Canada Revenue Agency staff accused of snooping on taxpayers’ personal data

Canada Revenue Agency staff accused of snooping on taxpayers’ personal data
07 Dec 2018

Workers at the Canada Revenue Agency (CRA) have been accused of accessing the confidential tax files of spouses, colleagues, church members and businesses without permission.

According to CBC News, despite the roll-out of a CAN$10.2 million (US$6.74 million) project called the Enterprise Fraud Management Solution at the end of March 2017 to track and deter employees from unauthorised snooping, 10 months of internal reports apparently show the files of at least 10,000 Canadians were compromised by staff, who abused their privileged access to government databases. Last year, one worker in the CRA's Calgary office kept a detailed spreadsheet of the financial data of 310 people in his community.

A 10 October 2017 CRA report said: "The investigation concluded that the employee made unauthorised accesses to his own account, and to a total of 310 other taxpayer accounts, including the employee's spouse, mother, former Team Leader, and two colleagues. The employee kept the information of the 310 individuals on a spreadsheet in his 'H' drive in order to keep track of who lived in his community." 

In total, CBC News obtained details of 14 significant privacy breaches that were serious enough to be reported to the Federal Privacy Commissioner. Ten were the work of rogue employees, while the rest involved inadvertent disclosures, such as a box of files being sent to the wrong address. None of the cases was referred to police.

The breaches usually consisted of the disclosure of social insurance numbers, addresses, phone numbers, dates of birth, marital status, income, deductions and employment information, all of which is standard information on annual tax forms.

About 60% of CRA's 40,000 or so employees have access to taxpayer files. A spokesperson said the Agency has been stepping up its employee monitoring and limiting their ability to see data that was not relevant to their work.

Emma Woollacott

Emma Woollacott is a freelance business journalist. Her work has appeared in a wide range of publications, including the Guardian, the Times, Forbes and the BBC.

OTHER ARTICLES THAT MAY INTEREST YOU

Canada Revenue Agency charges tax protestors with fraud

Canada's Justice Department trials AI system to help decide on tax cases

 Canada's uncollected tax debt hits $44bn

 

Workers at the Canada Revenue Agency (CRA) have been accused of accessing the confidential tax files of spouses, colleagues, church members and businesses without permission.

According to CBC News, despite the roll-out of a CAN$10.2 million (US$6.74 million) project called the Enterprise Fraud Management Solution at the end of March 2017 to track and deter employees from unauthorised snooping, 10 months of internal reports apparently show the files of at least 10,000 Canadians were compromised by staff, who abused their privileged access to government databases. Last year, one worker in the CRA's Calgary office kept a detailed spreadsheet of the financial data of 310 people in his community.

A 10 October 2017 CRA report said: "The investigation concluded that the employee made unauthorised accesses to his own account, and to a total of 310 other taxpayer accounts, including the employee's spouse, mother, former Team Leader, and two colleagues. The employee kept the information of the 310 individuals on a spreadsheet in his 'H' drive in order to keep track of who lived in his community." 

In total, CBC News obtained details of 14 significant privacy breaches that were serious enough to be reported to the Federal Privacy Commissioner. Ten were the work of rogue employees, while the rest involved inadvertent disclosures, such as a box of files being sent to the wrong address. None of the cases was referred to police.

The breaches usually consisted of the disclosure of social insurance numbers, addresses, phone numbers, dates of birth, marital status, income, deductions and employment information, all of which is standard information on annual tax forms.

About 60% of CRA's 40,000 or so employees have access to taxpayer files. A spokesperson said the Agency has been stepping up its employee monitoring and limiting their ability to see data that was not relevant to their work.

Emma Woollacott

Emma Woollacott is a freelance business journalist. Her work has appeared in a wide range of publications, including the Guardian, the Times, Forbes and the BBC.

OTHER ARTICLES THAT MAY INTEREST YOU

Canada Revenue Agency charges tax protestors with fraud

Canada's Justice Department trials AI system to help decide on tax cases

 Canada's uncollected tax debt hits $44bn

 

Leave a Reply

All blog comments are checked prior to publishing