbers, NetSuite encrypts social security numbers. Because the numbers are encrypted, you cannot run a search that includes social security numbers in the results using the summary type Group.

Social Security Numbers in Search

Related Topics