Are there specific penalties for improper use or disclosure of DMF data?

Yes. Under 15 CFR Part 1110, improper disclosure or use of Limited Access DMF data carries a penalty of $1,000 per instance, capped at $250,000 per person per year. In cases of willful or intentional violations, higher penalties may apply, and NTIS can revoke certification immediately. Loss of certification means immediate loss of LADMF access, which can disrupt ongoing compliance programs and trigger downstream regulatory consequences with state insurance departments or the Department of Labor.

What are the most common reasons organizations fail a DMF compliance audit?

The most frequent issues involve gaps in security controls, incomplete documentation, and inconsistent matching methodology. Specifically, organizations often fail because they have not maintained current ACAB attestation, lack documented access controls or audit logging, do not encrypt LADMF data at rest or in transit, fail to train personnel on data-handling requirements, or cannot produce records demonstrating how matches were generated and validated. Working with a certified partner that handles these controls on your behalf can significantly reduce audit risk.

How do regulatory expectations around death audit compliance continue to evolve?

Expectations are tightening on several fronts. State insurance regulators are expanding RSA and GRA requirements to cover additional product types and shorten reporting windows. Federal agencies are emphasizing fuzzy matching and multi-source data coverage rather than DMF-only programs. Data privacy laws at the state level continue to add new obligations around consent, breach notification, and consumer rights. ERISA fiduciary expectations around pension recordkeeping accuracy have also intensified, particularly following SECURE 2.0 provisions affecting overpayment recovery. Organizations that update their compliance programs annually, rather than treating death audits as a static process, tend to stay ahead of these changes.

What Is the Social Security Death Index (SSDI)?

The Social Security Death Index, or SSDI, is the name most people use for the public version of the Social Security Administration’s Death Master File (DMF), a running record of reported deaths that the agency originally built to stop benefit payments to people who are no longer alive. For decades, it has doubled as the default reference point for verifying whether someone has died.

It has also been structurally incomplete after a policy change in November 2011. Any administrator who treats it as a full accounting of U.S. deaths is working from a smaller picture than they realize.

How the SSA Builds the Death Master File

The Social Security Death Master File is compiled from several channels, not one central source. Family members and funeral homes report deaths directly to SSA when survivors file for benefits.

Financial institutions and other federal agencies contribute reports through their own reporting relationships with the agency. And for years, state vital records offices, which receive death certificates directly from medical examiners and funeral directors, supplied a large share of new entries under data-sharing agreements with SSA.

SSA cross-checks each report against its own administrative records before adding a match to the file, recording a name, Social Security number, date of birth, and date of death. That process, and the audience it was designed to serve, are part of why death verification varies depending on which records an organization can actually access. We cover that distinction in greater depth in What Is a Death Audit.

Reviewing death records and matching data as SSA compiles the Death Master File</p>
<p>

The November 2011 Change That Redrew the File

SSA’s agreements with individual states generally prohibited the agency from redisclosing state-supplied death records to outside parties. For years, SSA nonetheless distributed a combined file, blending its own directly reported deaths with state-reported ones, to the public through the National Technical Information Service (NTIS). That NTIS-distributed file is where the informal name “Social Security Death Index” comes from among genealogists, financial institutions, and death-verification vendors alike.

National reporting in 2011 drew public attention to errors in the file and to a related concern: identity thieves were using information tied to deceased individuals, sourced in part from the public DMF, to file fraudulent tax returns. Under scrutiny, SSA determined that continuing to include state-reported records in a publicly distributed file went beyond what its state agreements permitted.

In November 2011, SSA removed roughly 4.2 million existing records that had been built from state data and stopped adding new state-sourced records to the public file. Because state agencies had been a major source of new entries, the file’s ongoing coverage of state-reported deaths dropped sharply at that point and has stayed reduced since.

A November 2013 Government Accountability Office review found the public DMF holds roughly 87 million records, about 10 percent fewer than the fuller death file some federal agencies can access through a separate data-sharing arrangement. The GAO attributed this gap directly to the exclusion of state-reported deaths, not to data quality or a lag that resolves on its own.

Limited Access DMF vs. the Public DMF

Congress introduced further restrictions in Section 203 of the Bipartisan Budget Act of 2013, creating what is known as the Limited Access Death Master File (LADMF).

Certified access to the Limited Access Death Master File secured for approved organizations

To protect recent decedents against identity theft and tax fraud, LADMF places a three-calendar-year embargo on newly reported records. Organizations that demonstrate a legitimate fraud-prevention interest or business purpose under law can become certified through the Department of Commerce via NTIS to access death records within that three-year window.

However, certification does not restore state-reported records. Even certified LADMF users are restricted to federal Numident records. Because the SSA remains legally prohibited under Section 205(r) from redisclosing state-level death data to outside parties, uncertified and certified commercial users alike are left without direct state reporting.

Why This Matters for Insurance, Retirement, and Government Programs

A missing death record affects organizations differently depending on which side of a benefit payment, claim, or research cohort they sit on, but the underlying exposure is the same.

Insurance Carriers

Insurance carriers carry a version of the same exposure at the claims stage: a policyholder whose death hasn’t cleared into the public file can leave a claim unopened or a policy sitting unclaimed well past when it should have paid out or lapsed. Neither outcome is a data-quality issue on the carrier’s side; it’s a function of which records the carrier’s verification process actually reaches.

Pension Funds and Retirement Plans

A missing death record affects organizations differently depending on which side of a benefit payment, claim, or research cohort they sit on, but the underlying exposure is the same.

Health Studies and Longitudinal Research

Organizations running longitudinal health studies or vital-status follow-up feel the gap differently but no less directly: a death the DMF never recorded can bias the mortality and survival estimates the whole study is built to produce. The error compounds at the cohort level rather than the individual level, which makes it harder to spot after the fact.

Unions and Government Programs

Unions and government benefit programs carry the same risk. A beneficiary whose state never routed a report into the public file, or whose report simply hasn’t caught up yet, keeps looking active on paper, and the payments tied to that record keep following the paper rather than the fact.

Closing the Gap Beyond SSDI and DMF Data

This does not mean the Death Master File is useless. It remains a legitimate, widely used reference point, and for many organizations it is a required one. But because the public file undercounts deaths by design and the Limited Access DMF is gated behind certification, an administrator relying on DMF/SSDI data alone is working with a known blind spot.

Published obituaries often close that specific gap, since they tend to reflect a death before the paperwork behind it has finished routing through a state agency into the federal file. That’s why Obit360 pairs sourced obituary records alongside a DMF check, rather than waiting on routing to catch up.

For an administrator working across an entire book of participants or policyholders rather than one name at a time, that pairing is usually run as part of an ongoing death audit program.

Frequently Asked Questions About the Social Security Death Index

Who can get certified for the Limited Access Death Master File?

Certification is generally open to organizations with a legitimate fraud-prevention interest or a legitimate business purpose under law, government rule, regulation, or fiduciary duty. Government agencies, financial institutions, insurers, and similar regulated entities apply through NTIS, and certification comes with its own security and audit requirements, not just a signup form.

Can errors in the Death Master File affect people who are still alive?

Yes. The file has, on occasion, listed living people as deceased due to reporting errors, which can freeze benefits, bank accounts, and credit until the error is corrected. It’s a distinct failure mode from under-coverage, but part of why the file isn’t treated as a final determination in either direction.

Are obituary records considered a legitimate death verification source?

Yes, when they’re properly sourced. An obituary isn’t a government vital record, but it’s independently published and typically traceable to a named funeral home or outlet, which is why administrators pair it with SSA data rather than treat federal records as the only input worth checking.

Verification Doesn’t Stop at the DMF

The DMF and SSDI are a legitimate starting point for death verification. They were never made to be the finish line, and the November 2011 policy change only widened the space between the two. Obit360 pairs SSA data with sourced obituary records, built to catch what a DMF check alone misses. See how it works today.

See How Obit360 Works

What Is the Social Security Death Index (SSDI), and Why Doesn’t It Catch Every Death?