IRS Authority To Regulate Tax Prep Cybersecurity Has Gaps, Watchdog Says

“However, taxpayer information held by third-party providers—such as paid tax return preparers and tax preparation software providers—generally falls outside of these requirements, according to IRS officials.” However, even with updated standards, the IRS does not have the authority to regulate or otherwise manage the security of third-party providers directly. “However, IRS’s efforts do not provide assurance that taxpayers’ information is being adequately protected,” according to GAO researchers, as the agency has not “developed minimum information security requirements for the systems used by paid preparers or Authorized e-file Providers.” While GAO suggested such requirements would be necessary to establish baseline s ..