Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

US Tax Agency Wants Data on Users from Internet Firms

The biggest concern with the proposed legislation is that it could lead to a vast collection of Social Security numbers and other personal data by a lot of different commercial entities on the Web

The Centre for Democracy and Technology (CDT) is sounding an early warning on a proposal in the US president's 2008 budget that would require Internet businesses such as eBay and Amazon.com to collect personal data on their customers and share it with the Internal Revenue Service (IRS).

The move is part of an effort by the US Treasury Department to track down unreported small business income generated by the sale of personal property on such sites. Under the proposal, online "brokers" would be required to file income statements for all customers who use their sites to conduct 100 or more separate transactions that generate $US5000 or more per year.

Among the information the brokers would be required to collect would be customers' names, addresses, and taxpayer identification numbers or Social Security numbers. The proposal would be effective for sales of property on or after Jan 1, 2008.

"While no lawmaker has yet come out in support of it, the measure could easily find its way into a larger legislative package," the CDT, a US-based think-tank, warned in a statement on its Web site.

The biggest concern with the proposed legislation is that it could lead to a vast collection of Social Security numbers and other personal data by a lot of different commercial entities on the Web, said Ari Schwartz, deputy director of the CDT. "The IRS is going after smaller businesses that cheat on their taxes," Schwartz said. In the process, though, millions of other Internet users who use such sites to sell personal property could also be affected.

Though the IRS wants income statements only in cases where businesses or individuals generate more than $US5000 from 100 separate transactions, most online sites are likely to collect personal data from everyone who uses their site, Schwartz said. That's because it's the broker that would be held liable under the proposal. They are therefore likely to require tax-related information in advance from everyone who does business on their sites rather than soliciting the information after the threshold has been reached, he said.

A large number of those buying and selling products online are individuals and small businesses unlikely to have taxpayer identification numbers, he said. In such cases, the brokers would be forced to collect Social Security numbers to comply with the IRS requirements, he said. "Such data retention proposals would force the creation of massive, privately maintained databases of personally identifiable data that government investigators could tap at their leisure," the CDT warned.

It could also prove burdensome and costly for businesses to acquire, maintain and protect the data, Schwartz said. It is only the latest example of continuing proposals by government to force businesses to store large amounts of customer data, Schwartz said. Another example is a proposal that requires Internet service providers to store information about their customers for years as part of an effort to track down and prosecute online predators. Such data retention mandates come at the same time security analysts are advising businesses to reduce the amount of personal data they collect, Schwartz said.

"Indeed, sites that currently ask consumers for their [Social Security numbers] are very likely to be related to illegal 'phishing' scams. This proposal would make it harder to distinguish fraudulent sites," CDT said in its statement.

A report from the Information Reporting Program Advisory Committee Small Business/Self Employee Subgroup of the IRS recommended the proposal and said it is necessary because of the "explosive" growth of the Internet. "One of the more popular business opportunities is the selling of new and used items through online auction sites such as eBay, Ubid.com, etc." the report noted. The report quoted an industry group study that showed more than 740,000 Americans reporting their primary or secondary source of income through such sites.

"The number on this study is growing and growing more quickly every year," the report said. "It is likely that a significant number of those users either choose to ignore income reporting requirements or are unaware of their obligations thus contributing to the tax gap."

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Amazon.com, CDT, eBay, Internal Revenue Service, IRS, IRS, uBid

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
Latest Blog Posts
Whitepapers
  • NetScaler 2048-bit SSL performance advantage
    Citrix® NetScaler® provides advanced layer 4-7 traffic management and load balancing. Like other leading Application Delivery Controllers (ADCs), NetScaler can offload computationally expensive SSL processing responsibilities from web and application servers to speed the delivery of SSL-protected applications. Learn more.
    Learn more »
  • Email Encryption/Decryption and Signing integrated into a comprehensive content security solution
    Clearswift’s SECURE Email Gateway provides an easy to use approach to providing secure email conversations. The technology enables customers to provide the privacy, authenticity and integrity of the communication that secure messaging offers, but without the complexity and high administration cost of other systems. The Clearswift SECURE Email Gateway with integrated encryption technology enables business to communicate with confidence and protects them from the risk of sensitive data loss.
    Learn more »
  • OVUM Report: Governance Risk and Compliance-- GRC usage and buying trends in the ANZ markets
    The existence of an established and stable governance risk and compliance strategy is extremely important to public and private sector organisations as they strive to meet an evergrowing range of regulatory demands. Given the current constraints, it is one of the few areas where the vast majority of organisations intend to either maintain or in many cases increase spending. Read more.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments