Removal of “decrypted SSN” Events for API Users in the Activity Log

Available: Beta 12/6, Prod 1/3

Which customers are impacted?

All customers

How to turn on

This feature will automatically be turned on for all customers on the dates listed above.

Purpose of Update and Benefit

The “decrypted SSN” event in the Activity Log will no longer be published for API users starting on January 3, 2023. We believe that this event is causing more confusion and clutter than the value it provides.

Any “decrypted SSN” events for API users published to the Activity Log before January 3, 2023, will be retained for the lifetime of their associated application, although no new events will be created. Additionally, “decrypted SSN” events for human users will continue to be published to the Activity Log after January 3, 2023.

Note that we are not changing our security policies or practices around encrypting and decrypting sensitive data. This change only impacts the visibility of the event in the Activity Log, not the actual encryption or decryption of Social Security numbers. Additionally, Blend will retain this event data in our internal systems, for security purposes.

Current Behavior

Prior to this release, we published new events to an application’s Activity Log every time a Social Security number was decrypted by either API or human users.

New Behavior

After this release, we will no longer publish new “decrypted SSN” events to the Activity Log for API users.

0 Votes