IRS isn't checking the performance of its identity proofing vendor
Briefly

The IRS currently does not conduct quality control checks on ID.me, the vendor responsible for digital identity proofing mandatory for accessing sensitive online IRS applications. Despite lawmakers' concerns about privacy and security, the IRS fails to independently evaluate ID.me’s performance, relying solely on the company's own assessments. With millions of taxpayers undergoing ID.me's identity checks annually, the lack of oversight and measurable performance goals raises significant concerns regarding privacy and the integrity of the identity verification process, especially since ID.me employs AI technology not listed in the IRS's inventory as mandated.
The IRS is relying on ID.me's own assessments of its solutions' performance, compromising independent verification of the identity proofing it requires for online applications.
Despite implementing improved privacy measures, the IRS has not established measurable goals or evaluated the performance of ID.me, raising concerns about its digital identity checks.
The IRS has not listed ID.me's identity proofing solutions in its AI inventory, failing to comply with legal and policy obligations regarding its use of technology.
Millions of taxpayers rely on ID.me for identity verification to access sensitive IRS applications, yet the agency lacks rigorous oversight of the vendor's performance.
Read at Nextgov.com
[
|
]