Inconsistent Processes and Procedures Result in Many Victims of Identity Theft Not Receiving Identity Protection Personal Identification Numbers

The Commissioner, Wage and Investment Division, should ensure that authentication risk assessments are completed and documented subsequent to all future identified system security breaches to an online application. This should include identification of weaknesses, risks arising from the weaknesses, mitigation actions to be considered, and costs and resources required for the mitigation actions.

The Commissioner, Wage and Investment Division, should ensure that all functions have consistent procedures for adding identity theft markers that create an IP PIN for all confirmed victims of identity theft whose current address cannot be confirmed.

The Commissioner, Wage and Investment Division, should ensure that all information provided to taxpayers on the CP01A notice issued for PY 2017 is accurate.

The Commissioner, Wage and Investment Division, should develop processes and procedures to update and add to the Opt-In Program new locations that have the highest per capita rate of identity theft and offer taxpayers in these locations the opportunity to opt-in to the IP PIN Program and obtain an IP PIN online.

The Commissioner, Wage and Investment Division, should develop an outreach strategy to increase taxpayer awareness in identified locations of the Opt-In Program.