What mechanism helps protect privacy when external parties access confidential taxpayer data?

• A. Self-assessment by the contractor
• B. Audit oversight
• C. No oversight is required
• D. Public reporting of all access events

Answer: (B)

Auditing and independent oversight are essential to privacy when external parties access confidential taxpayer data. Audit oversight provides a check on who accessed the data, for what purpose, and whether proper safeguards were in place, such as strict access controls, least-privilege access, and comprehensive logging. Regular audits create accountability and help detect or deter improper access, ensuring compliance with privacy rules and agency policies.

Self-assessment by the contractor lacks independent verification and can miss or conceal issues. No oversight eliminates accountability altogether, increasing the risk of misuse. Public reporting of every access event would expose sensitive information and is neither practical nor privacy-preserving. In this context, audit oversight best protects privacy.