Section 7216: using and disclosing tax return information

Who section 7216 covers, what counts as tax return information, when you need a signed consent, the offshore SSN limit, and the criminal and civil penalties.

5 min read · CORAA Team
Lesson 10 of 14 · 0 of 14 complete
In this lesson you will
  • Identify the persons and information covered by IRC 7216
  • Distinguish a consent to use from a consent to disclose
  • Apply the consent timing, duration and offshore SSN rules from the IRS guidance
  • Compare the criminal penalty in 7216 with the civil penalty in 6713

The statute

Section 7216(a) applies to any person engaged in the business of preparing, or providing services in connection with the preparation of, tax returns, and to any person who for compensation prepares a return for someone else. If that person knowingly or recklessly:

  1. discloses any information furnished for, or in connection with, the preparation of a return; or
  2. uses that information for any purpose other than to prepare, or assist in preparing, the return,

the person is guilty of a misdemeanor and can be fined up to $1,000 ($100,000 where section 6713(b) applies), imprisoned up to one year, or both, plus costs of prosecution.

Section 7216(b) lists exceptions: disclosures under another provision of the Code or a court order, use of the information to prepare the same person's state and local returns and estimated tax declarations, and any disclosure or use permitted by regulations. The regulations at 26 CFR 301.7216-1 to 301.7216-3 do most of the work: they define terms, list the disclosures and uses allowed without consent, and set the consent rules.

The civil penalty

Section 6713 is the civil counterpart. The IRS preparer penalties page lists $250 per unauthorized disclosure or use, up to $10,000 per calendar year, and $1,000 per disclosure or use connected with identity theft, up to $50,000 per calendar year, for disclosures on or after July 1, 2019.

Who and what is covered

The IRS FAQs read the coverage broadly:

  • Preparers include paid and volunteer preparers, e-file providers, people who assist others in preparing returns or perform auxiliary services, and employees who perform such services. Contractors who receive return information from a preparer are also covered.
  • Tax return information is information preparers obtain from taxpayers or other sources in any form and use to prepare returns, or obtain in connection with preparing them. It includes the preparer's own computations and worksheets, IRS correspondence, and data collected at software registration.

So the client's name and address on your client list is tax return information if you got it through return preparation.

Consents

When no exception applies, the taxpayer must give written consent before the preparer uses or discloses the information. Key points from the IRS FAQs:

  • Consents to use and consents to disclose are defined separately and have different required content.
  • Consents must be signed and dated by the taxpayer, in pen and ink or electronically.
  • Consents obtained on or after January 1, 2014 must contain the mandatory language in Rev. Proc. 2013-14.
  • If no duration is stated, a consent is effective for one year from the date the taxpayer signed it.
  • A preparer may not request a consent to disclose or use information for solicitation of business unrelated to tax return preparation after giving the taxpayer the completed return for signature (Treas. Reg. 301.7216-3(b)(2)).

Offshore preparation

Disclosure of tax return information to a preparer outside the United States needs a signed consent. For Form 1040 series returns, Treas. Reg. 301.7216-3(b)(4) bars a US preparer from obtaining consent to disclose the taxpayer's SSN to a preparer outside the United States, unless the SSN goes through an adequate data protection safeguard as defined in Rev. Proc. 2013-14 and the consent request verifies it. Otherwise the SSN must be redacted or masked. The offshore consent guide walks through the setup.

Uses the IRS has addressed

The 7216 information center describes several permitted activities: client lists used to solicit tax return preparation services (not non-tax services), contacting clients about tax law changes and sharing a client list with a newsletter provider (Rev. Rul. 2010-4), disclosure to professional liability insurers and to attorneys evaluating a claim (Rev. Rul. 2010-5), anonymous statistical compilations with data from at least 10 returns, and disclosures needed for conflict of interest reviews. Section 7216(b)(3) also requires the regulations to permit disclosure for quality or peer reviews.

Staff rules of thumb

  • Do not send return data to anyone outside the engagement team without checking whether an exception or consent covers it.
  • Never use client data for a non-tax service (lending, investment, insurance) without a consent to use.
  • Treat sending return data to an outside AI tool or service provider as a disclosure that needs a regulatory exception or a consent.
Worked example

Offshore review and a cross-sell: Pinecrest Tax

Pinecrest Tax wants to do two things for the 2026 season.

Plan 1: send 300 individual returns to an affiliated preparation team in another country for first-pass preparation. This is a disclosure of tax return information to a preparer outside the United States. Each client must sign a consent to disclose that uses the Rev. Proc. 2013-14 mandatory language, before the data is sent. The firm cannot simply ask clients to consent to sending their SSNs offshore; it must mask SSNs unless it qualifies for the Rev. Proc. 2013-14 data protection exception. The firm sets a portal rule that blocks upload until the consent is on file.

Plan 2: use client income data to market the partner's new financial planning service. Using return information for a purpose other than return preparation needs a consent to use. Pinecrest drafts a separate consent to use, presents it at intake rather than with the completed return, and states a two-year duration. Without a stated duration, it would expire one year after signing.

Exposure if the firm skips the consents: civil penalties under 6713 of $250 per disclosure or use up to $10,000 per year, and possible criminal exposure under 7216.

Conclusion: two separate consents, both obtained before any data moves or is used, with SSNs masked offshore.

Self-check

Answer each question before you open the answer.

  1. What criminal penalty does 7216(a) carry?

    Show answer

    A misdemeanor, with a fine of up to $1,000 ($100,000 where 6713(b) applies), imprisonment of up to one year, or both, plus costs of prosecution.

  2. If a 7216 consent does not state a duration, how long is it effective?

    Show answer

    One year from the date the taxpayer signed it. Treas. Reg. 301.7216-3(b)(5) lets the consent state a duration and supplies the one-year default when it does not.

  3. May a preparer send a client's SSN to an offshore preparer with the client's consent?

    Show answer

    Not on consent alone. For Form 1040 series returns, Treas. Reg. 301.7216-3(b)(4) bars obtaining consent to send the SSN offshore unless an adequate data protection safeguard under Rev. Proc. 2013-14 is used and verified in the consent request. Otherwise the SSN must be redacted or masked.

  4. When may a preparer not ask for a consent to use information to solicit business unrelated to tax return preparation?

    Show answer

    After the preparer has given the taxpayer the completed return for signature. Treas. Reg. 301.7216-3(b)(2) sets this limit so the taxpayer is not pressed for consent at the point of signing.

Sources

Back to the syllabus

Standards are paraphrased from the primary sources listed above; read the source before relying on a requirement. This lesson is training material, not professional advice. Report an error

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required