At Accavallo & Company, protecting your personal and financial information is a responsibility we take seriously. As tax professionals, we handle some of our clients’ most sensitive data—Social Security numbers, bank information, tax returns, and business records. With cyber threats on the rise, strong data security practices are more important than ever.
The IRS, state tax agencies, and the tax industry work together through the Security Summit initiative to combat identity theft and tax fraud. As part of this effort, tax professionals are required to follow strict safeguards under federal law, including the Gramm-Leach-Bliley Act, which mandates that firms maintain a written data security plan to protect client information.
Below is an overview of how we stay vigilant—and how you can help keep your information secure.
Our Commitment to Data Security
We follow IRS and National Institute of Standards and Technology (NIST) guidelines to protect your data, including recommendations outlined in:
-
IRS Publication 4557 – Safeguarding Taxpayer Data
-
NIST Small Business Information Security – The Fundamentals
-
IRS Publication 1345 – Handbook for Authorized IRS e-File Providers
These standards focus on identifying risks, protecting systems, detecting threats, responding quickly, and recovering securely.
How We Protect Your Information
To safeguard your data, our firm uses multiple layers of security, including:
-
Secure systems with up-to-date antivirus and anti-malware software
-
Strong password and encryption protocols
-
Limited access to sensitive information on a need-to-know basis
-
Secure data backups stored separately from our primary network
-
Final reviews of tax returns prior to e-filing, especially banking details
-
Secure destruction of outdated devices and documents
We also closely monitor IRS filing activity tied to our firm to detect any unusual or unauthorized behavior.
How You Can Help Protect Your Data
Cybersecurity is a shared responsibility. You can help protect your information by:
-
Using secure portals (such as our client portal) to upload and receive documents instead of email
-
Avoiding suspicious emails or links, especially messages claiming to be from the IRS—remember, the IRS never initiates contact by email
-
Using strong, unique passwords for financial and tax-related accounts
-
Providing us with access to necessary account information securely, such as bank or payroll portals, when needed to perform our services efficiently and accurately
Timely and secure sharing of information helps us reduce risk and serve you more effectively.
Warning Signs of Data Theft
Sometimes data theft occurs without obvious signs. Red flags may include:
-
IRS notices about tax returns you didn’t file
-
Rejected e-filed returns due to duplicate Social Security numbers
-
Unexpected tax transcripts or refunds
-
IRS notifications about new or disabled online accounts
-
Slower-than-normal computers or unusual system activity
If you notice anything suspicious, contact us right away.
If Data Is Ever Lost or Compromised
In the unlikely event of a data breach, prompt action is critical. We follow established IRS and law enforcement reporting procedures and work with security professionals to investigate, contain, and prevent further issues.
Our goal is always transparency, rapid response, and protection of our clients’ interests.
Staying Ahead of Threats
We stay informed through IRS alerts, professional updates, and cybersecurity guidance so we can adapt to emerging threats—especially during tax season, when scams are most common.
Our Promise to You
Your trust matters to us. Data security isn’t just a regulatory requirement—it’s part of our commitment to professionalism, integrity, and client service. By working together and using secure tools and best practices, we can help ensure your financial information stays protected.
If you ever have questions about data security or how to share information safely, please don’t hesitate to contact our team.
