Albany Housing Authority Gathers Sensitive Data on Public Web Form | The Locally Times
The agency's online update form requires partial Social Security numbers, income amounts, and disability status, while public documents do not specify data security protocols.
The Albany Housing Authority (AHA) is collecting sensitive personal information from housing applicants through a public-facing online form, The Locally Times confirmed on February 18, 2026. The agency's online applicant list update form is the designated method for individuals on housing waitlists to update their records. According to the form, accessible on the AHA website on February 18, 2026, applicants must provide their full name, current street address, cell phone number, and email address. The required online submission of this personally identifiable information creates potential data security risks for housing applicants. ## Form Mandates Financial and Health Details Beyond basic contact information, the online form mandates the submission of highly sensitive data. The form requires the last four digits of an applicant's Social Security number as a mandatory field. Applicants cannot complete the form without providing this partial identifier. The data collection extends to personal financial and household information. Applicants must state their income amount and report whether they have been employed for nine of the last twelve months. The form also requires applicants to report changes in household composition, including the full name and birthdate of any person being added or removed. Furthermore, the AHA form collects health details, requiring applicants to disclose if they have a disability. The purpose for collecting this specific data and how it affects an applicant's status on the waitlist is not explained on the form itself. ## Data Security and Privacy Policies Unspecified A review of the Albany Housing Authority’s official website, including the page hosting the update form, reveals no publicly posted documents detailing the security measures used to protect submitted data. The website does not specify the encryption standards, server security, or data storage protocols for the personal, financial, and health information collected. The authority’s website does not provide a visible data retention policy that would explain how long this sensitive information is stored, who within the AHA has access to it, or under what circumstances it might be shared. The form does not link to a privacy policy or terms of service that would inform applicants how their information is handled and protected. ## Access and Compliance Questions Unanswered The exclusive reliance on an online form raises questions of equitable access and regulatory compliance. Publicly available information on the AHA website does not specify whether applicants can submit this required information through alternative, non-digital methods, such as by mail or in person. The lack of stated alternatives may present a barrier for residents without reliable internet access or those uncomfortable submitting personal data online. Public records do not show how the AHA's online collection methods align with federal Department of Housing and Urban Development (HUD) regulations or New York State data privacy laws. The AHA has not provided documentation to allow for public verification of the system's security and compliance.