Some Components of the Privacy Program Are Effective; However, Improvements Are Needed

The Chief Privacy Officer should develop and maintain an inventory of the collection and use of PII in IRS systems.

The Chief Information Officer should implement a fully integrated information security continuous monitoring process that includes privacy risks.

The Chief Privacy Officer should ensure that the PGLD office strengthens its enforcement of the mandatory PCLIA review process by escalating expired PCLIAs to management for immediate attention or move to take the system offline.

The Chief Privacy Officer should ensure that the PGLD office coordinates with the business operating divisions to ensure that all employees take the annual privacy awareness training as required.

The Chief Privacy Officer should ensure that the PGLD office updates and maintains PIAMS training courses to capture PIAMS enhancements.