Federal rules cover client financial data
The FTC Safeguards Rule treats accountants and tax preparers as financial institutions that must protect customer information.
FTC Safeguards Rule
The rule requires a written information security program, a Qualified Individual to oversee it, MFA and encryption of customer information.
Northwind sets up MFA and encryption and gives your Qualified Individual a record of both.
IRS Publication 4557 and the WISP
The IRS states that federal law requires tax and accounting professionals to create and maintain a written information security plan.
Northwind keeps the records behind your plan current as your firm changes.
NAIC Insurance Data Security Model Law
The NAIC model law requires insurance licensees in adopting states to keep a written, risk-based security program.
Agencies licensed in those states get the same controls and written records from Northwind.
Last reviewed . This section summarizes the rules and is not legal advice.