An Evergreen Reminder of Requirements Regarding Securing Client Data

Published: Oct 11, 2024

Cyberthieves target firms year-round. Review your WISP, update safeguards, and stay IRS compliant to protect client data. Read more on TXCPA.org.

William Stromsem, CPA, J.D., George Washington University School of Business 

 

Cyberthieves are trying to get your information year-round. Now that October 15 is behind us and year-end tax planning is not here yet, this might be a good time to review requirements for securing client information. If you have a data breach, this can ruin client relationships and even end your practice. 

The IRS requires a Written Information Security Plan (WISP) to protect your firm and clients from cyberattacks. Ensure that your plan is valid, up to date and in compliance with the IRS requirements. IRS Publication 5708 is a brief document that details what is required and how to customize your plan for your practice. AICPA Tax Section members can download a copy of AICPA's WISP template. 

Also, the Federal Trade Commission requires practices to use multifactor authentication in accessing client information that is stored on computers or on networks (including cloud storage). This would include return preparation records when vendor software is used. Multifactor identification involves using two or more items that only the user would know, like username and password, or if available, facial recognition, fingerprints or other means of verifying that the person accessing the information is authorized to do so.   

Hopefully, your firm has this fully implemented. 

Topics:

You May be Interested in

  • Electronic Signatures: Permanently Accepted on Some Paper-File-Only Forms
    The IRS has approved the use of electronic signatures for certain forms that must still be filed on paper. This change streamlines the filing process by reducing the need for physical signatures while maintaining compliance requirements.
  • IRS Inconsistent Policy on Taxpayer Interviews
    Some IRS Revenue Agents have been requesting interviews with taxpayers even when the taxpayer has authorized representation through a valid Form 2848, Power of Attorney. Tax professionals should monitor and challenge improper interview requests.
  • Highlights from Recent TXCPA-IRS Meeting
    At the June 5, 2026, TXCPA-IRS biannual meeting, IRS representatives and tax professionals discussed key updates and emerging issues. The meeting provided an opportunity to share information and address topics affecting taxpayers and the tax profession.
More News

Support the Next Generation

Donate to TXCPA scholarships and help aspiring accountants achieve their goals.

Scholarships