Form W-12 Line 11, word for word
Line 11 of Form W-12 is one sentence and two checkboxes, and it is the only place most tax preparers will ever be asked about information security by a federal agency. Here is exactly what it says and exactly what it commits you to.
Key facts
- The line reads: "I am aware that paid tax return preparers are required by law to create and maintain a written information security plan that provides data and system security protections for all taxpayer information."
- You must check Yes or No. There is nothing to attach and nothing the IRS reviews.
- Checking No does not remove the duty, because the duty is in 16 CFR 314.3(a), not in the form.
Key takeaways
- The revision currently in use is Form W-12 (Rev. October 2025).
The exact wording
Form W-12 heads the section Data Security Responsibilities and asks you to check one box against a single sentence.
"I am aware that paid tax return preparers are required by law to create and maintain a written information security plan that provides data and system security protections for all taxpayer information."
Note what the sentence does and does not claim. It does not say you have a plan. It says you are aware that the law requires one. That is a lower bar to clear truthfully, and a much harder one to un-clear later.
The form numbers this section 11, between the federal tax compliance question at line 10 and professional credentials at line 12. It applies to initial applications and renewals alike.
What checking Yes commits you to
Awareness, formally recorded, once a year, in a signed federal filing.
It is not a certification that your plan exists, is adequate, or has been reviewed. Nobody at the IRS reads it and there is no penalty attached to the box itself.
Its weight is evidential. If your firm is ever asked what it knew about its security obligations, there is now an annual signed answer on file. That is the entire practical effect, and it is enough of one to be worth the evening it takes to make the underlying statement comfortable.
Why No is not the safer box
Because the obligation does not come from the form, checking No records a lack of awareness without removing anything.
16 CFR 314.3(a) requires the written program of covered financial institutions regardless of what you check. The Safeguards Rule contains no exemption keyed to a preparer's PTIN filing.
So the two options are a signed statement that you know about a duty you owe, or a signed statement that you do not know about a duty you owe. Neither changes the duty. One of them is simply worse to have on file.
| Question | Answer |
|---|---|
| Do you upload a plan? | No. There is no attachment field. |
| Does the IRS review the plan at renewal? | No. |
| Is there a penalty for checking the box? | No penalty attaches to the box itself. |
| Does checking No exempt the firm? | No. The duty is in 16 CFR 314.3(a). |
| Does it apply to a solo preparer? | Yes. 314.3(a) has no size exemption. |
| How often is it signed? | Every year, at application and at renewal. |
FAQ
Do I have to send my security plan to the IRS when I renew?
No. Line 11 is an acknowledgment, not a submission. There is no upload field, no attachment, and no review step. The IRS is asking you to confirm that you know the requirement exists. Any vendor implying the IRS inspects your plan at renewal is selling you fear rather than a document.
What happens if I check Yes and I do not actually have a plan?
Nothing happens at the moment you renew, because nothing is checked. The exposure comes later. You have signed a federal form stating you are aware of the requirement, which means that if the FTC, the IRS, a cyber insurer, or a client's lawyer ever asks, you cannot say you did not know. The honest fix is to build the plan, not to check No.
Should I check No instead?
Checking No does not exempt you from anything. The requirement comes from the Safeguards Rule at 16 CFR 314.3(a), not from the W-12. Checking No records that you are not aware of a legal duty that applies to you anyway, in a signed statement, on a form the IRS keeps. There is no version of this where No is the safer box.
Which revision of Form W-12 is current?
Form W-12 (Rev. October 2025) is the revision in use for the 2026 season. The IRS posts the current revision at irs.gov/pub/irs-pdf/fw12.pdf, and the revision date appears in the top left of the first page.
Sources
- IRS Form W-12 (Rev. October 2025), PTIN Application and Renewal
- IRS, PTIN requirements for tax return preparers
- IRS, Tax pros reminded to renew PTINs for the 2026 season
- FTC Safeguards Rule, 16 CFR Part 314 (eCFR)
- IRS Publication 5708, Creating a Written Information Security Plan
- IRS Publication 4557, Safeguarding Taxpayer Data
Make the statement true
A written information security plan, tailored to your firm and cited to the rule, in about twenty minutes of plain questions.
Start the questionnaire