Security clearances for classified information and most IRS employees don’t have security clearances.

Yeah, let's just assume there are no safeguards in place at the IRS to protect personal data.

These IRS safeguards will not be of the “security clearance required” form. IRS data, while private, is not classified.

This. IRS data isn’t protected because it’s classified. It’s protected because of confidentiality enforced by laws passed by Congress (the Tax reform act I believe)

(and the fact that the executive branch can be sued out of their pants for civil damages).

*(and the fact that the executive branch can be sued out of their pants for civil damages)

if the government agrees to allowing itself to be sued...

They have 500MB email boxes! Actually I wonder, now, because they wanted to hire 84k people last year...

You’re the one assuming DOGE is ignoring “safeguards” you don’t even know exist.

We know they are?

> The USAID systems the DOGE team tried to access included personnel files and security systems, including classified systems beyond the security level of at least some of the DOGE employees, according to three of the sources. The systems also included security clearance information for agency employees, two of the sources said.

https://www.nbcnews.com/politics/national-security/usaid-sec...

I'm familiar with IRS contracts and while security clearances are not involved, they do have a unique background investigation process that involves a tax audits.

It would not be security clearances, but some form of assurances for protecting PII. Think of it this way. If this system contained people’s credit cards numbers, the entire system would be required to be PCI certified, and that requires that processes and procedures be in place so that even employee access is extremely limited. Data shouldn’t even be plaintext at rest. No one really needs to see anyone’s credit card number. Anonymized data is just fine.

So some agency, authorized by the president or not, barging in asking for read/write access to card numbers should not be allowed, because the data aren’t the president’s to give.

Same should be valid for social security numbers. You can’t guarantee that 100% of DOGE’s employees are benign, or that they are have the best opsec, or that their devices are not exploitable (or exploited already). So you minimize this attack surface by minimizing access.

Because if anything happens, then you can be 100% certain that Musk/Trump will not voluntarily answer for it/make people whole. They will at best be taken to court where they will fight for years while the victims suffer the consequences in the present.

So you do everything you can to prevent this nebulous, blameless “we meant well, we couldn’t know this would happen, we’re sorry for all the pain, let’s move forward together” outcome.