ΕπόμενοΕπόμενος οδηγός
When Therapy Clients Use AI Chatbots
Κοινωνία
ΟΔΗΓΟΣ Κοινωνίας
CPA Ethics and Client Data When Using AI
CPAs can use AI tools with client data only in ways that respect their confidentiality duties.
Σε αυτήν τη σελίδα4 λεπτά ανάγνωση
Επισκόπηση
For tax work, the rules of Internal Revenue Code section 7216 on disclosing or using tax return information also apply. In practice that means knowing where the data goes, getting client consent or contractual protections when required, and vetting the vendor before any client information enters the tool. This matters because pasting a client file into the wrong chatbot can be an unauthorized disclosure with professional, civil and even criminal consequences.
Βαθιά κατάδυση
Three sets of rules shape how a CPA can use AI with client information. The first is the AICPA Code of Professional Conduct. Its Confidential Client Information Rule (1.700.001) bars members in public practice from disclosing confidential client information without the client's specific consent, with limited exceptions such as responding to a valid subpoena or a peer review. The Code also has interpretations on third-party service providers, which cover most AI vendors. Broadly, the member should tell the client before sharing confidential information with such a provider. The member should also either have a contract requiring the provider to keep the information confidential, with reasonable assurance that it has procedures to do so, or get the client's specific consent. The second applies to tax preparers. Section 7216 makes it a crime for a return preparer to knowingly or recklessly disclose or use tax return information outside permitted purposes. Section 6713 adds a civil penalty. The Treasury regulations under section 7216 list some disclosures that need no consent. Many others need written consent obtained before the disclosure, signed and dated by the taxpayer, and in the format the IRS prescribes; Revenue Procedure 2013-14 gives the format guidance. Tax return information disclosed to anyone outside the United States gets stricter treatment. Whether a particular AI vendor falls under a no-consent exception is a legal question the firm should resolve with counsel, not assume. The third is data security law. Tax and accounting firms are generally covered by the FTC Safeguards Rule, which requires a written information security program. IRS Publication 4557 gives practical safeguarding guidance. Two misconceptions are common: stripping names does not make data anonymous. A combination of location, income, business type and dates can identify a client; and an enterprise AI plan does not remove the firm's obligations. It only makes them easier to meet.
Στρατηγικός αντίκτυπος
Κίνδυνος και ασφάλεια
Οι καταστροφικές και οι καθημερινές βλάβες της τεχνητής νοημοσύνης εξαρτώνται από το ποιος κατανοεί τους κινδύνους και ποιος μπορεί να δράσει.
Σαφέστερες αποφάσεις
Ο δημόσιος και επαγγελματικός γραμματισμός διαμορφώνει εάν είναι πολιτικά δυνατή η ισχυρή πολιτική ασφάλειας.
Κόβοντας τη διαφημιστική εκστρατεία
Οι σαφείς εξηγήσεις μειώνουν τη λήψη από διαφημιστική εκστρατεία, εργαστηριακές σχέσεις δημοσίων σχέσεων και αόριστες θεατρικές ηθικές.
The Future of CPA Ethics and Client Data When Using AI
Professional bodies, state boards and the IRS are paying more attention to AI in tax and accounting practice. Firms should expect more specific guidance, updated engagement letter language and AI-specific vendor contract terms. How confidentiality and section 7216 apply to particular AI setups may be clarified over time, so firms should watch AICPA and IRS publications rather than rely on today's assumptions. Technology is also moving toward private deployments and stronger contractual data controls, which make compliant use easier. Consent, documentation and professional judgment will still be required.
Υλοποίηση σε πραγματικό κόσμο
A tax preparer wants help drafting a reply to a client's IRS notice. Instead of pasting the notice into a free consumer chatbot, they use the firm's approved enterprise tool under a contract that bars training on inputs, and first remove the name, SSN and address.
A firm evaluating an AI bookkeeping assistant asks the vendor for its SOC 2 Type II report, data retention periods, subprocessor list and data processing location. It also checks whether a written contract bars the vendor from using client data to train its models.
A firm updates its engagement letters to tell clients that third-party service providers, including AI tools, may process their information. It also reviews whether any planned use of tax return information needs separate section 7216 consent.
A staff accountant pastes a client's full trial balance and payroll register into a personal chatbot account. The firm treats this as a possible unauthorized disclosure: it reviews the tool's data terms, asks for deletion where possible, documents the incident and retrains staff.
Κίνδυνοι & προστατευτικά κιγκλιδώματα
Αντιμετώπιση του υπαρξιακού κινδύνου ως ενώσεις επιστημονικής φαντασίας και ικανότητας.
Συγχέοντας την ασφάλεια του προϊόντος της επιφάνειας με την ευθυγράμμιση υπό υψηλή αυτονομία.
Αφήνοντας μη αγγλικά και μη εξειδικευμένα είδη κοινού με πηγές μόνο χαμηλής ποιότητας.
Οδικός Χάρτης Εφαρμογής
Ξεχωρίστε τους κινδύνους βλαβών, κακής χρήσης και απώλειας ελέγχου / κακής ευθυγράμμισης του προϊόντος.
Ρωτήστε ποια στοιχεία θα άλλαζαν την άποψή σας για τα χρονοδιαγράμματα και τη σοβαρότητα.
Προτιμήστε τις πρωτογενείς πηγές και τις συγκεκριμένες αξιολογήσεις έναντι των ισχυρισμών μάρκετινγκ.
Προσδιορίστε ένα μονοπάτι δράσης: καριέρα, πολιτική, χρηματοδότηση ή δεξιότητες — όχι μόνο ευαισθητοποίηση.
Συνεχίστε την εξερεύνηση
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the CPA Ethics and Client Data When Using AI quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
Συχνές ερωτήσεις
What is CPA Ethics and Client Data When Using AI?
CPAs can use AI tools with client data only in ways that respect their confidentiality duties. For tax work, the rules of Internal Revenue Code section 7216 on disclosing or using tax return information also apply. In practice that means knowing where the data goes, getting client consent or contractual protections when required, and vetting the vendor before any client information enters the tool. This matters because pasting a client file into the wrong chatbot can be an unauthorized disclosure with professional, civil and even criminal consequences.
Under the AICPA Confidential Client Information Rule, what is generally required before a member in public practice discloses confidential client information, outside the listed exceptions?
The rule bars disclosure without the client's specific consent, with limited exceptions such as responding to a valid subpoena or a peer review.
What does Internal Revenue Code section 7216 primarily target?
Section 7216 is a criminal provision aimed at return preparers who improperly disclose or use tax return information.
Which Internal Revenue Code section adds a civil penalty for improper disclosure or use of tax return information by preparers?
Section 6713 provides the civil penalty that sits alongside the criminal provision in section 7216.
When section 7216 consent is required, which description matches the regulations as summarized in the guide?
The regulations require written consent before the disclosure, signed and dated by the taxpayer, and in the format the IRS prescribes. Rev. Proc. 2013-14 gives the format guidance.
Under the AICPA's third-party service provider interpretations, what is broadly expected before sharing confidential client information with an AI vendor?
The member should tell the client and either rely on a contract that makes the provider keep the information confidential, with reasonable assurance of its procedures, or get specific consent.
Συνέχισε να μαθαίνεις
Σχετικοί οδηγοί
Επιλέχθηκαν περισσότεροι οδηγοί για αυτό το θέμα