A procurement document has opened a new privacy fight
U.S. Immigration and Customs Enforcement appears to be purchasing records connected to immigrants’ tax identifiers from a private data broker, according to procurement records reviewed by 404 Media and comments from Senator Ron Wyden. The contract is worth nearly $10 million and is tied to ITINs, or Individual Taxpayer Identification Numbers, which many undocumented people use to file taxes instead of using a Social Security number.
The allegation is consequential because it suggests a possible alternate route to information that courts have already said cannot be shared through a direct government arrangement. In Wyden’s account, the question is not simply whether ICE wants more data. It is whether the agency is trying to obtain through the private market information that it cannot lawfully receive through the IRS or another federal channel.
That distinction turns an otherwise technical procurement issue into a broader test of the limits of data brokerage, taxpayer privacy, and government workarounds. If public agencies can buy access to sensitive records after being blocked from obtaining them directly, then the practical protections created by a court ruling may be weaker than they appear on paper.
What the report says
404 Media reported that the contract appears related to ITIN records and that the procurement was reviewed alongside government documents. The article did not present the arrangement as definitively proven beyond dispute; its language was careful, saying ICE appears to be buying records related to those identifiers. That caution matters, and so does the central claim. The report points to a purchase path that could have major consequences for immigrant communities if confirmed.
ITINs occupy a sensitive space in the U.S. administrative system. They are used by people who need to file taxes but do not have a Social Security number. In practice, that includes many undocumented people. Because of that, information associated with ITINs carries both financial and immigration sensitivity. Access to those records, or to data products built from them, could help the government map identity, residence, employment, or family connections depending on what the purchased dataset contains.
The source text supplied here does not specify the exact broker, the precise fields being purchased, or how ICE intends to use the records operationally. But the amount of the procurement and the focus on ITIN-related information were significant enough to trigger direct concern from a senior senator who has long focused on privacy and surveillance issues.
Wyden’s accusation: a possible end-run around the courts
Wyden told 404 Media that the deal looks like an attempt to skirt both the law and a court order. He argued that a court had already struck down an agreement between the IRS and the Department of Homeland Security to share ITINs and other personal information. In his view, a contract to buy that same kind of information from a private broker would amount to an end-run around taxpayer privacy protections.
The legal and ethical theory behind that criticism is easy to understand. Courts can stop one channel of disclosure. They may have less direct control over what information is commercially available, especially if a dataset has already been assembled or transformed by a private intermediary. That creates a structural loophole: what the government cannot request from one agency, it may try to purchase from a company.
Whether that description ultimately holds would depend on facts not established in the supplied text, including the scope of the contract and the data lineage behind any records involved. But Wyden’s framing captures why the issue is larger than one procurement action. It goes to the heart of a recurring digital-era problem: when privacy rules govern institutions, but not the parallel market that trades in the same information.
The larger policy problem behind the story
Even without more detailed contract terms, the report highlights a familiar tension in modern data governance. Government agencies increasingly operate in an ecosystem where commercial data brokers collect, package, and sell information that can be highly revealing. In that environment, legal restrictions on direct access do not always prevent practical access. They can simply shift where the transaction happens.
For immigrant communities, that dynamic carries particularly high stakes. Tax filing has often been presented as a civic and financial obligation that can be fulfilled even by people without full legal status, in part through the use of ITINs. If the information associated with those filings is later accessible through commercial channels, trust in that arrangement could erode quickly.
That risk extends beyond immigration enforcement. It touches a broader public question about whether people can rely on purpose-specific identifiers remaining confined to their original use. Once sensitive information enters secondary markets, the line between administrative necessity and surveillance can become difficult to defend.
What remains unresolved
The supplied report leaves major unanswered questions. It does not establish whether ICE has already received the records, how current the data is, what legal review the procurement received, or whether the records are direct ITIN data or derivative datasets linked to those identifiers. It also does not include a response from ICE in the excerpt provided here.
Those uncertainties are important, but they do not diminish the significance of the underlying claim. A nearly $10 million procurement related to immigrant tax identifiers is substantial on its face, and the context described by Wyden gives it immediate legal and political relevance. The story points to a growing challenge for privacy regulation: restrictions are only as strong as the commercial workarounds they can prevent.
For now, the most defensible conclusion is the narrow one supported by the source text. Procurement records reviewed by 404 Media indicate ICE appears to be seeking ITIN-related information from a data broker, and Senator Wyden says such a move would evade both taxpayer privacy law and a prior court ruling. If further reporting confirms the details, the case could become a prominent example of how public power and private data markets intersect when direct access is blocked.
This article is based on reporting by 404 Media. Read the original article.
Originally published on 404media.co
