FMS Data Security in SDP: What California Families Should Ask
California's Self-Determination Program (SDP) gives families real authority over a budget. But that authority comes with a step most families do not expect: handing a Financial Management Services (FMS) provider your family member's personal details, your household banking information, and the Social Security number of every person you hire. You are usually asked to do this early, often before you have met anyone at the company face to face. It is a fair moment to stop and ask what happens to all of that information after you send it.
Most families never ask. Not because they do not care, but because nobody tells them it is a reasonable question, and because the enrollment paperwork arrives at the exact moment they have the least energy to push back.
Why this matters
Your FMS is not just a bookkeeper. It is the single company that holds the most sensitive combination of information in your whole SDP setup: identity documents, bank accounts, payroll records, and details about your family member's support needs. If that information is handled casually, the damage is not a spreadsheet error. It is identity theft, a compromised bank account, or your family member's private information sitting in someone's personal email for years. The Federal Trade Commission's 2024 Consumer Sentinel Network Data Book logged 6.5 million consumer reports, and identity theft accounted for 18% of them. This is not a rare or theoretical risk.
The good news: you do not need to understand encryption to evaluate this. You need to know what your FMS is holding, what good handling looks like, and which questions separate a serious answer from a vague one.
What your FMS actually holds
Before you can judge whether an FMS protects your information well, it helps to see the full list. A typical California SDP family hands over:
Participant information including name, date of birth, Regional Center identifier, and enough plan detail to validate service codes.
Household banking details used for reimbursements and purchase requests.
Employee records for every person you hire: Social Security number, government ID, I-9 documents, home address, and wage information.
Background check results, since SDP employees go through the criminal background check process described on the DDS Background Checks page.
Vendor records including business licenses, tax identification numbers, and payment information.
Read that list again with one thought in mind: most of it does not belong to you. You are the person responsible for getting your respite worker's Social Security number to your FMS safely. That is a real obligation, and how your FMS collects it decides whether you can meet it.
The three protections that actually matter
Vendor security pages are full of language nobody outside of information technology can evaluate. Here are the three things that make a practical difference to a family, in plain terms.
Encryption, in transit and at rest
Encryption in transit means your information is scrambled while it travels from your device to the FMS. Encryption at rest means it stays scrambled while it is stored. Both matter. A provider that only mentions one is giving you half an answer.
Role-based access
Not everyone at your FMS should be able to see everything. Role-based access means a payroll specialist sees what payroll requires, a support representative sees what support requires, and neither can browse your whole file out of curiosity. Ask whether access is limited by role, and ask what happens to that access when an employee leaves.
Audit logs
An audit log is a record of who viewed or changed what, and when. It is the least glamorous protection on this list and the most useful, because it is the only one that answers the question you would actually ask after something goes wrong: who touched this?
💡 Pro Tip: If an FMS asks you to email a scan of someone's driver's license or Social Security card, that is worth a follow-up question. Email attachments sit in inboxes, on mail servers, and in forwarded threads long after the task is done. A secure upload link is a better answer, and any modern FMS should be able to offer one.
Where traditional FMS handling creates exposure
This is a workflow problem more often than a technology problem. Traditional FMS onboarding runs on printed forms, scans, and email. A family prints a packet, a new employee fills it out by hand, someone photographs it, and it goes back by email. If something is wrong, the whole loop repeats.
Every cycle of that loop creates another copy of a Social Security number in another inbox. Nobody is being careless on purpose. The process itself manufactures copies, and no amount of good intention at the FMS removes the copy sitting in your sent folder.
A fully digital intake changes the shape of the problem. When each employee completes their own onboarding directly in a secure online session, the sensitive information goes from the person it belongs to straight to the FMS. You never handle it, never store it, and never have to think about deleting it later. For families managing four or five providers at once, that difference compounds quickly, as we covered in our guide to managing multiple SDP vendors.
Nine questions to ask any FMS before you sign
Bring these to your evaluation call. You are not looking for perfect answers. You are looking for specific ones, and for whether the person on the phone can answer at all without escalating to someone you never get to speak with. Pair this list with the broader interview framework in our post on how to interview and choose an FMS.
Is my information encrypted both in transit and at rest?
Can employees and vendors submit their own documents directly, or do I have to collect and forward them?
Who at your company can see my family's records, and is that limited by job role?
Do you keep an audit log of who accesses my account?
What happens to my data if I switch to a different FMS?
How do you handle access when one of your employees leaves?
Do you ever ask families to email identity documents as attachments?
If I believe something was mishandled, who do I call, and will I reach a person who knows my account?
Can I see the portal before I commit?
That last question matters more than it sounds. A provider that will not show you the system before you sign is telling you something.
If you are still choosing between providers on the DDS vendored FMS list, treat the security conversation as part of the same decision as cost and speed, not as an afterthought. We have written more about what that choice controls in why choosing the right FMS matters.
How Accura FMS makes this easier
Two things about how we work address this directly.
First, onboarding is fully digital. Your employees complete their own onboarding formalities online from a laptop, tablet, or phone, in minutes rather than weeks of back-and-forth. Nothing is printed, scanned, or emailed, which means you are not the middle step holding copies of other people's identity documents. That is a security improvement and a time improvement at the same time.
Second, when you have a question about your information, you reach a person who can answer it. Accura's phone support is staffed by Customer Success Managers who are SDP experts, not general contact center representatives. Most families reach a live agent in under a minute, and our average email response time is under three hours. Security questions are exactly the kind of question that should not disappear into a ticket queue.
We are technology-enabled, but the people are the point. The portal makes the work faster. The team is what makes it answerable.
Frequently Asked Questions
Do I have to use an FMS in California's Self-Determination Program?
Yes. Every SDP participant must use a Financial Management Services provider. It is the entity that manages payroll, pays vendors, and keeps your spending plan reconciled. An Independent Facilitator is different: an IF is optional, though many families find one genuinely valuable, particularly during the transition into the program.
Is my FMS allowed to share my information with my Regional Center?
Your FMS coordinates with your Regional Center on budget, spending plan, and payment matters, so some information moves between them as a normal part of running the program. What you should ask is how that sharing is limited and logged. If you have specific concerns about your privacy rights, consult a qualified professional or raise it with your Service Coordinator.
What information does an FMS need from the people I hire?
Employees typically provide a Social Security number, government identification, I-9 employment eligibility documents, an address, and wage details, plus the results of the required background check process. Vendors provide business and tax information instead. A good FMS collects this from each person directly rather than routing it through you.
Is a digital FMS less secure than a traditional one?
Not inherently, and often the opposite. Traditional processes that rely on printed forms and email attachments spread copies of sensitive documents across inboxes and desks. A well-designed digital system narrows that to one controlled path. What matters is not digital versus traditional, but whether the provider can explain its controls clearly.
What should I do if I think my information was mishandled?
Contact your FMS immediately and ask for a written account of what happened and who had access. Tell your Service Coordinator. If you believe your identity or finances are at risk, consult a qualified professional about your next steps. Do not wait to see whether it resolves itself.
Ask the Security Questions Before You Sign
You are trusting one company with your family's most sensitive information, your household banking, and the personal records of everyone who supports your family member. That trust should be earned with specific answers, not reassuring adjectives. At Accura FMS, we are happy to walk you through exactly how your information is collected, who can see it, and why our onboarding process keeps it out of your inbox. Book a free consultation
Comments