When any state agency mails, delivers, circulates, publishes, distributes, transmits, or otherwise disseminates, in any form or manner, information or material that contains the social security number of an individual, the agency shall take such steps as may be reasonably necessary to prevent the inadvertent disclosure of the individual's social security number to members of the general public or to persons other than those persons who, in the performance of their duties and responsibilities, have a lawful and legitimate need to know the individual's social security number. State agencies shall be in compliance with this section on or before July 1, 2003.