A group of lawmakers led by Massachusetts Democratic Sen. Elizabeth Warren are calling on the Biden administration to investigate how tax prep software companies may have illegally shared customer data with tech platforms Google and Meta.
In a letter to Attorney General Merrick Garland, Federal Trade Commission Chair Lina Khan, IRS Commissioner Daniel Werfel and Treasury Inspector General for Tax Administration J. Russell George, the lawmakers laid out key findings from their own probe expanding on reporting from The Markup and The Verge, which initially revealed the data sharing. The FTC declined to comment on the letter and the other agencies named did not immediately respond to a request for comment.
In a story published last year, the publications jointly reported that tax prep software companies TaxSlayer, H&R Block and TaxAct had shared sensitive financial information with Meta’s Facebook through a piece of code known as a pixel. The report found that Meta pixel trackers sent names, emails and income information to Meta, in violation of the platform’s policies.
The report also found that TaxAct had sent similar information to Google through its analytics tool, but that information did not include names.
After the initial report, Meta and Google both told CNBC they have policies against customers or advertisers sending them sensitive or identifying information. Some statements the tax prep companies provided to the publications at the time seemed to indicate the data sharing was done accidentally.
In a Wednesday statement, a Google spokesperson said the company has “strict policies and technical features that prohibit Google Analytics customers from collecting data that could be used to identify an individual. Site owners – not Google – are in control of what information they collect and must inform their users of how it will be used. Additionally, Google has strict policies against advertising to people based on sensitive information.”
“We’ve been clear in our policies that advertisers should not send sensitive information about people through our Business Tools,” a Meta spokesperson said in a statement. “Doing so is against our policies and we educate advertisers on properly setting up Business tools to prevent this from occurring. Our system is designed to filter out potentially sensitive data it is able to detect.”
H&R Block said in a statement that the company “takes protecting our clients’ privacy very seriously, and we have taken steps to prevent the sharing of information via pixels.”
The other companies mentioned did not immediately respond to requests for comment.
Building on the original reporting, the group of seven lawmakers opened their own probe into the extent of the data sharing. Among their findings released Wednesday, the lawmakers said that millions of taxpayers’ information had been shared with Big Tech firms through the tax prep software and that both the tax prep companies and tech firms were “reckless” in how they handled sensitive information. Although the companies said information shared would have been anonymous, the lawmakers found that experts believed it wouldn’t be hard to connect the data to individuals.
Sens. Ron Wyden, D-Ore., Richard Blumenthal, D-Conn., Tammy Duckworth, D-Ill., Bernie Sanders, I-Vt., Sheldon Whitehouse, D-R.I., and Rep. Katie Porter, D-Calif., joined Warren in the investigation and letter.
While the tax prep companies installed Meta’s and Google’s tools without fully understanding the privacy implications, according to the lawmakers, the two tech platforms failed to provide enough information about how they would collect and use the information gathered through their tools. Although Meta and Google both said they have filters to catch sensitive data that’s inadvertently collected, they seemed to be “ineffective,” the lawmakers wrote.
The probe also found that Meta tools used by TaxAct allegedly collected even more information than previously reported, including the approximate amount of federal taxes a person owed. They said that Meta confirmed it used data collected from the tax software providers “to target ads to taxpayers, including for companies other than the tax prep companies themselves, and to train Meta’s own AI algorithms.”
The group believes that their findings indicate the tax prep companies “may have violated taxpayer privacy laws,” which could result in criminal penalties “up to $1,000 per instance and up to a year in prison,” according to the letter.
After calling for the agencies to investigate and prosecute where necessary, the lawmakers noted that new policies may mitigate the issue in the future.
“We also welcome the recent IRS announcement of a free, direct file pilot next year, which will give taxpayers the option to file taxes without sharing their data with untrustworthy and incompetent tax preparation firms,” they wrote.
Signage at 23andMe headquarters in Sunnyvale, California, U.S., on Wednesday, Jan. 27, 2021.
David Paul Morris | Bloomberg | Getty Images
The House Committee on Energy and Commerce is investigating 23andMe‘s decision to file for Chapter 11 bankruptcy protection and has expressed concern that its sensitive genetic data is “at risk of being compromised,” CNBC has learned.
Rep. Brett Guthrie, R-Ky., Rep. Gus Bilirakis, R-Fla., and Rep. Gary Palmer, R.-Ala., sent a letter to 23andMe’s interim CEO Joe Selsavage on Thursday requesting answers to a series of questions about its data and privacy practices by May 1.
The congressmen are the latest government officials to raise concerns about 23andMe’s commitment to data security, as the House Committee on Oversight and Government Reform and the Federal Trade Commission have sent the company similar letters in recent weeks.
23andMe exploded into the mainstream with its at-home DNA testing kits that gave customers insight into their family histories and genetic profiles. The company was once valued at a peak of $6 billion, but has since struggled to generate recurring revenue and establish a lucrative research and therapeutics businesses.
After filing for bankruptcy in in Missouri federal court in March, 23andMe’s assets, including its vast genetic database, are up for sale.
“With the lack of a federal comprehensive data privacy and security law, we write to express our great concern about the safety of Americans’ most sensitive personal information,” Guthrie, Bilirakis and Palmer wrote in the letter.
23andMe did not immediately respond to CNBC’s request for comment.
More CNBC health coverage
23andMe has been inundated with privacy concerns in recent years after hackers accessed the information of nearly 7 million customers in 2023.
DNA data is particularly sensitive because each person’s sequence is unique, meaning it can never be fully anonymized, according to the National Human Genome Research Institute. If genetic data falls into the hands of bad actors, it could be used to facilitate identity theft, insurance fraud and other crimes.
The House Committee on Energy and Commerce has jurisdiction over issues involving data privacy. Guthrie serves as the chairman of the committee, Palmer serves as the chairman of the Subcommittee on Oversight and Investigations and Bilirakis serves as the chairman of the Subcommittee on Commerce, Manufacturing and Trade.
The congressmen said that while Americans’ health information is protected under legislation like the Health Insurance Portability and Accountability Act, or HIPAA, direct-to-consumer companies like 23andMe are typically not covered under that law. They said they feel “great concern” about the safety of the company’s customer data, especially given the uncertainty around the sale process.
23andMe has repeatedly said it will not change how it manages or protects consumer data throughout the transaction. Similarly, in a March release, the company said all potential buyers must agree to comply with its privacy policy and applicable law.
“To constitute a qualified bid, potential buyers must, among other requirements, agree to comply with 23andMe’s consumer privacy policy and all applicable laws with respect to the treatment of customer data,” 23andMe said in the release.
23andMe customers can still delete their account and accompanying data through the company’s website. But Guthrie, Bilirakis and Palmer said there are reports that some users have had trouble doing so.
“Regardless of whether the company changes ownership, we want to ensure that customer access and deletion requests are being honored by 23andMe,” the congressmen wrote.
A motorcycle is seen near a building of the Taiwan Semiconductor Manufacturing Company (TSMC), which is a Taiwanese multinational semiconductor contract manufacturing and design company, in Hsinchu, Taiwan, on April 16, 2025.
“TSMC is not engaged in any discussion with other companies regarding any joint venture, technology licensing or technology,” CEO C.C. Wei said on the company’s first-quarter earnings call on Wednesday, dispelling rumors about a collaboration with Intel.
Intel and TSMC were said to have been looking to form a JV as recently as this month. On April 3, The Information reported that the two firms discussed a preliminary agreement to form a tie-up to operate Intel’s chip factories with TSMC owning a 21% stake.
Intel was not immediately available for comment when contacted by CNBC on Wei’s comments on Thursday. The company previously said it doesn’t comment on rumors, when asked by CNBC about the reported discussions.
TSMC’s denial of tie-up talks with Intel comes as President Donald Trump is pushing to address global trade imbalances and reshore manufacturing in the U.S. through tariffs. The Department of Commerce recently kicked off an investigation into semiconductor imports — a move that could result in new tariffs for the chip industry.
TSMC reported a profit beatfor the first quarter thanks to a continued surge in demand for AI chips. However, the company contends with potential headwinds from Trump’s tariffs — which target Taiwan — and stricter export controls on TSMC clients Nvidia and AMD.
A motorcycle is seen near a building of the Taiwan Semiconductor Manufacturing Company (TSMC), which is a Taiwanese multinational semiconductor contract manufacturing and design company, in Hsinchu, Taiwan, on April 16, 2025.
Here are TSMC’s first-quarter results versus LSEG consensus estimates:
Revenue: $839.25 billion New Taiwan dollars, vs. NT$835.13 billion expected
Net income: NT$361.56 billion, vs. NT$354.14 billion
TSMC’s reported net income increased 60.3% from a year ago to NT$361.56 billion, while net revenue in the March quarter rose 41.6% from a year earlier to NT$839.25 billion.
The world’s largest contract chip manufacturer has benefited from the AI boom as it produces advanced processors for clients such American chip designer Nvidia.
However, the company faces headwinds from the trade policy of U.S. President Donald Trump, who has placed broad trade tariffs on Taiwan and stricter export controls on TSMC clients Nvidia and AMD.
Semiconductor export controls could also be expanded next month under the “AI diffusion rules” first proposed by the Biden administration, further restricting the sales of chipmakers that use TSMC foundries.
Taiwan currently faces a blanket 10% tariff from the Trump administration and that could rise to 32% after the President’s 90-day pause of his “reciprocal tariffs” ends unless it reaches a deal with the U.S.
As part of efforts to diversify its supply chains, TSMC has been investing billions in overseas facilities, though the lion’s share of its manufacturing remains in Taiwan.
In an apparent response to Trump’s trade policy, TSMC last month announced plans to invest an additional $100 billion in the U.S. on top of the $65 billion it has committed to three plants in the U.S.
On Monday, AMD said it would soon manufacture processor chips at one of the new Arizona-based TSMC facilities, marking the first time that its chips will be manufactured in the U.S.
The same day, Nvidia announced that it has already started production of its Blackwell chips at TSMC’s Arizona plants. It plans to produce up to half a trillion dollars of AI infrastructure in the U.S. over the next four years through partners, including TSMC.
Taiwan-listed shares of TSMC were down about 0.4%. Shares have lost about 20% so far this year.