IRIS: Difference between revisions

Jump to navigation Jump to search
Line 12: Line 12:
== Purpose ==
== Purpose ==
== Law ==
== Law ==
The primary law governing IRIS is the "Data Privacy and Protection Act." This law establishes guidelines for the collection, use, and protection of personal information by the Bureau of Federal Revenue, including any data processed through IRIS. It requires the Bureau to obtain explicit consent from individuals before collecting and processing their personal information, and would establish penalties for any misuse or unauthorized disclosure of such data. The law also requires the Bureau to implement robust data security measures to safeguard against cyber attacks and other forms of data breaches, which it does primarily in the form of PCA encryption. Additionally, the law requires regular audits of the IRIS system to ensure compliance with these guidelines and to identify any potential vulnerabilities in the system. As IRIS is a centralized public data system used for tax-related matters, several laws are relevant to its operations. There are thirty-seven total laws in place with at least some degree of impact on IRIS's use. Some of the more generic laws include:
* Privacy laws: Given the sensitive nature of tax information, laws such as the Cartadanian Data Protection Act and other privacy laws are important to ensure that personal data is protected.
* Taxation laws: The laws related to taxation are, of course, relevant to IRIS, as the system is used for the collection, processing, and distribution of taxes. This includes laws related to income tax, sales tax, property tax, and other taxes levied by the government. Because states can use IRIS for state-level taxes, the laws are largely jurisdiction-driven. The only law that blankets all taxpayers is federal tax law.
* Cybersecurity laws: As a system that deals with a large amount of sensitive data, IRIS is subject to cybersecurity laws, such as the Cartadanian Cybersecurity Act. This ensures that the system is secure from cyber threats and that data breaches are prevented. The FRA is bound with the [[Department of Defense (Cartadania)|Department of Defense]] for cyber threat protection.
* Electronic transactions laws: Given that IRIS is an electronic system, laws related to electronic transactions are also relevant. This includes laws related to electronic signatures, electronic payments, and other aspects of electronic transactions.
* Intellectual property laws: As IRIS is a software system, laws related to intellectual property such as patents, trademarks, and copyrights would be relevant. IRIS and CRIS are both federally-owned and -maintained programs, thus the use of certain symbols, logos, and other imagery is held by the FRA. Despite this, IRIS' base software is export-ready for use by other governments outside of Cartadania to streamline their tax systems, though none currently exist.
== Data ==
== Data ==
=== Transmission ===
=== Transmission ===