AI Governance Institute
← News
Enforcement2026-09-29

IRS Deployed High-Impact AI With No Testing Records in 80% of Cases

Source

Data documentation for IRS's AI use cases is lacking, watchdog finds

Treasury Inspector General for Tax Administration

What happened

TIGTA published a report, covered by FedScoop in "Data documentation for IRS's AI use cases is lacking, watchdog finds". It found that 80 percent of five sampled high-impact IRS AI use cases lacked any written testing documentation. The IRS was conducting data quality checks in practice. However, those checks were not being recorded in the AI impact assessments that OMB Memorandum M-26-04: Increasing Public Trust in AI Through Unbiased AI Principles requires agencies to complete. TIGTA flagged that undocumented testing creates conditions where biased, inaccurate, or unreliable AI outputs could go undetected and uncorrected. IRS management agreed with both TIGTA recommendations: standardize data quality assessment procedures across AI use cases, and finish impact assessments for all currently deployed high-impact systems by November 2026.

Why it matters

  • ·Federal agencies and contractors subject to OMB AI inventory and assessment requirements now have a watchdog-confirmed standard: performing checks is not enough if those checks are not recorded. Undocumented testing is treated the same as no testing under OMB Memorandum M-26-04: Increasing Public Trust in AI Through Unbiased AI Principles.
  • ·The finding exposes a documentation gap that regulators and auditors are beginning to treat as a material control failure, not a paperwork technicality. Organizations that cannot produce written evidence of their AI data quality and testing procedures face the same reputational and regulatory exposure the IRS now does.
  • ·The November 2026 remediation deadline creates a concrete benchmark. Private-sector teams building AI impact assessment programs can use it to pressure-test whether their own documentation would survive an equivalent review.

Governance controls affected

ALC-002High-Risk AI Audit TrailALC-005Regulatory Audit ReadinessMON-001AI Performance BaselineMGV-006RAI Benchmark-Aligned Evaluation FrameworkHOC-001AI System Risk Classification

What to do now

  • ☐Pull your current AI use case inventory and confirm that each high-impact use case has a written impact assessment on file, not just an internal understanding that testing occurred.
  • ☐Ask the teams running AI data quality or validation checks to show you the written records from those checks. If the records do not exist, begin creating a documentation requirement immediately.
  • ☐Set a review date before November 2026 to verify that any AI systems without completed impact assessments have been brought into compliance, mirroring the IRS remediation deadline.
  • ☐Check whether your organization's AI documentation standards require sign-off from a named owner for each use case, so that informal practices cannot persist without a responsible party on record.
  • ☐If your organization holds federal contracts or is subject to OMB AI guidance, confirm with your legal or compliance team whether the TIGTA findings trigger any parallel obligations for your own AI use case inventory.

What to watch next

Compliance teams should watch for TIGTA follow-up reviews as the November 2026 IRS deadline approaches. A missed remediation will likely draw a second public finding. It could also influence how other inspectors general treat AI documentation gaps across the federal government. Broader OMB enforcement signaling around OMB Memorandum M-26-04: Increasing Public Trust in AI Through Unbiased AI Principles is also worth tracking. Of particular interest is whether the administration treats documentation failures as grounds for pausing AI deployments. The TIGTA finding joins a pattern visible in the NY Comptroller audit of SUNY. Public-sector watchdogs are consistently finding that AI deployment has outpaced the governance infrastructure meant to oversee it.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Enforcement2026-09-28

EU AI Office Inspections Target Hiring, Credit, and Healthcare AI

The European AI Office and national market surveillance authorities launched coordinated compliance inspections of high-risk AI systems in September 2026. The inspections focus on resume-screening tools, credit-assessment systems, and healthcare triage applications. Organizations lacking documentation, audit trails, and rapid remediation plans are the primary targets.

Enforcement2026-09-25

Federal AI Prior Authorization Program Fails 53% of Requests, GAO Finds Procedural Breach

The Trump administration's WISeR pilot, launched in January 2026 across six states, uses AI to automate Medicare prior authorization decisions. One participating vendor denied more than 53 percent of requests, and several vendors missed a mandated 72-hour decision window. The Government Accountability Office determined in May 2026 that the Centers for Medicare and Medicaid Services did not follow proper procedure in establishing the program.

Research2026-09-28

Six-Pillar AI Governance Model Sets Enterprise Program Maturity Benchmark

Concurrency, a technology consulting firm, has published a practitioner framework organizing enterprise AI governance into six pillars: inventory, validation, monitoring, explainability, fairness testing, and incident response. The framework targets enterprises that have deployed AI but lack structured approval gates, continuous monitoring, or audit evidence. It provides a replicable operating model that compliance teams can use to measure and close program gaps.