The escalation of security breaches involving personally identifiable information (PII) has contributed to the loss of millions of records over the past few years. Breaches involving PII are hazardous to both individuals and org. Individual harms may include identity theft, embarrassment, or blackmail. Organ. harms may include a loss of public trust, legal liability, or remediation costs. To protect the confidentiality of PII, org. should use a risk-based approach. This report provides guidelines for a risk-based approach to protecting the confidentiality of PII. The recommend. here are intended primarily for U.S. Fed. gov¿t. agencies and those who conduct business on behalf of the agencies, but other org. may find portions of the publication useful.

IRS' Security Program Requires Improvements To Protect Confidentiality of Income Tax Information

Millions of donors annually give hundreds of billions of dollars to charities. While this giving helps meet charitable purposes, congressional & media concerns have arisen about whether some charities spend too much on fundraising & general management & not enough on program services to meet the charitable purposes related to the tax-exempt status. Such concerns have heightened since the outflow of charitable giving after 9/11. This report focuses on the adequacy of: (1) publicly reported Form 990 data on charity spending in facilitating public oversight of charities, (2) IRS's oversight of charities, & (3) IRS's data sharing with state agencies that oversee charities. Includes reviews of studies on charities from 1994-1999. Charts & tables.