Safeguards Guide

Plain-English Safeguards guides

Straight answers on the FTC Safeguards Rule + IRS Pub 4557 for tax firms, from the team behind the Safeguards Check.

• Does the FTC Safeguards Rule Apply to My Firm?If your firm prepares taxes or handles client financial data, the FTC Safeguards Rule almost certainly applies to you, even if you have never heard of it. Here is who is covered and why.
• Do Accountants Need a WISP?Yes. A Written Information Security Plan is required for every tax and accounting firm, and the IRS ties it to your PTIN. Here is what a WISP is and what it has to contain.
• FTC Safeguards Rule Requirements: The ChecklistThe FTC Safeguards Rule requires nine specific elements, from a named security lead to MFA and encryption. Here is the full checklist in plain English for a small firm.
• FTC Safeguards Rule Penalties: What Happens If You Are Not Compliant?Non-compliance with the FTC Safeguards Rule can mean civil penalties, a 30-day breach-notification clock, denied insurance, and your PTIN. Here is what is actually at stake.