What to know before giving your Social Security number to your doctor

Most medical forms ask for your Social Security number, and there’s usually no explanation. You’re left deciding on the spot whether to fill it in or leave it blank, even though that decision carries real consequences.

In 2025, a data breach at Conduent — a company that processes payments and handles services for state health and benefits programs — exposed Social Security numbers, medical data, and other personal details for more than 25 million people. It’s not a one-off either. Since 2009, over 7,400 major healthcare data breaches have been reported in the U.S.

This guide breaks down when giving a doctor your Social Security number actually makes sense, when it doesn’t, and how to protect yourself.

Why do doctors’ offices request your SSN?

Doctors’ offices ask for your Social Security number mainly for identification, billing, and insurance-related processes. It helps them match your records, verify coverage, and handle medical bills more easily within their systems.

Remember: there’s a distinction between law and policy. A private provider may ask for your SSN as part of their internal processes, and in some cases, they may choose not to accept you as a patient if you refuse. However, that’s a business decision, not a legal one.

So even in cases you don’t have to give your doctor or dentist your SSN, they may push back based on their own policies.

Here are some ways doctors’ offices might use your Social Security number:

• Patient identification: It can be used as a unique identifier to match you to the correct medical record, especially in older systems.
• Insurance verification: Hospitals confirm your identity with insurers, particularly for government or legacy databases using your SSN.
• Billing and debt collection: SSNs make it easier to track unpaid bills or send accounts to collections if needed.
• Medicare or Medicaid processing: Historically, SSNs have been used for patient identification in government healthcare programs.
• Payment plans or financing: Sometimes required when applying for medical credit or installment billing.
• Record matching across providers: SSN can link your information across hospitals, labs, or specialist networks.

Risks of sharing your SSN with healthcare providers

Healthcare data breaches are routine, and it’s not just hackers at play. Unauthorized disclosure (due to a lack of security training), loss of unencrypted Electronic Protected Health Information (ePHI), and even improper disposal of ePHI can all lead to your medical records being exposed. In 2025 alone, an average of 168,647 individuals per day were affected by these breaches.

What makes it risky is that medical records often contain sensitive data, such as your Social Security number, insurance details, and full medical history. Here’s how this can impact you in the long run — from falling for multiple types of identity theft to incorrect treatment procedures:

• Medical identity theft: If someone steals your identity to get treatment or file claims, it can alter your medical records without you knowing.
• Incorrect diagnoses or treatments: Your file could show conditions you don’t have or medications you were never prescribed, which can lead to wrong care decisions.
• Insurance issues: Fraudulent activity can trigger denied claims or coverage problems when your real medical needs don’t match what’s on record.
• Financial identity theft: Bad actors can use a leaked SSN to open accounts, file fake tax returns, or commit insurance fraud in your name.

At the same time, it’s quite complicated to get a new Social Security number. The Social Security Administration (SSA) only issues one in rare cases, such as ongoing, documented identity theft or serious safety risks. Losing your card or being part of a data breach isn’t enough.

Are you legally required to provide your SSN?

No, there’s no federal law that requires you to give a doctor your Social Security number just to receive care. In many routine medical settings (especially private practices), you can leave that field blank.

In fact, very few organizations (like the Internal Revenue Service (IRS), your employer, and financial institutions) are legally required to collect your Social Security number. Even the Health Insurance Portability and Accountability Act (HIPAA) treats SSNs as part of protected health information (PHI) and limits their use and disclosure.

Exceptions where an SSN is usually required

There are situations where your Social Security number is tied to how certain systems verify identity and process government benefits. This is especially true for government-linked healthcare programs, and you have to provide your SSN.

• Medicare and Medicaid: These programs rely on federal systems to track eligibility and coordinate benefits. While Medicare has moved away from using SSNs on ID cards, your SSN may still be requested for verification or backend processing tied to federal records.
• Health insurance providers: Insurers may request your SSN for IRS reporting requirements under laws like the Affordable Care Act, particularly to confirm coverage and avoid tax penalties.
• Coordination of benefits (COB): If you’re listed under someone else’s plan or have multiple insurers, SSNs may be used to match records across systems and prevent duplicate claims.
• Veterans Affairs (VA) health care: The VA often uses SSNs as the primary identifier in its system, so patients receiving care at VA facilities are more likely to be asked for it as part of standard intake.

In these cases, the request is tied to how the system operates. Providing your SSN is often necessary to access coverage or complete the process.

How to say ‘no’

When a form asks for your SSN, you can leave it blank and wait to see if anyone flags it. In many cases, the office can proceed with your insurance ID, date of birth, phone number, or a government-issued ID.

However, private providers still reserve the right to not accept you as a patient if you refuse to provide your SSN.

Protect your identity

Tools like LifeLock can monitor your personal data for signs of misuse, including credit activity tied to your SSN. And if you become a victim of identity theft, they help you deal with it by spotting unusual or potentially fraudulent activity in your accounts, and guiding through the identity theft recovery process.