To stop a data broker selling your SSN, the opt-out form required your SSN. California fined them $116,490.