Title II — 21st Century Irs
TITLE II 21st Century Irs
Subtitle A Cybersecurity and Identity Protection
SEC. 2002. Recommendations of Electronic Tax Administration Advisory Committee Regarding Identity Theft Refund Fraud.
SEC. 2003. Information Sharing and Analysis Center.
“(14) Disclosure of return information for purposes of cybersecurity and the prevention of identity theft tax refund fraud.—
“(A) In general.—Under such procedures and subject to such conditions as the Secretary may prescribe, the Secretary may disclose specified return information to specified ISAC participants to the extent that the Secretary determines such disclosure is in furtherance of effective Federal tax administration relating to the detection or prevention of identity theft tax refund fraud, validation of taxpayer identity, authentication of taxpayer returns, or detection or prevention of cybersecurity threats.
“(B) Specified isac participants.—For purposes of this paragraph—
“(i) In general.—The term ‘specified ISAC participant’ means—
“(I) any person designated by the Secretary as having primary responsibility for a function performed with respect to the information sharing and analysis center described in section 2003(a) of the Taxpayer First Act, and
“(II) any person subject to the requirements of section 7216 and which is a participant in such information sharing and analysis center.
“(ii) Information sharing agreement.—Such term shall not include any person unless such person has entered into a written agreement with the Secretary setting forth the terms and conditions for the disclosure of information to such person under this paragraph, including requirements regarding the protection and safeguarding of such information by such person.
“(C) Specified return information.—For purposes of this paragraph, the term ‘specified return information’ means—
“(i) in the case of a return which is in connection with a case of potential identity theft refund fraud—
“(I) in the case of such return filed electronically, the internet protocol address, device identification, email domain name, speed of completion, method of authentication, refund method, and such other return information related to the electronic filing characteristics of such return as the Secretary may identify for purposes of this subclause, and
“(II) in the case of such return prepared by a tax return preparer, identifying information with respect to such tax return preparer, including the preparer taxpayer identification number and electronic filer identification number of such preparer,
“(ii) in the case of a return which is in connection with a case of a identity theft refund fraud which has been confirmed by the Secretary (pursuant to such procedures as the Secretary may provide), the information referred to in subclauses (I) and (II) of clause (i), the name and taxpayer identification number of the taxpayer as it appears on the return, and any bank account and routing information provided for making a refund in connection with such return, and
“(iii) in the case of any cybersecurity threat to the Internal Revenue Service, information similar to the information described in subclauses (I) and (II) of clause (i) with respect to such threat.
“(D) Restriction on use of disclosed information.—
“(i) Designated third parties.—Any return information received by a person described in subparagraph (B)(i)(I) shall be used only for the purposes of and to the extent necessary in—
“(I) performing the function such person is designated to perform under such subparagraph,
“(II) facilitating disclosures authorized under subparagraph (A) to persons described in subparagraph (B)(i)(II), and
“(III) facilitating disclosures authorized under subsection (d) to participants in such information sharing and analysis center.
“(ii) Return preparers.—Any return information received by a person described in subparagraph (B)(i)(II) shall be treated for purposes of section 7216 as information furnished to such person for, or in connection with, the preparation of a return of the tax imposed under chapter 1.
“(E) Data protection and safeguards.—Return information disclosed under this paragraph shall be subject to such protections and safeguards as the Secretary may require in regulations or other guidance or in the written agreement referred to in subparagraph (B)(ii). Such written agreement shall include a requirement that any unauthorized access to information disclosed under this paragraph, and any breach of any system in which such information is held, be reported to the Treasury Inspector General for Tax Administration.”
SEC. 2004. Compliance by Contractors with Confidentiality Safeguards.
“(9) Disclosure to contractors and other agents.—Notwithstanding any other provision of this section, no return or return information shall be disclosed to any contractor or other agent of a Federal, State, or local agency unless such agency, to the satisfaction of the Secretary—
“(A) has requirements in effect which require each such contractor or other agent which would have access to returns or return information to provide safeguards (within the meaning of paragraph (4)) to protect the confidentiality of such returns or return information,
“(B) agrees to conduct an on-site review every 3 years (or a mid-point review in the case of contracts or agreements of less than 3 years in duration) of each contractor or other agent to determine compliance with such requirements,
“(C) submits the findings of the most recent review conducted under subparagraph (B) to the Secretary as part of the report required by paragraph (4)(E), and
“(D) certifies to the Secretary for the most recent annual period that such contractor or other agent is in compliance with all such requirements.
SEC. 2005. Identity Protection Personal Identification Numbers.
SEC. 2006. Single Point of Contact for Tax-Related Identity Theft Victims.
SEC. 2007. Notification of Suspected Identity Theft.
“SEC. 7529. NOTIFICATION OF SUSPECTED IDENTITY THEFT.
“(a) In General.—If the Secretary determines that there has been or may have been an unauthorized use of the identity of any individual, the Secretary shall, without jeopardizing an investigation relating to tax administration—
“(1) as soon as practicable—
“(A) notify the individual of such determination,
“(B) provide instructions on how to file a report with law enforcement regarding the unauthorized use,
“(C) identify any steps to be taken by the individual to permit law enforcement to access personal information of the individual during the investigation,
“(D) provide information regarding actions the individual may take in order to protect the individual from harm relating to the unauthorized use, and
“(E) offer identity protection measures to the individual, such as the use of an identity protection personal identification number, and
“(2) at the time the information described in paragraph (1) is provided (or, if not available at such time, as soon as practicable thereafter), issue additional notifications to such individual (or such individual’s designee) regarding—
“(A) whether an investigation has been initiated in regards to such unauthorized use,
“(B) whether the investigation substantiated an unauthorized use of the identity of the individual, and
“(C) whether—
“(i) any action has been taken against a person relating to such unauthorized use, or
“(ii) any referral has been made for criminal prosecution of such person and, to the extent such information is available, whether such person has been criminally charged by indictment or information.
“(b) Employment-Related Identity Theft.—
“(1) In general.—For purposes of this section, the unauthorized use of the identity of an individual includes the unauthorized use of the identity of the individual to obtain employment.
“(2) Determination of employment-related identity theft.—For purposes of this section, in making a determination as to whether there has been or may have been an unauthorized use of the identity of an individual to obtain employment, the Secretary shall review any information—
“(A) obtained from a statement described in section 6051 or an information return relating to compensation for services rendered other than as an employee, or
“(B) provided to the Internal Revenue Service by the Social Security Administration regarding any statement described in section 6051,
“Sec. 7529. Notification of suspected identity theft.”.
SEC. 2008. Guidelines for Stolen Identity Refund Fraud Cases.
SEC. 2009. Increased Penalty for Improper Disclosure or Use of Information by Preparers of Returns.
“(b) Enhanced Penalty for Improper Use or Disclosure Relating to Identity Theft.—
“(1) In general.—In the case of a disclosure or use described in subsection (a) that is made in connection with a crime relating to the misappropriation of another person’s taxpayer identity (as defined in section 6103(b)(6)), whether or not such crime involves any tax filing, subsection (a) shall be applied—
“(A) by substituting ‘$1,000’ for ‘$250’, and
“(B) by substituting ‘$50,000’ for ‘$10,000’.
“(2) Separate application of total penalty limitation.—The limitation on the total amount of the penalty under subsection (a) shall be applied separately with respect to disclosures or uses to which this subsection applies and to which it does not apply.”
Subtitle B Development of Information Technology
SEC. 2101. Management of Internal Revenue Service Information Technology.
“(f) Internal Revenue Service Chief Information Officer.—
“(1) In general.—There shall be in the Internal Revenue Service an Internal Revenue Service Chief Information Officer (hereafter referred to in this subsection as the ‘IRS CIO’) who shall be appointed by the Commissioner of Internal Revenue.
“(2) Centralized responsibility for internal revenue service information technology.—The Commissioner of Internal Revenue (and the Secretary) shall act through the IRS CIO with respect to all development, implementation, and maintenance of information technology for the Internal Revenue Service. Any reference in this subsection to the IRS CIO which directs the IRS CIO to take any action, or to assume any responsibility, shall be treated as a reference to the Commissioner of Internal Revenue acting through the IRS CIO.
“(3) General duties and responsibilities.—The IRS CIO shall—
“(A) be responsible for the development, implementation, and maintenance of information technology for the Internal Revenue Service,
“(B) ensure that the information technology of the Internal Revenue Service is secure and integrated,
“(C) maintain operational control of all information technology for the Internal Revenue Service,
“(D) be the principal advocate for the information technology needs of the Internal Revenue Service, and
“(E) consult with the Chief Procurement Officer of the Internal Revenue Service to ensure that the information technology acquired for the Internal Revenue Service is consistent with—
“(i) the goals and requirements specified in subparagraphs (A) through (D), and
“(ii) the strategic plan developed under paragraph (4).
“(4) Strategic plan.—
“(A) In general.—The IRS CIO shall develop and implement a multiyear strategic plan for the information technology needs of the Internal Revenue Service. Such plan shall—
“(i) include performance measurements of such technology and of the implementation of such plan,
“(ii) include a plan for an integrated enterprise architecture of the information technology of the Internal Revenue Service,
“(iii) include and take into account the resources needed to accomplish such plan,
“(iv) take into account planned major acquisitions of information technology by the Internal Revenue Service, and
“(v) align with the needs and strategic plan of the Internal Revenue Service.
“(B) Plan updates.—The IRS CIO shall, not less frequently than annually, review and update the strategic plan under subparagraph (A) (including the plan for an integrated enterprise architecture described in subparagraph (A)(ii)) to take into account the development of new information technology and the needs of the Internal Revenue Service.
“(5) Scope of authority.—
“(A) Information technology.—For purposes of this subsection, the term ‘information technology’ has the meaning given such term by section 11101 of title 40, United States Code.
“(B) Internal revenue service.—Any reference in this subsection to the Internal Revenue Service includes a reference to all components of the Internal Revenue Service, including—
“(i) the Office of the Taxpayer Advocate,
“(ii) the Criminal Investigation Division of the Internal Revenue Service, and
“(iii) except as otherwise provided by the Secretary with respect to information technology related to matters described in subsection (b)(3)(B), the Office of the Chief Counsel.”
SEC. 2102. Internet Platform for Form 1099 Filings.
SEC. 2103. Streamlined Critical Pay Authority for Information Technology Positions.
“SEC. 7812. STREAMLINED CRITICAL PAY AUTHORITY FOR INFORMATION TECHNOLOGY POSITIONS.
“In the case of any position which is critical to the functionality of the information technology operations of the Internal Revenue Service—
“(1) section 9503 of title 5, United States Code, shall be applied—
“(A) by substituting ‘during the period beginning on the date of the enactment of section 7812 of the Internal Revenue Code of 1986, and ending on September 30, 2025’ for ‘Before September 30, 2013 in subsection (a)’,
“(B) without regard to subparagraph (B) of subsection (a)(1), and
“(C) by substituting ‘the date of the enactment of the Taxpayer First Act’ for ‘June 1, 1998’ in subsection (a)(6),
“(2) section 9504 of such title 5 shall be applied by substituting ‘During the period beginning on the date of the enactment of section 7812 of the Internal Revenue Code of 1986, and ending on September 30, 2025’ for ‘Before September 30, 2013’ each place it appears in subsections (a) and (b), and
“(3) section 9505 of such title shall be applied—
“(A) by substituting ‘During the period beginning on the date of the enactment of section 7812 of the Internal Revenue Code of 1986, and ending on September 30, 2025’ for ‘Before September 30, 2013’ in subsection (a), and
“(B) by substituting ‘the information technology operations’ for ‘significant functions’ in subsection (a).”
“Sec. 7812. Streamlined critical pay authority for information technology positions.”.
Subtitle C Modernization of Consent-Based Income Verification System
SEC. 2201. Disclosure of Taxpayer Information for Third-Party Income Verification.
SEC. 2202. Limit Redisclosures and Uses of Consent-Based Disclosures of Tax Return Information.
Subtitle D Expanded Use of Electronic Systems
SEC. 2301. Electronic Filing of Returns.
“(5) Applicable number.—
“(A) In general.—For purposes of paragraph (2)(A), the applicable number shall be—
“(i) except as provided in subparagraph (B), in the case of calendar years before 2021, 250,
“(ii) in the case of calendar year 2021, 100, and
“(iii) in the case of calendar years after 2021, 10.
“(B) Special rule for partnerships for 2018, 2019, 2020, and 2021.—In the case of a partnership, for any calendar year before 2022, the applicable number shall be—
“(i) in the case of calendar year 2018, 200,
“(ii) in the case of calendar year 2019, 150,
“(iii) in the case of calendar year 2020, 100, and
“(iv) in the case of calendar year 2021, 50.
“(6) Partnerships required to file on magnetic media.—Notwithstanding paragraph (2)(A), the Secretary shall require partnerships having more than 100 partners to file returns on magnetic media.”
“(D) Exception for certain preparers located in areas without internet access.—The Secretary may waive the requirement of subparagraph (A) if the Secretary determines, on the basis of an application by the tax return preparer, that the preparer cannot meet such requirement by reason of being located in a geographic area which does not have access to internet service (other than dial-up or satellite service).”
SEC. 2302. Uniform Standards for the Use of Electronic Signatures for Disclosure Authorizations to, and Other Authorizations of, Practitioners.
“(3) Published guidance.—
“(A) In general.—The Secretary shall publish guidance as appropriate to define and implement any waiver of the signature requirements or any method adopted under paragraph (1).
“(B) Electronic signatures for disclosure authorizations to, and other authorizations of, practitioners.—Not later than 6 months after the date of the enactment of this subparagraph, the Secretary shall publish guidance to establish uniform standards and procedures for the acceptance of taxpayers’ signatures appearing in electronic form with respect to any request for disclosure of a taxpayer’s return or return information under section 6103(c) to a practitioner or any power of attorney granted by a taxpayer to a practitioner.
“(C) Practitioner.—For purposes of subparagraph (B), the term ‘practitioner’ means any individual in good standing who is regulated under section 330 of title 31, United States Code.”