Albany Housing Authority collects sensitive data via online form | The Locally Times
The Albany Housing Authority's online update form requires applicants to submit partial Social Security numbers, disability status, and income details.
The Albany Housing Authority (AHA) collects highly sensitive personal and financial information from individuals seeking housing assistance through its online “Website Applicant List Update Form,” according to a review of the form dated 2026-02-11. The form explicitly requires applicants to provide the “Last Four (4) Digits of Social Security # (Required)*.” This practice raises questions about data security and privacy for residents engaging with the public housing agency. ## Extensive Personal Data Collection The “Website Applicant List Update Form” gathers a broad range of personal information beyond basic contact details. The form requires applicants to disclose whether they are “Disabled” by selecting either “Yes” or “No.” It also asks for employment status, specifically inquiring, “Have you been employed for nine (9) out the last twelve (12) months?” Financial details are also requested, with a field prompting applicants to state, “What is the amount of your income?” Changes to household composition require detailed information. The form asks applicants to specify if they are adding or removing household members and then requests the “Name and Birthdate of Household Member(s)” for those individuals. In addition to these sensitive categories, the form collects full names, street addresses, cities, states, ZIP codes, cell phone numbers, and email addresses, as documented on the Albany Housing Authority's website on 2026-02-11. This level of detail exceeds the information collected by other local public entities for online interactions. For instance, the Albany Public Library requests only a full name and email address for its newsletter sign-up, as shown on its website on 2026-02-11. Similarly, the Capital District Regional Planning Commission's newsletter sign-up only asks for a name and email address, according to its website on 2026-02-11. The City of Albany’s “Notify Me” service collects email and phone numbers, along with how the user heard about the service, but does not require financial, health, or partial Social Security information, as indicated by its online form on 2026-02-11. ## Unspecified Security and Retention Policies While the Albany Housing Authority collects this extensive data, the records do not specify the security measures in place to protect this sensitive information. The documentation does not detail whether the online form uses encrypted connections or other protocols designed to safeguard personal, financial, and health data from potential breaches or unauthorized access. The records also do not outline the AHA’s official data retention policy for the information submitted through this form, nor do they identify who within the AHA bureaucracy has access to the collected data. The rationale for requiring the last four digits of a Social Security number for an “applicant list update” is not specified in the available records. The documents also do not indicate whether the AHA offers alternative, non-digital methods for applicants to update this critical information, which could provide a more secure option for individuals wary of submitting sensitive data online. The records do not show that the AHA has conducted a privacy impact assessment for this online data collection method. ## Implications for Vulnerable Residents The collection of partial Social Security numbers, disability status, income, and detailed household information online places a significant burden of trust on the Albany Housing Authority. Residents seeking housing assistance often represent a vulnerable population, potentially at higher risk of identity theft or privacy exploitation. The absence of publicly available information regarding data security protocols, retention policies, and the availability of secure offline alternatives means that applicants submit their sensitive data without clear assurances of its protection. The records do not show what recourse applicants would have if their data were compromised. The potential for administrative efficiency for the AHA in collecting data online contrasts with the potential for increased risk to individuals who rely on public services for housing. The current documentation does not address this imbalance, leaving open questions about the AHA's responsibility to protect the privacy of those it serves and the real-world consequences for residents if a data breach were to occur.