Much of benefit administration is now conducted through automated systems that rely upon the Internet. Service providers acting on behalf of employee benefit plans collect and process large amounts of personal, medical, and financial information with respect to participants and beneficiaries, including but not limited to Social Security numbers, email accounts, retirement assets, and income figures.