The United States Postal Inspection Service has long used mail covers as an investigative technique that records the outside of mail—sender, recipient, postmark, class of mail—without opening the contents. The Service has described the practice, in public testimony and training materials, as a lawful investigative aid when a cover is requested in writing by a law-enforcement agency and approved under Inspection Service procedures. Public statistical summaries released over the past decade have shown tens of thousands of covers in some years, with the bulk tied to criminal investigations rather than purely intelligence collection.

Those figures sit beside a separate paper trail: the U.S. Postal Service Office of Inspector General’s privacy, information-security, and customer-data audits. Those reports, posted on the OIG website, have repeatedly found weaknesses in how USPS systems retain, share, and protect personally identifiable information. Findings have included incomplete inventories of data holdings, uneven implementation of privacy impact assessments, and delayed remediation of known control deficiencies. The OIG has not, in the publicly posted reports reviewed for this dispatch, alleged that mail-cover files themselves were systematically leaked. The audits address enterprise privacy posture, not a single investigative product.

The distinction matters. A mail cover is a request to record exterior information for a defined period, typically 30 days, subject to renewal. Inspection Service public guidance has stated that covers are not to be used for fishing expeditions and that the information is to be treated as law-enforcement sensitive. USPS OIG work, by contrast, has examined whether the Postal Service as a whole can demonstrate that customer names, addresses, and related identifiers are collected only for authorized purposes and protected according to federal privacy statutes and Postal Service policy. Those audits have cited incomplete documentation, contractor access issues, and lagging closure of prior recommendations.

Public budgets reinforce the split. Inspection Service appropriations and USPS operating plans fund both criminal investigations and the information-technology environment that stores customer data. The OIG’s annual work plans have listed privacy and cybersecurity as standing risk areas, independent of any single investigative technique. Congressional oversight letters in recent years have asked both the Inspection Service and USPS management to explain volumes of investigative requests and the status of OIG recommendations. Responses, according to publicly posted correspondence, have generally restated existing authorities and cited ongoing remediation rather than providing a unified accounting that maps mail-cover files onto the OIG’s privacy findings.

Officials at the Inspection Service have, in public statements, characterized mail covers as a targeted tool used when there is an investigative predicate. USPS management has, in responses to OIG reports, accepted many recommendations in principle and reported partial implementation. The OIG has, in follow-up audits, noted that some privacy-related recommendations remain open past original target dates. None of those public positions amounts to an admission that mail-cover statistics are inaccurate, nor that OIG privacy findings are limited to covers. The record shows two parallel streams: investigative volume on one side, enterprise control weaknesses on the other.

Dockets and inspector-general reports do not show a classified program hidden inside the cover process. What they show is ordinary bureaucratic lag: investigative units generating large numbers of requests, while the corporate privacy and IT-security apparatus struggles to prove that related data stores meet current federal expectations. That gap is not unique to the Postal Service. Similar patterns appear in other agencies where operational statistics and IG privacy work products are published on different schedules and answer different questions.

For researchers, the practical implication is modest. Mail-cover counts, when released, describe how often the Inspection Service agrees to record exterior information. OIG privacy audits describe whether USPS can demonstrate control over the broader universe of customer data, of which cover files are only a slice. Combining the two without that caveat overstates what either set of documents proves. The public record, as it stands, supports a narrower claim: high-volume use of an old investigative method continues, while independent auditors continue to find that privacy controls across USPS systems are incomplete.

No living official is quoted here inventing a classified finding. The dispatch rests on Inspection Service public descriptions of mail covers, USPS OIG reports posted for public download, budget justifications, and congressional correspondence already in the open. Those sources do not resolve every tension between operational tempo and privacy documentation. They do show that the tension is administrative, not cinematic, and that it remains unfinished business on both the investigative and the audit calendars.