What possible reason is there for the passport office to need to expose this information outside the agency?
How can it possibly be worth the risk, even if there is some minor function which they outsourced to the
The gummint ought to be forced to do an analysis of the risk and value before the outsource a function
which provides this kind of access to the data of citizens. Private companies might do well also to do it.