sounds like a DB design problem, like SSN is not constrained

as an unique key or lack of foreign key linkage. If this is true, 1) whoever the DBAs are. They should be responsible for this 2) how is the audit procedure designed and proceeded?