Every tax and accounting firm holds exactly the data identity thieves want: names, Social Security numbers, dates of birth, bank account numbers, income and employer details, often for whole families. That is why federal law treats a firm that prepares tax returns as a financial institution for data security purposes, and why the IRS now asks every preparer, at each PTIN renewal, to acknowledge that a written information security plan is required.
A written information security plan, ...