+++lead-in-text

The Internal Revenue Service is dropping a controversial facial recognition system that requires people to upload video selfies when creating new IRS online Ars Technica
This story originally appeared on [Ars target="_blank"}, a trusted source for technology news, tech policy analysis, reviews, and more. Ars is owned by WIRED's parent company, Condé Nast.

+++

+++

"The IRS announced it will transition away from using a third-party service for [facial to help authenticate people creating new online accounts," the [agency said on "The transition will occur over the coming weeks in order to prevent larger disruptions to taxpayers during filing season. During the transition, the IRS will quickly develop and bring online an additional authentication process that does not involve [facial IRS has been using the third-party system ID.me for [facial recognition of Privacy and civil rights advocates and lawmakers from both major parties have objected to the system. The IRS wasn't demanding ID.me verification for filing tax returns but was requiring it for accessing related services, [such information, applying for payment plans online, requesting transcripts, and the Child Tax Credit Update Portal.

The ID.me system is "using Amazon's controversial Rekognition technology" and had verified 20.9 million users' selfies by January 25, [Bloomberg The Treasury Department last year signed a [two-year, $86 million with a vendor to deploy and maintain ID.me software.

US Sen. Ron Wyden (D-Ore.), chair of the Senate Finance Committee, was among those who on the IRS to scrap the system. "The Treasury Department has made the smart decision to direct the IRS to transition away from using the controversial ID.me verification service, as I requested earlier today," Wyden after Monday's announcement. "I understand the transition process may take time, but I appreciate that the administration recognizes that privacy and security are not mutually exclusive and no one should be forced to submit to facial recognition to access critical government services."

The IRS process involves uploading a photo of an ID (such as a license or passport) along with a [video which are compared against each other to verify the user's identity. [ID.me that, if the process fails, "you will be routed to verify your identity over a video call with an ID.me Trusted Referee ... You will need to show your identity documents to an ID.me Trusted Referee along with a selfie (a photo of yourself) to complete your identity verification."

ID.me verification was already required for people creating new IRS accounts. There was a phase-in approach for people who had previously created IRS online accounts—the IRS [said in that those people can use their credentials until summer 2022 and will be "prompted to create an ID.me account as soon as possible."

A [group of 15 Republican last week wrote a letter to IRS Commissioner Chuck Rettig, saying the "IRS has unilaterally decided to allow an outside contractor to stand as the gatekeeper between citizens and necessary government services." The senators objected to "intrusive verification measures" and the fact that "ID.me is not subject to the same oversight rules as a government agency."

Another letter urging the IRS to abandon the facial recognition technology was [sent by four Democratic House members. "Americans will be forced to put sensitive data into a biometric database, which is a prime target for they wrote.

The Democrats illustrated the risk by pointing to a 2019 "cyberattack on a US Customs and Border Protection (CBP) subcontractor [that] exposed the face images and license plates of thousands of US travelers. The subcontractor cyberattack and ensuing fallout were significant, but the cybersecurity risk with the IRS's plan is far greater: millions of Americans use the IRS website annually for a variety of vital functions, and, as a result, each of them will be forced to trust a private contractor with some of their most sensitive data."

The Democratic lawmakers also expressed concern about [racial bias in facial recognition and called out a "lack of transparency" in what technology is used by ID.me:

*We are also concerned about the lack of transparency in both the IRS's contract with ID.me and ID.me itself. The company had repeatedly stated, including in a press release just weeks ago, that ID.me does not use one-to-many face recognition, which compares a facial image to a mass database of other facial images and is more privacy invasive and prone to error. Yet, in the same month, ID.me's CEO then publicly stated that his company does, in fact, use one-to-many face recognition technology. Furthermore, the IRS's Privacy Impact Assessment neglects to mention ID.me is even using this technology on Americans. Given these issues, it is simply wrong to compel millions of Americans to place trust in this new protocol.*

Rettig yesterday said, "The IRS takes taxpayer privacy and security seriously, and we understand the concerns that have been raised. Everyone should feel comfortable with how their personal information is secured, and we are quickly pursuing short-term options that do not involve facial recognition."

The IRS said the change announced Monday "does not interfere with the taxpayer's ability to file their return or pay taxes owed. During this period, the IRS will continue to accept tax filings, and it has no other impact on the current tax season. People should continue to file their taxes as they normally would."

Even as the IRS moved ahead with ID.me, the US General Services Administration [told *The Washington that it "is committed to not deploying facial recognition ... or any other emerging technology for use with government benefits and services until rigorous review has given us confidence that we can do so equitably and without causing harm to vulnerable populations."

*This story originally appeared on* [*Ars target="_blank"}*.*

***
### More Great WIRED Stories
- 📩 The latest on tech, science, and more: [Get our They were “calling to help.” Then [they stole [Extreme heat in the is out of control
- Thousands of [“ghost are flying empty
- How to ethically [get rid of your unwanted [North hacked him. So he took down its internet
- 👁️ Explore AI like never before with [our new 🏃🏽‍♀️ Want the best tools to get healthy? Check out our Gear team’s picks for the [best fitness [running (including and and [best

Source: Wired

Powered by NewsAPI.org