IRS Privacy Policy
The IRS privacy policy was rewritten and cut down dramatically. Several explicit privacy assurances were deleted — including the promise that the IRS does not sell visitor data and the promise to get consent before using information for a new purpose — along with the detailed list of outside parties (DOJ, states, Congress, foreign governments, law enforcement/intelligence agencies) who can receive tax data, the explanation of AI safeguards, and general rights/oversight information. Three new section headings ('Privacy compliance programs,' 'Privacy Act requests,' 'Privacy complaints') were added but are currently empty, so practical guidance on filing requests or complaints is missing for now.
IRS dropped its explicit promise not to sell your data
The old policy flatly stated the IRS does not sell any information it collects. That specific assurance has been removed from the new policy, so there's no longer a written promise on this page that your data won't be sold.
“We do not sell the information collected at this site or any other information we collect.”
What you can do — If you want written confirmation of current data-sharing practices, contact the IRS Privacy Office or check for policy updates before assuming your data won't be sold or shared.
IRS no longer promises to ask before using your data for a new purpose
Previously, the IRS said it would get your consent before using information you provided for any purpose beyond what it was collected for, unless federal law required otherwise. That commitment is gone from the new policy.
“We will ask for your consent before using the information you provide for any secondary purpose other than those required by federal law.”
What you can do — Ask an IRS representative in writing to confirm how your information will be used before providing it for a specific purpose.
Detailed list of who receives your tax data was deleted
The old policy spelled out exactly which outside parties — including the Department of Justice, state tax agencies, Congress, foreign governments under tax treaties, and law-enforcement/intelligence agencies — can receive your tax return information. That transparency is gone, even though the underlying law (Code section 6103) allowing these disclosures hasn't changed.
“We may also disclose this information to other countries under a tax treaty, to federal and state agencies to enforce federal nontax criminal laws, or to federal law enforcement and intelligence agencies to combat terrorism.”
What you can do — If you want to know exactly who can see your tax data, request the applicable Privacy Act System of Records Notice from the Treasury Department.
Explanation of AI safeguards for taxpayer decisions removed
The IRS previously explained that AI used for fraud detection and compliance never replaces human judgment on decisions affecting your rights, benefits, or obligations, and that your appeal rights stay intact. That explanation no longer appears, reducing what you know about how AI is used on your case.
“AI does not replace human judgment in decisions affecting taxpayer rights, benefits, or obligations.”
General privacy-rights and oversight statements removed
The policy used to reassure you that the law automatically requires the IRS to protect your information without you needing to ask, and that record access is monitored with penalties for misuse. Removing this reduces the visible commitments the IRS is making to protect your data.
“The law requires the IRS to protect your information, and you do not need to take any action or make a special request for us to protect your confidentiality.”
Meeting recording opt-out explanation removed
The old policy told you how to opt out of having an IRS meeting recorded (by leaving the meeting) and that outside vendors used for meetings must follow IRS privacy rules. That guidance is gone.
“To opt out of recording, you may leave a recorded meeting.”
What you can do — Ask before joining an IRS online meeting whether it's being recorded and how to opt out.
New complaint and records-request sections are empty
The page now has headings for 'Privacy Act requests' and 'Privacy complaints,' but neither has any content yet, so there's currently no guidance on how to actually make a request or file a complaint.
“## Privacy Act requests”
What you can do — Check back on IRS.gov or call the IRS directly if you need to file a Privacy Act request or complaint, since the new sections don't yet explain the process.
AI-assisted content verified by the IRS
Thank you for visiting the Internal Revenue Service's website, an official United States Government System, and reviewing our privacy policy. Our privacy policy explains how we handle the personally identifiable information (PII) that you provide to us when you visit us online to browse, obtain information, or conduct a transaction. PII includes information that is personal in nature and which might be used to identify you. The IRS uses this website to provide information about IRS services and programs. This website includes specific applications which provide more services or enable us to respond to specific questions from website visitors.
We won't collect personal information about you just because you visit this Internet site. Some applications on this website provide you with the opportunity to order forms, ask questions requiring a response, sign up for electronic newsletters, participate in focus groups and customer surveys, or learn the status of filed returns or anticipated payments. Using these services is voluntary and may require that you provide additional personal information to us. Providing the requested information implies your consent for us to use this data in order to respond to your specific request.
The opening explanation of when the IRS collects your data was reworded, but conveys roughly the same idea: just visiting the site doesn't mean they collect your information, and giving it for services is voluntary.
IRS privacy policy overview
Privacy compliance programs
Privacy Act requests
Privacy complaints
ALSO IN THIS CHANGE, NOT TIED TO ONE PASSAGE
- ± CHANGEDPolicy rewritten and drastically shortened
The privacy policy went from a long, detailed page to a much shorter one. Several sections that used to have full explanations now show only empty headings with no text underneath.
- + ADDEDNew AI-content disclaimer added
A new banner at the top now says the page's content was AI-assisted and verified by the IRS.
**AI-assisted content** verified by the IRS
- − REMOVEDPromise not to sell your data was deleted
The old policy said in plain terms that the IRS does not sell the information it collects. That sentence no longer appears anywhere in the policy.
We do not sell the information collected at this site or any other information we collect.
- − REMOVEDConsent requirement for using your data for new purposes was deleted
The old policy promised the IRS would ask your permission before using your information for anything beyond what it was originally collected for (unless the law required otherwise). That promise is gone.
We will ask for your consent before using the information you provide for any secondary purpose other than those required by federal law.
- − REMOVEDDetailed list of who can receive your tax data was removed
A section spelling out exactly which outside parties can get your tax return information — the Department of Justice, state and local tax agencies, Congress, child-support agencies, other countries under tax treaties, and law-enforcement/intelligence agencies fighting terrorism — along with your related rights notice, was deleted entirely.
We may also disclose this information to other countries under a tax treaty, to federal and state agencies to enforce federal nontax criminal laws, or to federal law enforcement and intelligence agencies to combat terrorism.
- − REMOVEDExplanation of AI safeguards removed
The old policy explained that AI used for things like fraud detection never replaces human judgment on decisions about your rights or benefits, and that your appeal rights are preserved. That explanation has been deleted.
AI does not replace human judgment in decisions affecting taxpayer rights, benefits, or obligations.
- − REMOVEDSecurity monitoring explanation removed
The description of how the IRS monitors network traffic for attacks, and that it doesn't try to identify individual visitors unless it suspects illegal activity, was removed.
No attempts are made to identify individual users unless illegal behavior is suspected.
- − REMOVEDGeneral privacy-rights and oversight information removed
The policy used to state that the law automatically requires the IRS to protect your information (you don't have to ask), that access to records is monitored with penalties for misuse, and it named the senior official responsible for privacy. None of this remains.
The law requires the IRS to protect your information, and you do not need to take any action or make a special request for us to protect your confidentiality.
- − REMOVEDMeeting recording consent and opt-out details removed
The explanation that the IRS needs your consent to record online meetings, that you can opt out by leaving, and that outside meeting vendors must follow IRS privacy rules was deleted.
To opt out of recording, you may leave a recorded meeting.
- + ADDEDNew section headings added without content
Three new headings — 'Privacy compliance programs,' 'Privacy Act requests,' and 'Privacy complaints' — were added, but each is currently empty, so there's no guidance yet on how to use these programs or file a request or complaint.
## Privacy Act requests
- − REMOVEDForms-feedback and taxpayer-burden sections removed
Sections about commenting on IRS forms and estimated time/cost burdens for filing returns were deleted. These aren't privacy-related and their removal doesn't affect your data rights.
We try to create forms and instructions that can be easily understood.