As a tax preparer, understanding how long to retain client records is essential for compliance, risk management, and ethical practice. While the IRS generally recommends keeping records for three to seven years, specific circumstances, such as unreported income or fraudulent return, can require much longer retention. In this guide, we break down the latest IRS requirements, exceptions, and best practices to help you protect your business and support your clients.
How long do tax preparers have to keep client records?
In most tax situations, the period of limitations for the IRS to assess a tax return is three years, so you should keep client records for at least three years from the time the tax return was due.
According to IRC Sec. 6107(b), tax preparers must either retain a copy of the tax return or, at a minimum, maintain a list of client names and Taxpayer Identification Numbers (TINs). To ensure compliance, keep consistent and secure records for up to three years and be prepared to provide a copy if the IRS requests.
Record inspection requests are rare for most compliant tax preparers. However, they are a standard part of IRS enforcement for preparers or clients flagged for questionable practices. Failure to comply with these requirements can result in a penalty of $50 for each failure, with a maximum penalty of $25,000 for any return period.
Specific income or reporting requirements may require you to retain records longer in certain situations. Here are a few examples to keep in mind:
Disclosure of unreported income: 6 years
Although the IRS generally recommends keeping tax records for three years, there are exceptions, especially when income is underreported. Under Circular 230, the IRS outlines the ethical responsibilities for tax preparers if they become aware of a client’s omission. If a client discloses unreported income to you, the IRS requires you to:
- Inform the client of the error or omission.
- Advise the client on the potential consequences of noncompliance.
- Recommend corrective action, such as filing an amended return.
While you are not responsible for enforcing compliance, the IRS does expect you to act ethically and document your response.
If a taxpayer omits more than 25% of their gross income, the IRS can audit up to six years after the return was filed. As the tax preparer, you should:
- Document all communications related to the disclosure.
- Keep notes, emails, and internal work papers that show how you handled the issue.
Doing so will protect your practice if the IRS audits the client and reviews your involvement. Even though the IRS does not explicitly require this timeframe, keeping these records for at least six years is a smart safeguard for your business.
Unfiled and fraudulent returns: indefinitely
In cases where a client has either not filed a required return or has filed a fraudulent return, the IRS imposes no statute of limitations. This means the IRS can assess taxes or initiate an audit at any time, regardless of how much time has passed. The IRS recommends that tax preparers keep records related to these circumstances indefinitely.
If a client discloses that a return was never filed or that a previously filed return was fraudulent, you have a responsibility to inform them of the consequences and recommend corrective action.
Be vigilant about potential scams or suspicious behavior. Fraudulent returns may be part of broader schemes, and preparers should be cautious not to become unknowingly involved.
Document and keep all communication with the client to protect your practice. Communication that you should maintain in your records could include the following:
- Notes from client conversations
- Emails or written disclosures
- Internal work papers
- Copies of prepared (but unfiled) returns
- Documentation of advice and disengagement
Because the IRS can audit or assess taxes at any time in cases of fraud or non-filing, your potential exposure does not expire. Keeping records indefinitely is best practice for risk management and professional protection.
What tax records should tax preparers keep?
At a minimum, the IRS requires tax preparers to keep either:
- A completed copy of each return or claim for refund prepared, or
- A list of clients that includes names and taxpayer identification numbers.
While not mandated, it is advisable to retain supporting documentation that outlines the preparation process of the return, as well as records of communications with the client during this time. This includes internal notes, calculations, meeting notes, due diligence checklists and copies of forms used to support the return. These records help protect your practice and support your work in case of future audits or inquiries.
- Copies of prepared tax returns or a client list
- Internal work papers and calculations
- Notes from client meetings or phone calls
- Emails or written correspondence related to tax advice or disclosures
- Copies of documents provided by the client (W-2s, 1099s)
- Documentation of advice given, especially in high-risk scenarios (unfiled or amended returns)
- Records of disengagement
It’s important to inform your clients that the IRS also has specific expectations regarding taxpayer responsibility for record keeping and document retention. Make sure clients understand that the IRS expects them to keep records of original receipts, bank statements, and official IRS forms.
You should always return original documents to the client but may retain copies for compliance and documentation purposes. To protect client confidentiality, records must be securely disposed of once the retention period has passed.
How to keep client records secure
Tax preparers are legally required to protect sensitive client information from unauthorized access, theft, or misuse. The IRS requires all tax preparers to create and implement a Written Information Security Plan (WISP). A WISP is a formal document that outlines how your firm protects client data.
Securing client records involves protecting physical and digital information from unauthorized access, theft, loss, or misuse. This may look like:
- Locking file cabinets and limiting physical access
- Using encrypted storage and secure cloud platforms
- Implementing strong passwords and multi-factor authentication
- Properly disposing of records once retention periods expire
Pro tip: These records should be stored on your local drive, an external hard drive, or another form of personal storage. Maintaining your backup offline and disconnected from your computer or network provides the best protection from cyber or physical threats.
Not holding onto records longer than necessary is also a form of data security. Retaining outdated or unnecessary records increases the risk of exposure in the event of a data breach. Protecting taxpayer information helps prevent fraud and identity theft, builds client trust, and ultimately protects your tax practice.
Interested in TaxSlayer Pro? Request a free demo and try it today!
