Is your data safe with the ATO? Senate hearing reveals all

30 ATO staff accessed members of the public's private data without authority.

Is your data safe with the ATO?

Yesterday a Senate estimates hearing in Canberra heard from senior tax office officials that up to 30 Australian Tax Office (ATO)  staff had accessed taxpayers’ private data (including celebrities) without authority.

While Commissioner of Taxation Chris Jordan assured the senators in the hearing that the ATO took this matter very seriously, it was revealed that only 12 of the offenders were fired, with the other 18 facing lesser penalties.

These revelations come just two weeks after the ATO Deputy Commissioner Michael Cranston came under investigation for his possible involvement in his son's alleged $165 million tax fraud scam.

“We are keenly aware that the community must have full trust in us – in our integrity, objectivity and expertise – we cannot do our job effectively without this,” Mr Jordan said.

“When confidence in us is jeopardised, it can impact negatively on taxpayers and the tax system, and I will do everything in my power to eliminate the risk of that happening.”

Do you feel safe knowing that poor procedures and practices allowed 30 tax office officials to access taxpayers’ private data without the correct authority?

RELATED ARTICLES





    COMMENTS

    To make a comment, please register or login
    Ted Wards
    31st May 2017
    10:52am
    My concern is that if they can access it, can they change it to give very false information that we then have to answer for? What the protections in place against that?
    MICK
    31st May 2017
    1:17pm
    My fears are more of the nature that workers in third world Call Centres may sell your personal data. That means you are in danger of indentity fraud and that is not a minor issue.
    The third world has few ethics and the above should keep us all awake at night. This is going to happen at some time and then the poo is really going to hit the fan. Welcome to the information age.
    MICK
    31st May 2017
    11:26am
    Your data is not safe ANYWHERE. That is why I am fighting a losing battle to not offer it up. Unfortunately even two bit websites these days demand DOB and a heap of other information before you can sign up. Of course you can offer bogus information but you have to write this down or risk being locked out in the future. I had this happen with Facebook as well as Airbnb. Not pretty.
    In the end ordinary people cannot protect themselves from those with the technical skills to get at your private information. That opens you up to identity fraud. Welcome to the age of enlightenment.
    AutumnOz
    31st May 2017
    11:40am
    Mick, I had an argument with an insurance company about being asked to provide a date of birth before they would answer a question, it is not necessary and they finally agreed that it was only necessary to provide information that could be checked to make sure of identity - that included the home address but the DoB wasn't really necessary.
    MICK
    31st May 2017
    12:01pm
    Been there many times. It normally requires a response/argument about the information is not account related. I am not sure if this behaviour is management driven or simply the result of employing morons. It is however galling when private and sensitive information is demanded for no good reason.
    Rae
    31st May 2017
    1:35pm
    It has to be moronic MICK when every single one of them uses the exact same identification that Facebook announces blithely once a year anyway.

    Bit like Qantas. They have a new trial in domestic now of self service check in and baggage drop with absolutely no identification required. Too hard for the programmers I suspect. Expect something very bad sometime soon. Anyone can just book a flight and declare they are Now Blow and board a plane interstate.

    Don't suppose the machine gives a rat's.
    Rae
    31st May 2017
    1:38pm
    That was book a flight and process the boarding pass without any need to identify themselves at all.
    MICK
    31st May 2017
    1:47pm
    Did not use the service last year Rae. I normally check in online, rock up to the counter and they print the necessary information and tickets for me. I don't think you can avoid the check-in counter no matter what you do but not sure as I do what I do.
    niemakawa
    31st May 2017
    2:17pm
    I once sold a car completed all the necessary paperwork and I cancelled my car insurance of course. The person who bought it from me arranged to have the car insured through his insurance company. His insurance company wanted to know my name, DOB and the name of my insurance company. I spoke to the agent of the buyer and questioned them why as the seller they needed to know these details. They gave some spurious reason and I refused to give them any information.
    Rae
    31st May 2017
    3:41pm
    You can now avoid the check in counter flying out of Qantas Domestic. You just pump your booking number into the machine and out comes your boarding pass and luggage label.There is another machine you use to collect your luggage receipt as you drop your bag off. No people needed.
    AutumnOz
    31st May 2017
    11:36am
    I cannot think of any reason for employees of the ATO to access our information unless it is part of their job at tax time.
    I agree with Ted Wards comment and the fear that these employees can change our information to suit current gov't regulations.
    The world is becoming scarier for older folk as time goes by.
    GrayComputing
    31st May 2017
    11:44am
    N0 current compute system is safe. Some have better locks and keys but all are fundamentally flawed.
    Breaking News from Comp.risks: Since 20012 every INTEL CPU had secretly added an inbuilt independent sub computer (backdoor) to remotely monitor your computer.
    No mater what operating system you and the government use. Any one Goodies or baddies with the key to unlock the backdoor can scan and modify the computer data.
    For this appalling state of affairs blame the USA three letter agency starting with N.
    Yet every USA president has failed to act to protect your privacy, so very strange.
    pedro the swift
    31st May 2017
    12:13pm
    Agreed! NO information that you give anyone is completely "secure". The so-called "Privacy"
    laws and agreements we all sign up to are only "outs " for organizations so they can share info . for "company" or "certain" uses. Nothing to do with your privacy.
    If there is something you don't want known don't put it anywhere on the web. And we won't even start on hackers getting your data. The ATO people involved should be severely dealt with.
    Trees
    31st May 2017
    12:29pm
    I don't disagree that it is a concern that ATO employees are accessing private details.
    We can't prevent this from happening but we can be proactive in making sure our information hasn't been changed as some of you have indicated is a concern. Log into your MyGov account (most people would have this set up, I think) to check your details on a regular basis, kind of like checking your bank transactions online regularly to make sure there is no unauthorised activity on your accounts.
    Sundays
    31st May 2017
    12:30pm
    There are over 20,000 people employed by the ATO. If only 30 have had a sticky beak it seems a minor issue. However, it is what they have done with the information they have accessed that is the real concern.
    gravy
    31st May 2017
    1:58pm
    They caught/identified 30 people but like an iceberg there could be many more hidden out of sight. Depending on the skill of the person using the system they could disguise their meddling.
    floss
    31st May 2017
    12:50pm
    As more and more companies use overseas call centres all our private information is at risk how could it be any other way.
    niemakawa
    1st Jun 2017
    12:36am
    Even here, BB is watching.
    KSS
    31st May 2017
    12:57pm
    Data is not 'safe' anywhere and to think it is, is just naive in this day and age.
    Rae
    31st May 2017
    1:26pm
    No computerised system is safe. All can be hacked, corrupted or wiped out. Look at the recent highjacking of computer data and the BA breakdown. People only fool themselves if they think a computer system can be made safe.

    Yes MICK identity theft is a real threat with the off shoring of more and more of our essential services. There can be no protection and I doubt the likes of Telstra or the Insurance groups give a damn anyway. They just want our money.
    MICK
    31st May 2017
    1:51pm
    We have only been spared but the day is coming when our personal data is on the web. Bet on that. Perhaps that is why other ID systems are close to being implemented: iris and fingerprint scans. The US Border Protection already requires these and likely the quick exits at Sydney Airport does an iris scan as well.
    George Orwell's novel is becoming reality methinks. Not happy Jan. Maybe I'll move to Tassie and become a hermit. Ant suggestions posters?
    MjP
    31st May 2017
    2:09pm
    No I don't feel unsafe. I believe proper procedures are in place and it is a few rogue individuals who breached the trust placed in them. Also the system seems to have identified theses individuals.
    niemakawa
    31st May 2017
    2:18pm
    I always start of with the premise "Trust no-one
    Blossom
    1st Jun 2017
    12:33am
    I know a person who had 2 loans with the same financial institution and his payment was allocated to the wrong loan. They called him and the finance company person asked him for his date of birth. He told the guy he obviously had his file and he could tell him what his date of birth was listed on his file. Fortunately he recoginsed the name and voice of the guy from the Financial Institution but he was out in the general public working and he was not going to state his date of birth and other people overhear that.
    Old Man
    1st Jun 2017
    10:15am
    I don't believe that any information is "safe". I have a fear (read paranoia) of identity theft and I try very hard to stop it happening. I avoid social media although we had to join Facebook to keep up to date with family interstate who posted photos of our grandchildren on Facebook. The name and DOB are false. We shred all papers with a name or identifying number. I don't believe the ATO or any other government authority will knowingly give out information but there will always be employees who will break the rules.
    ex PS
    1st Jun 2017
    11:20am
    As a lot of us suspected our Data is not safe with this government, they will access it and use it if is to their advantage to do so. I would not consider my data safe with any government in this age of self interest and win the next election at any cost.


    Join YOURLifeChoices, it’s free

    • Receive our daily enewsletter
    • Enter competitions
    • Comment on articles