Compliance guides

Plain-English guides to the security rules for tax preparers and investment advisers: PTIN renewal, the FTC Safeguards Rule and Regulation S-P. Every rule we quote links to its source.

• IRS Publication 5708: what the IRS WISP sample covers, and what you still have to add

  IRS Publication 5708 is the IRS guide to writing a WISP. What its sample includes, what changed in 2024, and what you must add for your own firm.

• PTIN renewal and your WISP: what the IRS asks you before December 31

  Every PTIN for 2026 expires on December 31. Line 11 of Form W-12 asks you to confirm you have a data security plan. What that means and how to get one done.

• The FTC Safeguards Rule for tax preparers: what 16 CFR 314.4 requires in your WISP

  The elements of 16 CFR 314.4 in plain English: Qualified Individual, risk assessment, encryption, MFA, training, vendors, incident plan and the FTC notice.

• Regulation S-P amendments: what small investment advisers must have in place since June 3, 2026

  Smaller RIAs had to comply with the amended Regulation S-P by June 3, 2026: an incident response program, 30-day customer notices and 72-hour vendor notice.