Private Collection Agency Security Over Taxpayer Data Needs Improvement

The Director, Headquarters Collection, SB/SE Division, should provide oversight to ensure that follow-up assessments are performed within the same year for any deficiencies identified in the annual assessment.

The Director, Headquarters Collection, SB/SE Division, should provide oversight to ensure that stronger security controls are included in the annual assessments such as the Lockbox Security Guidelines, including a separate secure room for mail processing and securing payments, and enhancing security camera coverage to include record times of all sensitive areas where taxpayer data are present.

The Chief Information Officer should ensure that the data at rest being transferred to the PCAs are encrypted at the IRS and at the PCA.