Chief Privacy Officer

Chief Privacy Officer

The Chief Privacy Officer preserves and enhances public confidence by advocating for the proper protection, retention and disclosure of taxpayer information; promoting sound Internal Revenue Service (IRS) policies to protect taxpayer and employee privacy and personal and sensitive information, provides executive leadership over the Privacy organization and establishes IRS strategic direction regarding compliance with the Freedom of Information Act (FOIA), Internal Revenue Code section 6103, the Federal Records Act, public access to IRS records, privacy, and safeguarding federal tax information in the hands of certain third parties. The Chief Privacy Officer performs the following duties and responsibilities:

• Provides executive leadership and direction over the information protection and data security program ensuring that taxpayer and employee privacy and personal and sensitive information is secure and protected. Serves as the principal advisor and consultant to senior management on matters related to taxpayer and employee privacy, records management and safeguarding data. Provides executive leadership for consistent implementation of policies on privacy and the administration of FOIA. Provides guidance and direction in carrying out the privacy and disclosure policies to all IRS functional areas. Ensures the Privacy & Civil Liberties Impact Assessment process is effective within IRS and meets standards and goals set forth government wide. Provides guidance and direction in carrying out IRS privacy policies to all functional areas.
• Establishes an appropriate and timely IRS disclosure, privacy, records, data-sharing and safeguarding strategy for the full range of IRS activities, including information systems, with special emphasis on modernization and future state initiatives. Establishes an Incident/Data Loss Response Plan focused on responding to data breach, data loss, or identity theft incidents through an evaluation of risk and measured response. Assesses and serves as the incident coordinator to support plans and mitigate organizational and taxpayer risks from potential data breaches or unauthorized disclosures.
• Keeps abreast of new information technology, information systems, and data flows and their impact on privacy and information protection to ensure IRS is aware of emerging security risks and implements strategies and policies to ensure privacy protection.
• Collaborates with other public-sector agencies and private industry to share knowledge, data and information to enhance IRS ability to prevent identity theft and tax refund fraud and to identify challenges and develop a more comprehensive response. Establishes effective working relationships and communication with executive members of each business unit to understand operational priorities and initiatives, identify strategic and tactical disclosure, privacy and records management issues, and provide effective advice and education on privacy, disclosure and records matters.
• Conducts an IRS-wide risk assessment to identify sensitive personal information vulnerabilities. Detects and documents the universe of threats and risks to build a comprehensive enterprise-wide risk portfolio and determine effective mitigation strategies. Establishes an internal/external data sharing governance process emphasizing the importance of addressing identity theft and tax refund fraud, assigning roles and responsibilities in accordance with a risk management strategy.
• Incorporates privacy protections, transparency and records management in IRS's Strategic Planning process by identifying Servicewide objectives, goals, and measures of success and estimating related privacy and records costs. Incorporates privacy principles by ensuring business requirements also reflect disclosure, privacy and sound record management practices and policies of the agency.

If you want to find out more about IRS careers, visit us on the web at