From The Daily Caller:

The U.S. Government Accountability Office (GAO), the go-to federal oversight agency, conducted an audit of ATF and found it does not remove certain identifiable information, despite the law explicitly mandating it do so. GAO conducted reviews for four data systems, and concluded at least two of ATF’s systems violated official protocols.