CPA and Accounting Firm Shredding: IRS Compliance and Client Privacy

CPAs and accounting firms in New York are entrusted with some of the most sensitive financial information their clients possess—tax returns, income statements, payroll records, investment portfolios, and business financial reports that represent years of accumulated financial data. Accounting firm document shredding is a professional obligation with roots in both federal privacy law and CPA ethics standards. Mishandling client financial records, even through innocent disposal errors, can expose a firm to AICPA disciplinary action, IRS scrutiny, and client lawsuits.

For New York CPA firms, the regulatory landscape is particularly complex. The Gramm-Leach-Bliley Act (GLBA) treats many accounting services as financial services, imposing specific requirements on how client financial information is safeguarded and disposed of. State-level obligations under the New York SHIELD Act add additional layers. This guide covers what accounting professionals need to know about compliant accounting firm document shredding practices.

AICPA Ethics Standards and Document Destruction

The AICPA Code of Professional Conduct imposes a duty of confidentiality on all CPAs regarding client information. This duty applies not just to verbal or digital disclosures, but to the physical handling of client records—including how they are disposed of when retention periods expire. Accounting firm document shredding must align with these ethical standards to avoid professional discipline.

Key AICPA provisions relevant to document destruction:

• ET Section 1.700 (Confidential Client Information): Prohibits unauthorized disclosure of client information—applicable to improper disposal that allows third-party access to client data
• Engagement file retention: AICPA standards recommend retaining work papers and client files for at least 5–7 years after the report or return date, with longer periods for audit engagements
• Supervision of destruction: When delegating document disposal to staff or vendors, the CPA retains responsibility for ensuring appropriate safeguards are in place

In New York, the NYSSCPA (New York State Society of CPAs) reinforces these standards and recommends that firms maintain written records destruction policies. Accounting firm document shredding using a certified vendor with a Certificate of Destruction is the standard that satisfies these professional obligations. Learn more about compliance standards on our compliance page.

GLBA Safeguards Rule Requirements for Accounting Firms

Under the Gramm-Leach-Bliley Act, accounting firms that provide tax preparation, financial planning, or other financial advisory services are classified as financial institutions and must comply with the FTC Safeguards Rule. The 2023 amendments to the Safeguards Rule significantly expanded and tightened requirements for how firms must protect and dispose of client financial records.

GLBA Safeguards Rule requirements relevant to accounting firm document shredding:

• Implement written information security programs covering disposal of customer information
• Ensure that physical records containing customer financial information are shredded, burned, or otherwise disposed of so that the information cannot practically be read or reconstructed
• Oversee service providers (including shredding vendors) by requiring contractual assurances of appropriate safeguards
• Designate a qualified individual to oversee information security, including disposal procedures

For most New York accounting firms, compliance with GLBA means partnering with a NAID AAA-certified shredding provider and obtaining Certificates of Destruction for every job. These documents become part of the firm’s information security program documentation and are essential evidence of compliance in the event of an FTC inquiry or client complaint.

IRS Document Retention Rules for Accounting Firms

Before commencing accounting firm document shredding, CPAs must confirm that IRS and state retention requirements have been met. The IRS has specific expectations about how long tax returns, work papers, and supporting documents should be kept—and shredding documents before those periods expire is a serious mistake.

IRS-recommended retention periods relevant to accounting firms:

1. Client tax returns: At least 7 years from filing date (or longer if amended returns are possible)
2. Audit work papers: 7 years minimum; many firms retain indefinitely for major audit clients
3. Employment and payroll records: At least 4 years after the tax is due or paid
4. Business financial statements prepared for clients: Follow the client’s own retention schedule, typically 7 years
5. Engagement letters and fee agreements: Duration of client relationship plus 7 years
6. Correspondence with IRS on client matters: Permanently, or until all potential audit exposure is resolved

These periods are minimums. Firms that handle complex business returns, estate tax matters, or multi-jurisdictional filings should consult with their own legal counsel before establishing accounting firm document shredding schedules for specific document categories.

Setting Up a Shredding Program for Your CPA Practice

For New York accounting firms with ongoing high-volume document generation, a scheduled shredding program is more effective than episodic purges. Tax season, in particular, produces enormous volumes of client source documents—W-2s, 1099s, bank statements—that must be handled and eventually destroyed. A structured accounting firm document shredding program creates a consistent, defensible process for document disposal.

Elements of an effective CPA firm shredding program:

• Locked shred consoles at each workstation, reception, and conference areas
• Clear staff protocol: client source documents go in the shred console, not the recycling bin
• Post-tax-season purge: schedule a large purge each spring for prior-year returns and source documents that have reached their retention limit
• Annual file room audit to identify files eligible for destruction
• Certificates of Destruction filed in firm risk management records

Smaller solo CPA practices can manage with a single shred console and quarterly pickups. Larger multi-partner firms benefit from multiple consoles across practice areas and monthly scheduled service. Visit our pricing page for more information, or contact us to discuss a program tailored to your firm size.

Hard Drive and Electronic Media Destruction for Accounting Firms

Modern accounting firm document shredding extends beyond paper. Client financial data stored on old desktop computers, external hard drives, USB drives, and backup tapes must also be properly destroyed when the equipment is retired. Accounting firms often hold client tax software databases, QuickBooks files, and financial planning software exports on internal servers and devices—all of which represent sensitive client information if improperly disposed of.

Certified hard drive destruction, performed alongside paper shredding, ensures complete data elimination. New York Shredding provides both paper shredding and hard drive destruction services, allowing your firm to address all media in a single service visit. This is especially important for firms upgrading computers after tax season or decommissioning old file servers. Explore our services for details on electronic media destruction. Learn more about the process on our how it works page.

Why New York Businesses Choose New York Shredding

For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.

Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.

Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.