"Celebrity Files"

I have never had a client with a "celebrity file", but I have heard of them over the years. Apparently, there are some problems with keeping them secret. Here is the complete text of a recent report by Social Security's Office of Inspector General, or at least as much as they released to the public:

Our objective was to assess controls over access to personally identifiable information in the Social Security Administration's (SSA) Celebrity File.

We are encouraged to learn that SSA has taken steps to prevent, limit, and detect unauthorized access to personally identifiable information in the Celebrity File. We recognize SSA is committed to ensuring the confidentiality and integrity of personally identifiable information. However, we believe SSA has the opportunity to take additional steps to enhance its electronic and physical security controls and reduce its risk of unauthorized access to Celebrity File information.

This report contains restricted information for official use. Distribution is limited to authorized officials.