I am just as anal as most about giving out the minimum info anywhere.
Here's a true story of what happened to me a couple of years ago.
I once walked into a Dr. office and they had the "sign in" sheet up at the counter and it had:
name
address
phone
DOB (date of birth)
SSN
INS ID #
reason of visit (medical condition)
time arrived
And 100% of the folks sitting in the lobby waiting area had filled it all in! To "steal" someone's info would have been as easy as simply copying it down. No one was even at the counter for 5 minutes while I stood there! People are dumb as cattle; what the first does in compliance, the next will do out of fear not to be different.
I refused to put anything but my name on the sheet. The admin girl was miffed, but I won that argument.
Next, she wanted to make a photo copy of my driver's license; I asked why? She told me it was a tool to combat fraud. I told her the only way that concept is valid it to LOOK at the human standing in front of her and then make sure my info and picture match. Once I walk out, if the DL is "fake", then having a copy of it is useless because if the data is stolen, the only person you'd be able to find is the one who's data was taken and not the fraudulent user. It's someone's stupid idea of proving identity, but it's not logical. If I am willing to commit insurance fraud, I'm going to have a fraudulent ID to go with it. Where is the value in having a copy of bad ID????? I told her that if she suspected it was fraudulent, she should IMMEDIATELY call the police, and not wait for weeks later after a claim is investigated. Fraudulent IDs are often very well manipulated so that even the photo is "iffy" and does not well represent the person committing the crime. They will often use bad pictures, old photos, and even photos of folks that look similar to them, and then say that they had lost or gained wait, shaved or grew a beard, changed hair color and style, got contacts or started wearing glasses, etc. And just how would the receptionist know any different anyway?
So then she told me that it was the insurance copy that required the copy of the license. I asked if she forwarded the copy to the Insurance company; she said "no". So I asked what good is a copy of my ID to the Insurance company if they never recieve it; she had no asnwer and was obviously wedged into a corner with her stupid knee-jerk answer that made no sense. I called bovine poo on that one; I asked her to call the insurance company directly right there at the desk and she did. I was standing there and she got all red-faced when I heard them tell her that photo ID was not a requirement of their policy. She hung up and gave my ID back without making a copy, but also with no apology to me. She said "I'm just doing what I was trained to do." I told her that I didn't find fault in her statement; she was probably trained that way. But she was hoping that her sense of authority would over-ride my objection, and she probably hoped I'd fall in line with the other cattle on the bench. I told her she was welcome to view my ID, copy my insurance card, and that I'd fill out a separate form for the medical info, and nothing more. I got my way, but she was miffed all the way through it.
After that office visit, the next day I called the office business manager (this is a large state-wide medical program for urologists). I told him what happened, and even asked that he investigate the responsibilities of his office policy because HIPPA laws prevent some info from being made public (such as most of what was on the sign-in sheet). He was flabbergasted to hear about what happened and about the sign-in sheet; said he would look into it. The next day he called me back, confirmed that what I said was true, and said that office staff was immediately reprimanded for the procedures. Seems that one of the admin ladies wanted to take a tough stand, and simply started making up rules and sheets that she thought would be best for them, and then "trained" others to do it her way. Having all the info on one sheet made it easy for them to enter data, rather than use multiple forms, etc. I went back a few weeks later, and indeed every single admin person in that office was trained differently. There was a "new" basic sign-up sheet. There were no copies made. There was no invasion of my identity.
One if the greatest pains in my posterior was when my former employer used my SSN as my insurance ID number! They got around that topic by simply moving one of the hyphens; instead of being structured as 3 digits, 2 digits, 4 digits they just moved the first hyphen and said it was a "unique" number (2 digits, 3 digits, 4 digits). It does not take a genius to figure out that all the nine numbers were in the same sequence as my SSN, but separated differently. (Example: 123-45-6789 versus 12-345-6789). How dumb is that! And yet when I called the insurance company, they told me that the number was assigned to me by my employer! Everyone in my entire plant knew it. Obviously, someone was really lazy and didn't want to have to look stuff up during processing. It took me many months of complaining, but it was eventually changed. Then, a few years later, we all got truly unique numbers with alpha-numeric structure. Probably enough identify theft occurred with the easy-to-decipher IDs that enough pressure was used to change their policy.
Folks - here are some tips:
Educate yourself on the requirements of both your laws and your insurance company; never trust the idiot behind the countertop with your most person data.
Don't give out your info unless REQUIRED by law (each state will be a bit different).
Be willing to be a PITA; it ruffles feathers but it's not the end of the world.
Be willing to explain things, ask questions, and wait.
Always call BEFORE going to the office visit; helps get the argument out of the way in private rather than public, and saves everyone time.