>> To my knowledge there is no law enacted by congress that dictates how SSN data is stored.
Like the Privacy Act of 1974?
"The Privacy Act prohibits the disclosure of information from a system of records absent of the written consent of the subject individual, unless the disclosure is pursuant to one of twelve statutory exceptions."
Like the Privacy Act of 1974?
"The Privacy Act prohibits the disclosure of information from a system of records absent of the written consent of the subject individual, unless the disclosure is pursuant to one of twelve statutory exceptions."
https://en.wikipedia.org/wiki/Privacy_Act_of_1974
https://www.justice.gov/opcl/privacy-act-1974
Federal agencies are subject to this law and these actions are violations of the law: https://en.wikipedia.org/wiki/Privacy_Act_of_1974#Under_the_...