The Internal Revenue Service Is Not Fully Complying With the No TikTok on Government Devices Implementation Guidance

On May 12, 2023, we notified the Chief, Communications and Liaison, and the Chief Information Officer of our concerns relating to these 23 unmanaged devices. We recommended that the Office of Communications and Liaison determine whether its mission meets one of the exceptions outlined in OMB guidance and if so, to request an exception in accordance with the guidance. Otherwise, the Office of Communications and Liaison should remove and/or prohibit access to the application and prohibit Internet access to TikTok to comply with the Act.

On May 17, 2023, we notified the IRS Chief Information Officer of our concerns with updating BYOD policies to comply with the Act. We recommended that the Office of Information Technology update its BYOD policies and program to comply with the No TikTok on Government Devices Act.

The Chief Information Officer should coordinate with OMB officials to determine if the IRS’s BYOD program’s policies and procedures are in compliance with the Act and update the program’s policies and procedures as needed.

On April 13, 2023, we notified the Chief, CI, and the Chief Information Officer of our concerns that CI still had access to TikTok. We recommended that the Office of Information Technology work with CI to document an adjudication process that complies with OMB guidance.

The Chief, CI, should coordinate with the Chief Information Officer to block access to TikTok and additional websites and entities related to TikTok’s parent company on mobile devices.