WASHINGTON – Sen. Chuck Grassley (R-Iowa) and fellow Senate Finance Committee Republicans are demanding the Internal Revenue Service (IRS) provide the specific steps it is taking to address security weaknesses at the agency. The lawmakers’ latest call for greater transparency and accountability comes amid oversight reports of data security concerns and an IRS consultant's indictment for disclosing private individuals’ tax information. 

From the letter:

Preventing illegal access and disclosure of protected taxpayer data is an essential IRS responsibility, one of its highest priorities and one that is statutorily enshrined in the taxpayer’s bill of rights. Unfortunately, it is also one that has been disregarded for far too long.

The IRS must take responsibility and account for failures in these duties. As part of this, we call upon the IRS to provide a detailed explanation of: the specific steps it has taken since the beginning of this year to address any security weaknesses; a timeline of when each such step was taken; the current status of each recommendation made by TIGTA or GAO related to data and/or IRS system security since January 2020; the next steps and expected timeline for the IRS to address any open recommendations; and all specific actions the IRS has taken or will take to make impacted individuals whole.

The Treasury Inspector General for Tax Administration (TIGTA) and the Government Accountability Office (GAO) for years have pointed to significant, unaddressed flaws in the IRS’ data security systems and practices. Most recently:

  • In an October 24, 2023 report on “longstanding challenges” at the IRS, the GAO notes the IRS “has struggled with longstanding challenges in . . . safeguarding sensitive information,” with diverse issues still unresolved.
  • In an October 11, 2023 report on “Major Management Challenges” for the IRS for 2024, TIGTA identifies “Protection of Taxpayer Data and IRS Resources” as one of the IRS’ “top management and performance challenges.”
  • In an August 8, 2023 report, TIGTA found the IRS could not account for millions of taxpayers’ data due to lax handling of backup records, compelling Grassley and Rep. Jason Smith (R-Mo.) to press for answers and urge action. The IRS in an October 30, 2023 response letter confirmed it cannot account for all of the missing records and is still searching for them.

-30-