"Nonprofits will be hurt because people will be reluctant to make a donation if it means they have to share their private Social Security number, plus it will divert limited resources away from missions to invest instead in costly new data security," Delaney said.

"Likewise, the general public will be hurt when scam artists call up claiming to be nonprofits to get Social Security numbers so they can then steal identities and commit fraud."