For small business owners in the United States, safeguarding financial privacy is a top priority. A common question arises when it comes to tax season: Are my business tax returns public? Understanding the rules that govern the confidentiality of tax filings is essential for every entrepreneur, especially when trying to protect sensitive business and personal financial data.<\/span><\/p>\n Contrary to some assumptions, business tax returns are not public information. The Internal Revenue Service (IRS) and professional tax preparers are both legally bound to maintain the privacy of your tax records. However, there are exceptions and caveats to be aware of\u2014particularly if you operate a tax-exempt organization or grant someone legal authority to access your records. This article explores the legal protections in place, the rare cases where disclosures may occur, and what every small business owner needs to know to stay informed and secure.<\/span><\/p>\n Business tax returns are protected by stringent federal privacy laws. Whether you\u2019re operating as a sole proprietor, partnership, LLC, or corporation, your filings with the IRS are confidential. Only in certain situations defined by law can this information be accessed by someone other than you or your authorized representative.<\/span><\/p>\n This confidentiality rule applies even more critically to sole proprietors who file their business income as part of their personal income tax return using a Schedule C. In these cases, there’s no separate business tax return, but the information remains equally protected under the law. For partnerships and corporations, which file Form 1065 or Form 1120 respectively, the same principles of confidentiality apply.<\/span><\/p>\n The IRS is prohibited from disclosing taxpayer information without explicit permission. This includes any data submitted on a tax return, whether it\u2019s income, deductions, employee compensation, or business expenses. The law that governs this is known as Section 6103 of the Internal Revenue Code, which clearly states that tax returns and return information are confidential.<\/span><\/p>\n If someone accesses or discloses your business tax return information without authorization, they may be violating federal law. This applies to both government employees and private professionals like accountants, bookkeepers, and tax preparers. If a tax preparer shares any part of your tax return with a third party without your permission, they can face significant penalties including civil fines and potential criminal charges.<\/span><\/p>\n You also have the legal right to pursue civil damages if your tax preparer or anyone else wrongfully discloses your tax information. Courts have upheld the rights of taxpayers to receive compensation for both actual damages and emotional distress stemming from such violations.<\/span><\/p>\n The IRS takes these violations seriously. They have established internal protocols to investigate any allegations of unauthorized disclosure. If you suspect your return has been improperly accessed or shared, you should file a written complaint with the IRS and consult an attorney who specializes in tax law.<\/span><\/p>\n Although your tax information is protected, there are circumstances in which you may need or want to authorize another person or organization to access your records. The IRS has specific forms designed to manage and document this type of access.<\/span><\/p>\n If you want someone to view your tax records but not make decisions or represent you in dealings with the IRS, you\u2019ll need to submit Form 8821. This form allows the designated individual to receive copies of your tax documents and communicate with the IRS for informational purposes only.<\/span><\/p>\n You might use Form 8821 if you hire a new accountant who needs to review past filings or if you\u2019re applying for a loan and need to grant temporary access to a financial institution. Form 8821 keeps the control in your hands, while still allowing third-party access where needed.<\/span><\/p>\n In situations where you need someone to act on your behalf\u2014for example, negotiate with the IRS, respond to audits, or make payment arrangements\u2014you\u2019ll need to complete Form 2848. This document grants power of attorney to a trusted representative such as a CPA, attorney, or enrolled agent.<\/span><\/p>\n This form provides the designated individual with the authority to make binding decisions with the IRS on your behalf. You should only give this level of access to someone with extensive knowledge of tax matters and whom you trust implicitly. If you change your mind or circumstances shift, you can revoke this authority at any time.<\/span><\/p>\n When you hire a tax preparer, you\u2019re placing a significant amount of trust in their professionalism and discretion. The IRS mandates that preparers follow strict ethical and legal standards when handling client information. Most reputable tax professionals will have a documented privacy policy that explains how they collect, store, use, and protect your data.<\/span><\/p>\n Before handing over your business records, ask your preparer the following questions:<\/span><\/p>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n<\/ul>\n These questions can help you better understand the security measures in place and ensure that your confidential business information is being treated with the care it deserves.<\/span><\/p>\n In the modern business world, digital tools and online portals have become the standard for tax document submission and filing. However, this convenience also introduces new security risks. Small business owners must take proactive steps to ensure their tax documents are transmitted and stored securely.<\/span><\/p>\n Avoid emailing sensitive tax information as plain attachments. Instead, use secure file transfer services or encrypted client portals provided by your accountant or tax firm. Make sure your devices are protected with strong passwords and up-to-date antivirus software.<\/span><\/p>\n Always confirm that any digital communication involving your tax records is encrypted. Many accounting platforms now offer two-factor authentication, which adds an extra layer of security. These small but significant practices can help shield your financial data from cyber threats and unauthorized access.<\/span><\/p>\n While the general rule is that tax returns are private, there\u2019s an important exception for organizations that are exempt from paying federal income tax. These include nonprofits, charities, private foundations, and certain religious or political organizations.<\/span><\/p>\n Such entities are required to file annual returns using Form 990, and these documents are considered public records. Members of the public have the right to view and request copies of these returns. The purpose is to ensure accountability and transparency, particularly since these organizations benefit from tax-exempt status.<\/span><\/p>\n However, even within these public filings, certain sensitive data is redacted to protect individual privacy. For example, detailed donor information is not typically disclosed. If you are a business owner operating a nonprofit arm, be aware of your obligations under this rule and maintain compliance to avoid penalties or public scrutiny.<\/span><\/p>\n There are scenarios where your tax information may be accessed as part of legal proceedings. Courts can subpoena tax documents if they are relevant to a case. This might occur during divorce litigation, bankruptcy proceedings, or child support disputes.<\/span><\/p>\n In such cases, only authorized individuals like attorneys, judges, and court-appointed officials will have access to your returns. The documents do not become public as a result of their use in court, but they are temporarily accessible to the parties involved in the case. It’s essential to understand that this access is limited and does not equate to making the documents public record.<\/span><\/p>\n Government agencies also have limited access to tax records under certain conditions. For example, federal or state agencies investigating financial crimes may be granted access as part of their investigations. These cases are rare and require proper legal documentation before the IRS will release any information.<\/span><\/p>\n The best defense against unauthorized access to your business tax returns is to be proactive. Keep physical and digital copies of your tax documents in secure, access-controlled environments. Limit access to only those individuals who absolutely need the information and monitor how your data is being used.<\/span><\/p>\n Review your privacy settings with any software tools you use to file taxes. Regularly update passwords and revoke access from anyone who no longer needs it. If you’re working with a new tax preparer, don’t hesitate to vet them thoroughly and check their professional credentials.<\/span><\/p>\n If you receive a request for your tax information, always verify the legitimacy of the request. Phishing attempts and identity theft schemes often involve fake tax inquiries. When in doubt, contact the IRS or a legal professional before responding.<\/span><\/p>\n As a small business owner, understanding the legal landscape around your tax filings is crucial\u2014not As a small business owner, understanding the legal landscape around your tax filings is crucial\u2014not only for protecting your information but also for maintaining compliance with federal and state tax laws. While tax returns remain private documents for most businesses, certain rules and legal procedures influence who can access them, how they must be handled, and the responsibilities that rest on business owners and their representatives.<\/span><\/p>\n The Internal Revenue Code (IRC), specifically Section 6103, strictly limits the disclosure of tax return information. Violations of this law, whether by IRS employees, tax preparers, or third parties, can result in serious civil and criminal penalties. As a taxpayer, you’re entitled to confidentiality and can pursue legal action if your data is disclosed without proper authorization. Yet, this protection also comes with responsibilities. For instance, if you want your accountant, attorney, or even a family member to communicate with the IRS on your behalf, you must file the correct forms\u2014Form 8821 for information sharing and Form 2848 for representation authority.<\/span><\/p>\n Moreover, businesses must stay vigilant about regulatory changes that affect how financial information is reported or shared. As regulatory scrutiny increases\u2014particularly in industries like finance, healthcare, and tech\u2014your ability to comply with evolving standards becomes essential. Understanding your obligations and proactively safeguarding your tax data not only ensures compliance but also builds trust with customers, employees, and partners.<\/span><\/p>\n only for protecting your information but also for maintaining compliance with federal and state tax laws. While tax returns remain private documents for most businesses, certain rules and legal procedures influence who can access them, how they must be handled, and the responsibilities that rest on business owners and their representatives.<\/span><\/p>\n We delve into the legal framework that governs business tax confidentiality, the compliance obligations you need to be aware of, and how to safeguard your financial data in an increasingly complex regulatory environment.<\/span><\/p>\n The core of tax confidentiality law in the United States is found in Section 6103 of the Internal Revenue Code. This law mandates that all tax returns and return information are confidential and may not be disclosed by the Internal Revenue Service, its employees, or any other parties with access to this information without proper authorization.<\/span><\/p>\n Section 6103 outlines specific situations where information may be disclosed, such as to state tax agencies, law enforcement, or certain Congressional committees under strict legal procedures. Importantly, disclosure without proper legal authority or taxpayer consent is considered a federal offense, punishable by fines and even imprisonment in severe cases.<\/span><\/p>\n For business owners, this law serves as a strong protective barrier that prevents unauthorized individuals from accessing sensitive financial data filed with the IRS. It covers all forms and attachments submitted to the IRS, including income statements, expense records, and shareholder or partner details.<\/span><\/p>\n Though your tax return is confidential, there are narrowly defined scenarios where disclosure is legally allowed. Understanding these exceptions can help you better manage your data and control access.<\/span><\/p>\n The IRS shares information with state tax departments for enforcement and auditing purposes. If you operate a business in a state with its own income tax, that state\u2019s revenue department may receive parts of your federal tax return. However, states are also bound by their own confidentiality laws, many of which mirror the protections of federal law.<\/span><\/p>\n If you or your business become the subject of a federal investigation involving financial fraud, tax evasion, or related crimes, law enforcement agencies may request access to your tax information. The IRS can only provide this information with a court-issued subpoena or warrant, and such access is typically confined to the specifics of the investigation.<\/span><\/p>\n Courts may issue orders to disclose tax returns during certain legal proceedings, including divorce cases, bankruptcy filings, or lawsuits involving financial damages. In these instances, the information is only accessible to the relevant parties\u2014such as attorneys, judges, or financial experts assigned to the case\u2014and does not become part of the public record.<\/span><\/p>\n The IRS is permitted to share tax return information with certain committees of Congress, particularly those responsible for tax legislation. However, even in these cases, strict confidentiality requirements apply, and information is usually anonymized or reviewed in closed sessions.<\/span><\/p>\n Your explicit consent is required before most third parties can access your tax information. The IRS uses two primary forms to manage this process, each designed for different levels of authority.<\/span><\/p>\n By submitting Form 8821, you can allow an individual or business\u2014such as a financial advisor, tax consultant, or lending institution\u2014to view your tax return records. This form does not grant the right to act on your behalf or to negotiate with the IRS. It\u2019s suitable for limited use cases, such as loan applications or internal audits.<\/span><\/p>\n Form 2848 grants full authority to a designated representative to act on your behalf in IRS matters. This includes making decisions, signing documents, and representing you during audits or disputes. It is typically used when working with a CPA, tax attorney, or enrolled agent who manages your tax affairs. Because it provides significant legal power, you should only assign Form 2848 to individuals you trust completely.<\/span><\/p>\n While the IRS provides strong protections for taxpayer information, business owners also have a role to play in maintaining compliance. This includes accurately preparing returns, safeguarding personal and business data, and responding promptly to IRS notices or requests.<\/span><\/p>\n The first pillar of compliance is honest and accurate reporting. Whether you’re filing as a sole proprietor on Schedule C or operating a C-corporation filing Form 1120, ensure that all income, deductions, and credits are reported truthfully. Inaccurate filings can trigger audits and, if deliberate, lead to legal consequences.<\/span><\/p>\n Meeting filing deadlines and paying taxes on time are essential to avoid penalties. The IRS may charge interest and late payment fees if you fail to file by the appropriate deadline\u2014generally March 15 for partnerships and S corporations, and April 15 for C corporations and sole proprietors.<\/span><\/p>\n Business owners must securely store copies of their tax returns, supporting documentation, and correspondence with the IRS. Maintain records for at least three years (and up to seven years if you\u2019ve claimed a loss or are involved in disputes). Physical documents should be kept in locked cabinets, and digital files should be encrypted and password-protected.<\/span><\/p>\n As more businesses move their operations online, digital compliance has become a major consideration. The IRS now offers a range of electronic services for tax filing, communication, and payments. However, digital convenience must be balanced with cybersecurity.<\/span><\/p>\n E-filing is now the most common way for businesses to submit their tax returns. All reputable e-filing services use encryption and multi-factor authentication to protect your data. Make sure to use only authorized IRS partners or certified software providers.<\/span><\/p>\n As a business owner, you are responsible for the cybersecurity of your tax-related data. This includes using strong, unique passwords for tax software, limiting employee access to sensitive files, and regularly updating antivirus software. Consider working with a cybersecurity consultant if you manage sensitive client or financial data beyond your own returns.<\/span><\/p>\n If your business includes or supports a nonprofit organization, different rules apply. Tax-exempt entities such as charities, religious groups, and private foundations must file an annual return using Form 990, which is subject to public disclosure requirements.<\/span><\/p>\n These filings must be made available to the public upon request. While certain information is redacted to protect individual privacy, operational and financial data\u2014including executive compensation and program budgets\u2014is fully visible. Nonprofit leaders must be transparent and ensure compliance with public access rules to maintain tax-exempt status.<\/span><\/p>\n Failure to comply with tax confidentiality rules or filing requirements can result in both civil and criminal penalties. These penalties are enforced not only against those who improperly access or disclose tax information, but also against business owners who fail to fulfill their responsibilities.<\/span><\/p>\n Tax professionals who disclose client information without authorization may face disciplinary action, fines up to $1,000 per offense, and even imprisonment. The IRS Office of Professional Responsibility investigates such cases and can revoke the preparer\u2019s right to practice before the IRS.<\/span><\/p>\n Business owners may face fines and penalties for improper disclosure if they misuse their access to sensitive employee or client data. Additionally, noncompliance with IRS rules\u2014such as failing to respond to notices or filing incorrect returns\u2014can lead to audits, interest charges, and loss of business reputation.<\/span><\/p>\n Although rare, IRS audits can be daunting. If your business is selected for an audit, it doesn\u2019t necessarily mean there\u2019s wrongdoing. However, being unprepared can complicate the process.<\/span><\/p>\n There are three primary types of audits:<\/span><\/p>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n<\/ul>\n Knowing which type you\u2019re facing helps you prepare accordingly.<\/span><\/p>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n<\/ul>\n Your representative (via Form 2848) can handle much of the communication on your behalf, streamlining the process and reducing stress.<\/span><\/p>\n Instead of waiting for issues to arise, business owners should adopt proactive compliance strategies. These steps can minimize your risk and help maintain smooth operations:<\/span><\/p>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n<\/ul>\n Compliance is not just about avoiding penalties; it’s about building a stable and trustworthy business. Investors, clients, and partners are more likely to work with businesses that demonstrate transparency and responsibility.<\/span><\/p>\n We discussed the confidentiality of business tax returns and the legal framework that governs access to tax information. Now it\u2019s time to focus on the practical side: protecting your tax data, preventing unauthorized disclosures, and maintaining compliance with both legal and ethical standards.<\/span><\/p>\n We will provide small business owners with actionable strategies to safeguard their tax records, work effectively with tax professionals, and implement best practices for data privacy and cybersecurity.<\/span><\/p>\n Although the law protects the confidentiality of tax returns, breaches can and do occur. Whether through digital theft, human error, or internal fraud, sensitive tax data can be compromised. The consequences of unauthorized disclosure range from financial penalties to damaged reputations and loss of customer trust.<\/span><\/p>\n For small businesses, the risk is compounded by limited resources. Unlike large corporations, many small enterprises operate with lean teams and minimal IT infrastructure, making them more vulnerable to data leaks and security lapses. These businesses often rely on general-purpose accounting tools or basic cloud storage solutions that may not offer enterprise-grade encryption or security protocols. Without dedicated IT personnel, even routine updates, firewall maintenance, and security patches can be delayed, leaving systems exposed to cyber threats.<\/span><\/p>\n Furthermore, small business owners frequently wear multiple hats, juggling operations, finances, and compliance. This multitasking increases the likelihood of accidental mishandling of sensitive documents or misjudging the legitimacy of email requests, which can lead to phishing attacks or ransomware breaches. Even simple mistakes, like sending tax documents to the wrong recipient or failing to password-protect a PDF file, can open the door to significant data exposure.<\/span><\/p>\n In today’s digital age, no business is too small to be a target. Hackers often view smaller firms as easy entry points to larger supply chains, making the implementation of even basic security measures\u2014such as secure passwords, multi-factor authentication, and employee training\u2014a critical line of defense.<\/span><\/p>\n While much of today\u2019s tax work is digital, many businesses still store paper records. These physical documents need to be kept secure to prevent unauthorized access or accidental loss.<\/span><\/p>\n Designate a locked file cabinet or secure room for tax-related documents. Access should be restricted to authorized personnel only. Maintain a log of who accesses these files, especially when handling sensitive returns or employee-related tax data.<\/span><\/p>\n Keep tax records for at least three years from the date of filing. However, certain documents\u2014such as those related to property ownership or long-term investments\u2014should be retained for up to seven years. Establish a clear record retention and disposal policy, and shred documents securely when they\u2019re no longer needed.<\/span><\/p>\n Most businesses now file and store their tax returns digitally, which brings convenience and efficiency but also creates new risks. Cybersecurity should be a priority for every business, regardless of size.<\/span><\/p>\n Make sure your computers and software use full-disk encryption. This ensures that even if a device is lost or stolen, the data inside remains unreadable without proper credentials. Tax documents should also be stored in password-protected folders.<\/span><\/p>\n Maintain regular backups of all tax-related data. Use secure cloud storage providers or encrypted external drives, and test backups periodically to ensure they\u2019re working. Backup solutions should also comply with your industry\u2019s data protection standards.<\/span><\/p>\n Install reputable antivirus and anti-malware software on all business devices. Use a commercial-grade firewall to monitor incoming and outgoing traffic and block unauthorized access. Keep all software updated to patch known vulnerabilities.<\/span><\/p>\n Protect all financial and tax software accounts with multi-factor authentication (MFA). MFA adds an extra layer of security by requiring not just a password but also a second form of verification, such as a code sent to a mobile device.<\/span><\/p>\n Choosing the right tax professional can enhance your business’s financial health, but it’s equally important to ensure that they handle your information responsibly.<\/span><\/p>\n Verify that any preparer you work with is licensed, credentialed, and in good standing with the IRS. Common credentials include Certified Public Accountant (CPA), Enrolled Agent (EA), or tax attorney. Ask for references and research client reviews.<\/span><\/p>\n Before you share any information, ask for a written engagement letter that outlines the services to be provided, the fee structure, and privacy obligations. This letter should also specify how your data will be handled and stored.<\/span><\/p>\n Only provide the information necessary to complete your tax return. If your preparer asks for broad access to financial systems, understand why it\u2019s needed and how it will be secured. Use Form 8821 or 2848 only when you fully trust the individual with access or representation rights.<\/span><\/p>\n Avoid sending sensitive tax documents via email. Use secure file-sharing platforms with encryption and password protection. If your tax preparer does not offer a secure portal, request one or consider switching to a provider who does.<\/span><\/p>\n Insider threats\u2014whether malicious or accidental\u2014can be just as dangerous as external hacks. Educate your staff and implement strict controls to prevent internal leaks.<\/span><\/p>\n Conduct regular training on the importance of data privacy and the procedures for handling tax documents. Make sure employees understand the legal consequences of unauthorized disclosure and how to recognize phishing scams or suspicious activity.<\/span><\/p>\n Limit access to tax records to only those employees who need it for their job duties. Use role-based permissions in digital systems and regularly audit access logs to ensure no unauthorized viewing has occurred.<\/span><\/p>\n Develop an incident response plan to deal with potential data breaches or suspicious activity. The plan should include steps for reporting, investigating, and mitigating damage, as well as notifying affected parties if necessary.<\/span><\/p>\n Although most business tax returns are private, certain organizations are required by law to make their returns available to the public. Understanding these rules is crucial if you operate or support such an organization.<\/span><\/p>\n Organizations that are tax-exempt under IRS code section 501(c)(3) or similar must file Form 990, which is subject to public inspection. This includes charities, religious organizations (with some exceptions), private foundations, and nonprofits.<\/span><\/p>\n These organizations must provide copies of their annual returns upon request and post them online when required. Failure to comply with public disclosure rules can result in penalties and the loss of tax-exempt status.<\/span><\/p>\n If you run a tax-exempt organization:<\/span><\/p>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n <\/span><\/li>\n<\/ul>\n There may be situations where clients, investors, or lenders request access to your tax records. Knowing when and how to respond can help you maintain control over your data.<\/span><\/p>\n Always evaluate the reason behind the request. Is it necessary for a loan application, legal requirement, or business partnership? If the request seems excessive or vague, ask for clarification and consider limiting the scope of information you provide.<\/span><\/p>\n Use non-disclosure agreements (NDAs) when sharing sensitive information with external parties. Specify how the information can be used, stored, and disposed of. Require that the other party secure your data using encryption and restricted access.<\/span><\/p>\n When possible, redact personal information such as Social Security numbers or irrelevant financial details. Only share what is absolutely necessary for the requestor\u2019s purpose.<\/span><\/p>\nBusiness Tax Returns Are Not Public Records<\/b><\/h2>\n
Legal Ramifications for Unauthorized Disclosure<\/b><\/h2>\n
When You Must Grant Access<\/b><\/h2>\n
Form 8821: Tax Information Authorization<\/b><\/h3>\n
Form 2848: Power of Attorney and Declaration of Representative<\/b><\/h3>\n
Role of Tax Preparers in Confidentiality<\/b><\/h2>\n
\n
Digital Security Considerations<\/b><\/h2>\n
Tax-Exempt Organizations and Public Filings<\/b><\/h2>\n
Court Cases and Legal Access<\/b><\/h2>\n
Best Practices for Protecting Your Tax Information<\/b><\/h2>\n
Legal Framework and Compliance for Small Business Owners<\/b><\/h2>\n
Foundation of Tax Confidentiality: Section 6103<\/b><\/h2>\n
Authorized Disclosures: Who Can Access Tax Information?<\/b><\/h2>\n
State Tax Agencies<\/b><\/h3>\n
Law Enforcement and Federal Agencies<\/b><\/h3>\n
Courts and Legal Proceedings<\/b><\/h3>\n
Congressional Committees<\/b><\/h3>\n
Role of Consent: Forms 8821 and 2848<\/b><\/h2>\n
Form 8821 \u2013 Limited Information Access<\/b><\/h3>\n
Form 2848 \u2013 Power of Attorney<\/b><\/h3>\n
Taxpayer Responsibilities: What You Must Do to Stay Compliant<\/b><\/h2>\n
Accurate and Honest Reporting<\/b><\/h3>\n
Timely Filing and Payment<\/b><\/h3>\n
Secure Document Storage<\/b><\/h3>\n
Digital Compliance and the IRS<\/b><\/h2>\n
E-Filing and Data Encryption<\/b><\/h3>\n
Cybersecurity Best Practices<\/b><\/h3>\n
Nonprofit and Tax-Exempt Organization Requirements<\/b><\/h2>\n
Penalties for Noncompliance and Breaches<\/b><\/h2>\n
For Tax Preparers and Professionals<\/b><\/h3>\n
For Business Owners<\/b><\/h3>\n
Understanding IRS Audits and How to Respond<\/b><\/h2>\n
Types of Audits<\/b><\/h3>\n
\n
Audit Preparation Tips<\/b><\/h3>\n
\n
Proactive Compliance Strategies for Small Businesses<\/b><\/h2>\n
\n
Practical Strategies for Security and Compliance<\/b><\/h2>\n
Understanding the Risks of Disclosure<\/b><\/h2>\n
Securing Physical Tax Records<\/b><\/h2>\n
Safe Storage Solutions<\/b><\/h3>\n
Retention Policies<\/b><\/h3>\n
Digital Protection of Tax Information<\/b><\/h2>\n
Use of Encrypted Systems<\/b><\/h3>\n
Secure Backups<\/b><\/h3>\n
Antivirus and Firewall Protection<\/b><\/h3>\n
Multi-Factor Authentication<\/b><\/h3>\n
Working with Tax Professionals Safely<\/b><\/h2>\n
Vetting Tax Preparers<\/b><\/h3>\n
Understanding the Engagement Terms<\/b><\/h3>\n
Limiting Access<\/b><\/h3>\n
Secure File Sharing<\/b><\/h3>\n
Preventing Insider Threats<\/b><\/h2>\n
Employee Training<\/b><\/h3>\n
Access Control<\/b><\/h3>\n
Incident Response Plans<\/b><\/h3>\n
Understanding Public Disclosure Requirements<\/b><\/h2>\n
Which Entities Must Disclose?<\/b><\/h3>\n
Best Practices for Public Disclosure<\/b><\/h3>\n
\n
Handling Requests for Tax Information<\/b><\/h2>\n
Evaluating Requests<\/b><\/h3>\n
Legal and Contractual Safeguards<\/b><\/h3>\n
Redacting Sensitive Data<\/b><\/h3>\n