IRS Publication 5387 Explained: Understanding UNAX and Tax Data Privacy

ARUN KP

11/13/2026

1. Introduction – What is Publication 5387?

Internal Revenue Service (IRS) Publication 5387, titled UNAX is Serious (Catalog Number 73719A), is an official compliance document and security directive issued by the Department of the Treasury. Its core focus is the strict prevention of Unauthorized Access—universally abbreviated in the tax sector as UNAX. The publication serves as an unambiguous warning against unauthorized inspection, viewing, or browsing of private tax returns and taxpayer account data.

In official IRS publications catalog reviews for 2026, the active edition in force remains the January 2020 revision (initially posted on February 6, 2020). Because federal privacy mandates under the Internal Revenue Code remain unyielding, the IRS carries forward this January revision into 2026 as the standard operational reminder for all personnel with system access. Its message is direct: viewing confidential tax records without legitimate, official business reasons leads to severe disciplinary and criminal action.

For taxpayers, this publication provides peace of mind. It outlines the robust safeguards protecting your social security numbers, income details, bank accounts, and filing history from curiosity browsing by government staff or contractors.

2. Who Should Read This Publication

Publication 5387 is designed for anyone who touches tax processing systems, as well as the everyday public seeking transparency on privacy rights.

  • IRS Employees and Seasonal Staff: Every full-time, part-time, and temporary worker who uses IRS internal databases must know and abide by these rules.
  • Government Contractors and IT Specialists: Technical vendors and third-party developers building or maintaining tax software must adhere to the same zero-tolerance standards.
  • Volunteer Tax Preparers: Partners working within Volunteer Income Tax Assistance (VITA) and Tax Counseling for the Elderly (TCE) programs must recognize the seriousness of data privacy.
  • Individual and Business Taxpayers: Everyday filers who want to know how federal law protects their sensitive financial information against internal snooping.

3. Key Topics Covered

Publication 5387 focuses on deterrence, security protocols, and strict legal boundaries. It is concise, high-impact, and leaves no room for ambiguity.

  • Definition of UNAX: Clear guidelines on what qualifies as an unauthorized inspection or disclosure of taxpayer records.
  • The Legal Framework: Statutory provisions established under the Taxpayer Browsing Protection Act and key sections of the Internal Revenue Code.
  • Disciplinary Repercussions: Immediate job consequences, including suspension and mandatory recommendations for employment termination.
  • Criminal and Civil Penalties: Federal fines, court costs, personal civil liability, and imprisonment for violators.
  • System Monitoring: Warnings that automated audit systems track and record all database queries made by agency personnel.

4. Detailed Breakdown of Main Concepts

To fully grasp Publication 5387, you must understand the concepts that govern federal tax confidentiality.

What Constitutes “UNAX”?

UNAX occurs whenever an authorized user accesses tax return information without a direct, legally sanctioned work assignment. Even if an employee possesses login credentials to the IRS Integrated Data Retrieval System (IDRS), logging in to inspect an account without an assigned case number constitutes an unlawful intrusion.

The “Need to Know” Standard

Having technical clearance to view tax files does not grant unlimited permission to browse. Employees are governed by the “need to know” rule: access is strictly permitted only when necessary to perform an officially assigned task, such as processing an amended return or handling an active audit.

Penalties and Legal Consequences

Federal law treats unauthorized taxpayer data browsing as a severe breach of public trust. The table below outlines the specific consequences enforced under federal law:

CategoryGoverning StatuteEnforced Penalty
Internal DisciplineIRS Administrative PolicyMandatory proposed removal (firing) and permanent bar from service.
Criminal ProsecutionIRC Section 7213AFederal misdemeanor, fines up to $1,000, and up to 1 year in prison.
Civil DamagesIRC Section 7431Statutory damages of $1,000 per act, plus actual damages and attorney fees.

5. Practical Examples or Scenarios

To help illustrate how these rules apply in real life, consider the following practical scenarios:

Scenario 1: Checking a Neighbor’s Income

An IRS customer service representative notices a new luxury vehicle in their neighbor’s driveway and wonders how they paid for it. The representative enters the neighbor’s Social Security Number into the IRS database to look at their Form 1040. This is a direct UNAX violation resulting in immediate suspension, termination, and criminal referral.

Scenario 2: Inspecting Your Own Tax File

An agency worker wants to check when their personal tax refund will arrive, so they pull up their own tax account on their work computer. This is strictly prohibited. IRS personnel must check their refunds through public taxpayer tools, such as the IRS “Where’s My Refund?” portal or their personal online account, rather than internal internal tools.

Scenario 3: Browsing Celebrity or Politician Returns

An IT contractor working on IRS servers searches for a famous athlete or political candidate out of personal curiosity without downloading or sharing the data. Even momentary viewing triggers automated audit flags, exposing the contractor to dismissal and federal prosecution.

6. How This Publication Relates to Specific Forms

While Publication 5387 is an informational security publication rather than a tax filing document, it connects directly with several standard IRS forms and disclosure protocols.

  • Form 1040 and Schedules: The foundational return containing personal wage, family, and banking data that Publication 5387 protects from unauthorized access.
  • Form 2848 (Power of Attorney): Used by taxpayers to grant formal permission to attorneys, CPAs, or enrolled agents to view their records. Without this form, IRS staff cannot legally discuss or show account data to a representative.
  • Form 8821 (Tax Information Authorization): Authorizes third-party entities to receive return information. It creates a verified paper trail establishing legal access rights.
  • TIGTA Incident Reports: Reports submitted to the Treasury Inspector General for Tax Administration when an employee or taxpayer suspects unauthorized access to tax records.

7. Common Misunderstandings Clarified

Many misconceptions surround tax data access and privacy laws. Here are the most common myths debunked:

  • Misconception: Looking is harmless if the employee does not share or leak the information.
    Fact: The federal statute explicitly prohibits inspection as well as disclosure. Simply looking at the screen without sharing anything is a federal crime.
  • Misconception: Employees can look up records for family members if they have their verbal consent.
    Fact: Verbal consent is never valid for internal IRS system access. Agency staff cannot access records of spouses, children, or parents under any circumstances without formal official case assignment.
  • Misconception: Casual lookups go unnoticed in massive government databases.
    Fact: The IRS utilizes advanced automated audit tracking that cross-references employee names, addresses, and flagged accounts against every keystroke made on internal terminals.

8. Why This Publication Matters for Taxpayers

The voluntary tax system in the United States relies heavily on public trust. Taxpayers are legally mandated to share their most intimate financial details with the government, from annual income and stock trades to medical costs and dependent details.

Publication 5387 guarantees that the government treats this sensitive data with the highest security. By setting rigid rules and promising severe prosecution for unauthorized lookups, the IRS deters identity theft, financial snooping, and political harassment from within its ranks.

9. Frequently Asked Questions

What does UNAX stand for?

UNAX stands for Unauthorized Access, which refers to the unlawful inspection or disclosure of tax returns and tax return information by government employees or contractors.

Can an IRS worker check their own tax refund status internally?

No. IRS employees are strictly forbidden from inspecting their own tax accounts or family files on official internal systems. They must use the same public websites and phone numbers available to ordinary citizens.

What law created the penalties for UNAX?

The Taxpayer Browsing Protection Act of 1997 established criminal penalties under Internal Revenue Code Section 7213A and reinforced civil liability under Section 7431.

How does the IRS detect unauthorized lookups?

The IRS utilizes automated electronic tracking software that logs every search. The system automatically flags searches involving employees’ own names, family members, neighbors, coworkers, celebrities, and public figures.

What should you do if you believe your tax account was accessed unlawfully?

You can contact the Treasury Inspector General for Tax Administration (TIGTA) through their official hotline or online complaint portal to request an investigation into potential unauthorized access.

10. Conclusion

IRS Publication 5387 delivers an essential message: protecting taxpayer privacy is not optional. By clearly defining unauthorized access and outlining harsh consequences—ranging from termination to federal prison—the IRS reinforces its commitment to safeguarding personal financial data.

Whether you are a tax professional, an agency worker, or an everyday filer, understanding Publication 5387 provides a clear view into how privacy laws actively defend your financial records every day.

ARUN KP
Author

Entrepreneur | Tax Journalist | India-US Tax Consultant & Professional Accountant. Connect with me on LinkedIn.

Leave a Comment