This is an archived article that was published on sltrib.com in 2016, and information in the article may be outdated. It is provided only for personal research purposes and may not be reprinted.

Everyone cautions people not to carry their Social Security cards with them, yet Medicare cards prominently display a beneficiary's Social Security number.

That creates the potential for identity theft, a subject I wrote about in my October 2014 column, "Medicare Cards Put Seniors at Risk of ID Theft." (Email me at readers@juliejason.com if you would like a copy.)

I can share some good news, however.

In April of last year, President Barack Obama signed MACRA (http://tinyurl.com/ktykmjv), Section 501 of which prohibits the inclusion of Social Security account numbers (SSNs) on Medicare cards. MACRA stands for the Medicare Access and CHIP [Children's Health Insurance Program] Reauthorization Act of 2015.

The CMS (Centers for Medicare and Medicaid Services) Social Security Number Removal Initiative (SSNRI) is now underway.

SSNRI is a "phased initiative" to replace the Social Security number on a Medicare card with a new, randomly generated Medicare Beneficiary Identifier (MBI) number.

The process will take some time, however, as things are not as simple as they may seem. A spokesperson for CMS provided some background.

There are about 60 million cards that need to be reissued, and the changes require more than a flip of a switch. More than 75 systems use the SSN-based identification number (called the Health Insurance Claim Number, or HICN) on the Medicare card to identify beneficiaries and process health-care payments.

State health-care and Medicaid systems also are involved.

According to a May 5, 2016, CMS Informational Bulletin, "In order for states to be fully compliant with this legislation and to continue critical data exchanges with the CMS, state Medicaid business processes and systems must be examined and necessary changes identified, developed, tested and implemented prior to the CMS assigning MBIs and distributing the new Medicare ID cards."

To make sure the MBI implementation works smoothly for the states, CMS runs biweekly All-State SSNRI Forum calls: "These calls provide CMS the opportunity to promptly communicate important guidance and updates to the state Medicaid agencies (SMAs) and for SMAs and their invited key stakeholders to ask questions, share information and facilitate coordination."

So, this will take some time — but once again, at least now we're not bogged down in talks. Progress will be slow, but steady.

According to the CMS bulletin, new-card issuance will begin in early 2018. All Medicare beneficiaries will have a card with their new MBI number by April 2019.

In the meantime, here is some advice to Medicare cardholders from the National Committee to Preserve Social Security and Medicare's "Remove Social Security Numbers From Medicare Cards" (February 2015, updated April 2016):

"Until the government completes action on removing SSNs from Medicare cards, beneficiaries should not carry their card[s] with them. A possible alternative is for beneficiaries to carry a photocopy of their Medicare card[s] with all but the last four digits of their Social Security number[s] cut or scratched out. Beneficiaries may need their original cop[ies] with them the first time they visit a new health care provider who may want a copy for their files or, preferably, beneficiaries may be able to provide their number[s] over the phone. But in the meantime, beneficiaries should take precautions to reduce their personal risk of becoming an identity theft victim."

You'll also want to read the Centers for Medicare and Medicaid Services' "Protecting Yourself and Medicare From Fraud" at http://tinyurl.com/zq8e2yu, which explains how to prevent Medicare fraud and what to do if you suspect that it has happened to you.

To read the CMS bulletin, go to http://tinyurl.com/hgh839t.

Julie Jason, JD, LLM, a personal money manager (Jackson, Grant of Stamford, Conn.) and award-winning author, welcomes your questions/ comments (readers@juliejason.com). To hear Julie speak, visit http://www.juliejason.com/events.