Skip to main content
HelloBooks.ai home

AICPA Confidentiality Rules for Outsourced Work | HelloBooks How the AICPA Code treats third-party service providers, where to find the interpretations, and how to pair them with 7216 consent in your engagement letter.

Outsourcing · AICPA Code

AICPA confidentiality rules for outsourced work

For AICPA members, outsourcing is an ethics question as well as a tax-law one. The Code has a definition of a third-party service provider and interpretations that apply when you use one.

Free Plan with invoices within 200 transactions, bills & quotes — no credit card.

HelloBooks.aiSmarter accounting for growing businesses
Before an AICPA member shares client files with a provider

Is it a third-party service provider?

  • An entity your firm does not control
  • Or an individual not employed by you who helps deliver client services

Then check

  • The Use of a Third-Party Service Provider interpretation (Integrity and Objectivity Rule)
  • The Confidential Client Information Rule interpretations
  • Your client disclosure language
  • Your 7216 consent, for tax return information

Definition from the AICPA Code (0.400.50). Read the current interpretations in the online Code.

Who counts as a third-party service provider

The Code’s definitions (0.400.50) describe a third-party service provider as an entity the member does not control, individually or with the firm, or an individual not employed by the member who assists in providing professional services to clients. Most outsourcing firms and offshore staffing arrangements fall inside that definition.

Which interpretations to read

The AICPA’s Professional Ethics Executive Committee has published sample client disclosure language that members can use to meet the requirement in the “Use of a Third-Party Service Provider” interpretation of the Integrity and Objectivity Rule. The Confidential Client Information Rule also has an interpretation on disclosing information to a third-party service provider.

Read both in the current online Code before drafting your client language. We link to the Code rather than paraphrase it, because the wording matters and interpretations are revised.

Pairing ethics disclosure with 7216 consent

The AICPA disclosure and a 7216 consent do different jobs. One tells the client a third party may work on the engagement; the other authorises disclosure of tax return information. Many firms place the disclosure in the engagement letter and keep the 7216 consent as its own signed document, as Rev. Proc. 2013-14 expects.

FAQ

Frequently asked questions

Does the AICPA provide template language?
Yes. AICPA & CIMA publish sample client disclosure language for outsourcing; downloading it needs a free account on their site.
Do the AICPA rules apply to non-members?
The Code binds AICPA members. State boards have their own rules, and 7216 applies to all tax return preparers regardless of membership.

Sources

General information for tax and accounting professionals, not legal advice. Rules are summarised from the primary sources listed on the date shown; read the current text before relying on it.

Start automating your books today

Free Plan with full access to the AI accountant — no credit card, no time limit.

Subscribe to our newsletter

Stay up to date with the latest news and announcements. No credit card required.

By subscribing, you agree to our Privacy Policy.