A federal appeals court has upheld an injunction barring the IRS from sharing taxpayer address data with immigration authorities, ruling the Trump administration's data-sharing policy broke federal tax-confidentiality law, a decision DHS vows to fight.

A three-judge panel of the U.S. Court of Appeals for the D.C. Circuit ruled Tuesday that the IRS violated Section 6103 of the federal tax code, the post-Watergate statute that broadly prohibits the agency from handing tax-return information to other federal agencies, when it created an automated pipeline funneling taxpayer addresses to Immigration and Customs Enforcement. The ruling leaves intact a lower-court injunction that had already frozen the program, and it lands a pointed rebuke at the mechanics of how ICE and the IRS carried out the arrangement.

The numbers alone tell a damning story about how loosely the agencies treated the law's requirements. In the summer of 2025, ICE requested last-known addresses for 1.28 million suspected illegal immigrants, and listed the same single person as the point of contact for every one of those requests. Before a lower court stepped in, the IRS had already turned over 47,289 taxpayer records.

One contact name for 1.28 million requests

U.S. Circuit Judge Cornelia Pillard, writing for the panel, methodically cataloged the ways the IRS's "Data-Exchange Procedure" failed to satisfy the statute's demands. Federal law requires that any agency seeking tax-return data provide a "specific reason" the information is relevant to a qualifying investigation and identify a federal employee "personally and directly engaged" in that investigation. The IRS procedure did neither.

Pillard wrote:

"The IRS failed to require ICE to provide a 'specific reason' why the requested return information 'is or may be relevant to [a qualifying] proceeding or investigation,' as the statute demands."

She went further on the point-of-contact failure:

"It entirely fails to ensure that ICE lists a federal employee, let alone one 'personally and directly engaged' in a qualifying investigation of a particular taxpayer. That failure has serious consequences. When ICE requested information on 1.28 million taxpayers in the summer of 2025, ICE identified the same person as the point of contact for every single request."

Put plainly: the law envisions individualized review of each taxpayer's records by an agent with direct knowledge of a specific case. What ICE built instead was a bulk data request with a single rubber stamp. The court found the IRS procedure "most egregiously" failed to require ICE to provide an actual taxpayer address, a prerequisite the statute itself demands.

Automated review replaced the safeguards Congress wrote into law

Pillard also took aim at the sheer scale of the automation. The procedure, she wrote, "automates the review of millions of records without any individual review or any other means of ensuring compliance with the legal prerequisites to releasing each individual taxpayer's information." In other words, the IRS replaced the stringent, case-by-case gatekeeping Congress mandated with a system that moved data in bulk, and hoped nobody would notice the mismatch.

The panel addressed the privacy dimension directly, finding that the procedure carved out a second-class status for noncitizen taxpayers. The court wrote that "by providing a distinct, automated pathway for ICE to request noncitizens' information, the Data-Exchange Procedure deprives noncitizens of the protections that section 6103 guarantees to all taxpayers." Section 6103 draws no distinction between citizens and noncitizens; the IRS procedure effectively created one.

The administration has been fighting similar legal setbacks across multiple fronts. The same IRS lawsuit reached the appeals court earlier this year as part of a broader clash over agency authority and congressional oversight.

DHS pushes back, but the court says Congress wrote the rules

The Trump administration had argued on appeal that the lower-court injunction hampered federal law enforcement. Pillard dismissed that complaint in a single line:

"But that's a gripe with Congress, not the court."

That sentence captures the core tension. The administration wants to use every available tool to locate and remove illegal immigrants with final deportation orders, a legitimate enforcement goal. Congress, however, wrote Section 6103 in the aftermath of the Watergate scandal precisely to prevent the executive branch from treating IRS data as an all-purpose investigative resource. The statute exists because Americans once watched a president weaponize tax records against political enemies. The safeguards are not bureaucratic red tape. They are a direct response to documented abuse.

A DHS spokesperson told Reuters the department "disagrees with the ruling" and "will continue using every lawful tool available to locate and remove illegal aliens with final orders of removal." The statement signals the administration is unlikely to let the matter rest. Whether DHS seeks further review, potentially from the Supreme Court, remains an open question.

Courts have been a recurring obstacle for the administration's enforcement agenda, much as they have been a venue for emergency appeals on other contested policies this year.

47,289 records already out the door

One fact the ruling cannot undo: 47,289 taxpayer records had already been shared with ICE before the lower court blocked the policy. The ruling does not address what happens to that data, whether ICE must purge it, whether it has already been used in enforcement actions, or whether affected taxpayers will be notified. Those questions remain unanswered.

The broader backdrop matters. Section 6103 was not written to protect illegal immigrants. It was written to protect every American who files a tax return. The law guarantees that the information a taxpayer hands the IRS stays with the IRS unless another agency meets strict, individualized conditions. When those conditions are bypassed, when one name sits atop 1.28 million requests and an automated system replaces human review, the damage is not limited to the people ICE was targeting. It is a crack in the wall that protects every filer.

Conservatives who rightly demand that the government enforce immigration law should be equally insistent that the government follow its own rules when it does so. The pattern of politically motivated legal overreach is a bipartisan problem, and procedural shortcuts today become precedents tomorrow.

Federal judges across the country continue to shape the boundaries of executive authority, as recent rulings on redistricting and other politically charged disputes have shown.

A legitimate goal undermined by sloppy execution

Nothing in the D.C. Circuit's ruling says the government cannot pursue illegal immigrants with final removal orders. Nothing in the ruling says taxpayer data is forever off-limits to law enforcement. The court said, clearly and repeatedly, that the IRS and ICE failed to follow the procedures Congress required, procedures that exist because the country learned the hard way what happens when a president's agencies treat tax records as a political tool.

The administration could, in theory, go back and build a data-sharing process that actually complies with Section 6103, one that requires individualized justification, a real point of contact for each case, and genuine human review. It chose not to do that the first time. The court noticed.

Enforcing immigration law is right. Cutting corners on taxpayer privacy to do it is not. If the administration wants this tool, it needs to earn it the way the law demands, one case at a time, not 1.28 million at once.