Sensitive data for password generation

[ruasonid]

Agent is asking for NI and DOB by e-mail which they claim is used for password generation. Not sure which password. Its a public sector role. Anyone experienced this?

[TykeMerc]

Probably for a unique identifier rather than a password and yes I have come across this before with Capita and the supply chain agencies they often use.

[glippiglop]

They certainly do ask for this information for government roles, although I believe you only need to provide the month and year when it comes to the DOB.

I was under the impression that it prevents duplicate submissions.

[ruasonid]

Thanks. Is it also usual in public sector roles for the contractual relationships to be something along the lines of Client Co (govt dept) - Cxpita - Agency - My Ltd?

[jjdarg]

Yep, that's the way it's been going recently. Occasionally, in exceptional circumstances, you may not have to go through Capita, but that depends on the role.

[TykeMerc]

Thanks. Is it also usual in public sector roles for the contractual relationships to be something along the lines of Client Co (govt dept) - Cxpita - Agency - My Ltd?

Not unusual.

[SueEllen]

Agent is asking for NI and DOB by e-mail which they claim is used for password generation. Not sure which password. Its a public sector role. Anyone experienced this?

You don't have to give anyone your real date of birth if it's not to verify your ID i.e. to prove who you say you are. However whatever date of birth you give make sure you remember it.

Likewise when firms ask for your mother's maiden name or other random information, unless it's to verify your ID, you can make it up.

I've had internet providers ask for mother's maiden name as a "security" question. Clearly they just want a name that I can give them all the time as there is no way of proving it's my mother's maiden name.