So I had to complete this I-9 form at work, after being employed with the same company for 13 years, to prove I am a US citizen... Kind if ridiculous, but ok, I'll give. When I get to the room they're verifying citizenship in with my passport, I find out that they're entering all of your most private information such as full name, date of birth, social security number, current address, passport number, driver's license number, and expiration dates of all these into a weakly secured third party web form.
I have no problem with verifying I'm a citizen, but who's going to look out for my privacy there? This third party company is running a Windows 2003 server with IIS 6, which makes it not only an easy target for attackers, but likely the most tempting target for indentity thieves in the entire country!
Worse still, if my identity is stolen, everyone can deny responsibility, and I'm left in the shitter...
Did they directly ask for your passport? Assuming there are a few people at your company who don't have one, what did they do? I would think a birth certificate would've sufficed to prove citizenship.
That aside, shouldn't they already know if their employees are citizens (standard check before hiring someone, I imagine -- what with the labor laws and tax laws and everything)? Seems really odd to me, and I don't blame you for feeling uneasy about it.
By:
Anonymous, at 01/26/2010 11:54 AM
None
None
Quoted Shoutback: Did they directly ask for your passport? Assuming there are a few people at your company who don't have one, what did they do? I would think a birth certificate would've sufficed to prove citizenship.
They offered the option of a bunch of different ID types they'd accept, but if you didn't have a passport you needed at least 3 kinds, including birth certificate...
By:
Anonymous, at 01/30/2010 1:02 PM
None
None
So the latest I hear is that the federal regulations for this process doesn't actually require you to file the information anywhere. It just has to be held in case of investigation.
With that knowledge now, that all of my information is sitting on some third party company's server on the internet somewhere. The fact that it's a windows computer doesn't make me feel to secure either!