SSA historically has compiled death information about SSN-holders in order to ensure it does not pay Social Security benefits to deceased individuals and to establish benefits for survivors. When SSA receives a report of death—which could include name, date of birth, date of death, and SSN—it matches that information against corresponding information in its database of all SSN-holders, known as the Numerical Index File (Numident). SSA then marks the appropriate Numident record with a death indicator. This death information was not publicly available until 1980 when, in response to Freedom of Information Act requests, SSA began to extract Numident records that had a death indicator into a separate file it called the DMF. According to SSA officials, SSA received about 7 million death reports in 2012 from a variety of sources. These sources include family members, funeral directors, post offices, financial institutions, other federal agencies, and state vital records agencies (states). To get death reports from the states, SSA has established formal agreements that set forth a payment structure for the states’ death reports and limit SSA’s ability to share this information. However, the Social Security Act requires SSA to share death information, including data reported by the states, with federal agencies to ensure proper payment of benefits to individuals. The act also prohibits SSA from sharing state-reported death information for any other purposes. As a result, SSA maintains two versions of the DMF. The “full DMF,” which contains all death records, is available to federal benefit-paying agencies. The “partial DMF,” which excludes state- reported death information, is available publicly to any interested party. Following the Social Security Act, SSA removes the state-reported records from the full DMF and provides the partial DMF to the Department of Commerce’s National Technical Information Service (NTIS), which reimburses SSA for the cost of providing the file and sells it through a subscription service. Our work to date has identified ways in which SSA’s procedures for compiling and verifying death reports may affect the accuracy of death reports in the DMF. To guide how to handle death reports, SSA has determined accuracy levels for each of the sources based on its past experience. Of all the sources of death reports that SSA receives, SSA considers those submitted by states through Electronic Death Registration Systems (EDRS) to be the most accurate. As part of these systems, states generally verify the names and SSNs from death reports with SSA’s databases before submitting them. As of March 2013, 35 states submit their death reports using EDRS. SSA considers reports from funeral directors and family members of decedents the next most accurate. Finally, SSA considers reports from the remaining sources to be less accurate. According to SSA officials, SSA does not collect data on the number of death reports submitted by each source. However, officials told us that if SSA receives multiple death reports for the same individual, the Numident record is updated to reflect only the source SSA considers to be the most accurate. For example, if SSA first receives a death report from a family member and subsequently receives an electronic report from a state about the same individual, the original report is overridden and SSA records only the state as the source of the death report. Whether SSA verifies death reports depends upon (1) whether the decedent is receiving Social Security benefits, and (2) the source of the report. Verification includes confirming the date of death and decedent’s SSN to ensure that the person identified in the death report is the person who has died. According to SSA officials, the agency only verifies death reports for individuals currently receiving Social Security program benefits because it is essential to its mission to stop payments to deceased beneficiaries. Even then, SSA verifies only those reports from sources it considers to be less accurate, such as financial institutions and other federal agencies. Therefore, death reports for non-beneficiaries are not verified (see table 1). SSA officials said they do not maintain data on the number of death reports they verify annually or how long such verifications take. The following scenarios illustrate SSA’s approach to verification: SSA receives a death report from a funeral director and determines the decedent is currently receiving Social Security benefits. Because the report was received from a source considered highly accurate, SSA takes no further steps to verify the death. The death is recorded in the decedent’s Numident record and subsequently the DMF. SSA receives a death report from a post office based on a returned Social Security benefit check noting the addressee is deceased. Because the decedent is a current SSA beneficiary and the report came from a source considered less accurate, it is turned over to an SSA field office to verify. Field office staff attempt to contact either the family of the decedent or some other source that is likely to have first- hand knowledge of the death to confirm the decedent’s identity and date of death. Once this is completed, the death is recorded in the decedent’s Numident record and the DMF. Veterans Affairs submits a death report to SSA. SSA determines the decedent is not receiving Social Security benefits. SSA does not verify the death before recording it in the Numident record and subsequently the DMF. Because there are a number of death reports that SSA does not verify, the agency risks having erroneous death information in the DMF, such as including living individuals in the file or not including deceased individuals. Specifically, for death reports that are not verified, SSA would not know with certainty if the individuals reported as dead are, in fact, the ones who are dead. SSA acknowledges these limitations and does not guarantee the accuracy of the file. Other SSA practices may prevent deaths from being included in the DMF or lead to other errors. For example, if SSA cannot match a death report to a corresponding Numident record because of differences in name, date of birth, or gender, it generally will not take actions to resolve the non- match. As a result, these deaths would not be included in the DMF. In addition, analysis we performed on existing DMF records identified potentially erroneous information. Specifically, we identified: 130 records where the date of death was recorded to occur before the 1,295 records where the recorded age at death was between 111 and 1,791 records where the recorded death preceded 1936, the year SSNs were first issued, although the decedents had SSNs assigned to them. SSA officials said some of these anomalies were likely associated with records added prior to the mid-1970s that were manually processed. For example, SSA staff could have keyed in a date of birth that occurred after a date of death. In addition, they told us SSA is taking steps toward identifying or preventing these types of potential errors. These include implementing an edit check to catch records showing a date of birth after date of death, and undertaking a review of cases in which persons appear to be unreasonably old and still receiving benefits to determine if they are dead or if their birth date was entered incorrectly. Finally, there are other situations in which deaths would not be included in the DMF. For example, decedents who were never assigned an SSN cannot be matched to the Numident. In addition, some deaths may not be reported to SSA, because, for example, identity cannot be established or a body is never found. However, it was beyond the scope of our review to determine the extent to which such gaps occurred. A number of federal agencies access the DMF, but the conditions of access vary widely due to legal and administrative factors. Federal agencies’ access to the full DMF depends on various legal requirements, including (1) whether they pay federal benefits and (2) whether their proposed use of the DMF is consistent with uses outlined in the Social Security Act. Currently, SSA shares the full DMF with six federal benefit- paying agencies which have requested access and which it has determined meet the relevant legal requirements: Centers for Medicare & Medicaid Services Department of Defense (Defense Manpower Data Center) Department of Veterans Affairs Internal Revenue Service Office of Personnel Management Railroad Retirement Board To address administrative conditions of access, these agencies have established information exchange agreements to receive the full DMF. As a part of these agreements, SSA and the agencies agree on what the agency will pay for receiving the data, among other things. SSA has statutory authority to require reimbursement to cover the reasonable cost of sharing the data, and the amount varies by agency. According to SSA officials, although the cost is generally related to the volume of data SSA provides, other factors may affect what agencies pay. For example, the Department of Veterans Affairs does not reimburse SSA for the DMF because it is statutorily exempted from doing so. The Office of Personnel Management similarly does not reimburse SSA because it provides other data to SSA, and the agencies have agreed that the expenses involved in the exchanges are reciprocal. In contrast, the Defense Manpower Data Center pays over $40,000 annually for monthly updates, while CMS officials told us it pays about $10,000 per year for weekly updates. A number of other federal agencies purchase only the partial DMF that is publicly available from NTIS. Several of these pay federal benefits, including the Department of Labor’s Energy Employees Occupational Illness Compensation Program, which provides compensation and health benefits to eligible Department of Energy workers and certain survivors. In addition, the Department of Agriculture’s Farm Service Agency administers several programs that pay benefits to farmers. Other agencies include, for example, the Department of Homeland Security, the Department of Justice, and the Department of the Treasury office that administers the Do Not Pay Initiative. According to SSA officials, the partial DMF has about 10 percent fewer records than the full DMF due to the removal of state-reported deaths.