Tax data is not particularly sensitive and several nations just publish it. Even in the US many forms of non-individual tax filings are public by default. The results of audits /are/ highly sensitive but there's no reason to hold those on computer systems for longer than 5 years after the audit.
I think the medical industry can easily be regulated without the government having access to my actual medical file. They regulate cars without having any idea how I drive mine. They regulate planes without sitting on the flight deck themselves.
It's like we know how to build good businesses, good databases, have solid user control practices, but then we give the government a pass because it's imagined to be "really hard." It's laughable.
I think the medical industry can easily be regulated without the government having access to my actual medical file. They regulate cars without having any idea how I drive mine. They regulate planes without sitting on the flight deck themselves.
It's like we know how to build good businesses, good databases, have solid user control practices, but then we give the government a pass because it's imagined to be "really hard." It's laughable.