If a function or variable has SSN then fortify treat it as privacy violation because fortify treat it as related to SocialSecurityNumer(ssn). If you change SSN to some other text the error will vanish