Oregon Administrative Rules
Chapter 111 - OREGON HEALTH AUTHORITY, OREGON EDUCATORS BENEFIT BOARD
Division 60 - INFORMATION REQUIREMENTS AND REQUESTS
Section 111-060-0001 - Use of Social Security Numbers

(1) The Oregon Educators Benefit Board (OEBB) will comply with the requirements of Section 7 of the Privacy Act of 1974 and the Oregon Consumer Identity Theft Protection Act, ORS 646A.600 to 646A.628 when requesting or requiring complete or partial disclosure of an eligible employee's or family member's, as defined in ORS 243.860(4) and (5) respectively, social security number.

(2) OEBB may request voluntary disclosure and consent to use the social security number of an eligible employee or family member for the following reasons:

(3) A request for disclosure of an employee's social security number will notify the eligible employee or family member:

(4) An eligible employee's or family member's social security number may not be put to a voluntary use as described above in (2) unless the eligible employee or family member has granted consent for that use. If, after having provided notice and received consent to use an eligible employee's or family member's social security number for specified purposes, OEBB wishes to use the social security number for addi-tional purposes not included in the original notice and consent, OEBB must provide the eligible employee or family member notice and receive the eligible employee's or family member's consent to use the num-ber for those additional purposes.

(5) An eligible employee's or family member's refusal to permit voluntary use of his or her social security number will not be used as a basis to deny the eligible employee or family member a right, benefit, or privilege provided by law.

(6) The request for the disclosure of the SSN has been incorporated in the MyOEBB Benefit Management System where all OEBB benefit eligible employees select, enroll, and manage their benefits.

(7) Per guidelines established by Section 111 of the Medicare, Medicaid, and SCHIP Extension Act of 2007, an entity, a plan administrator, or a fiduciary that fails to comply with the requirements may be sub-ject to a civil money penalty of $1,000 for each day of noncompliance for each eligible employee. Failure by the eligible employee to supply the required information, including, but not limited to, their own or their family member's social security number, Health Insurance Claim Number (HICN) or compliance letter issued by the Centers for Medicare and Medicaid Services (CMS) could result in the termination of coverage provided by the insurance carrier or administrator.