I used to work in a couple other industries where it was pretty standard practice so it doesn't make me terribly uncomfortable, as long as I know who to sue if

I used to work in a couple other industries where it was pretty standard practice so it doesn't make me terribly uncomfortable, as long as I know who to sue if my SSN ends up on pastebin. Quantity of bureaucracy is my heuristic for how normal it is to ask this question, though this can vary.