Mark Gallegos, CPA, MST, Partner — Porte Brown LLC, discusses the importance of having processes around retaining documents for accounting firms as well as advising clients on what information is important for them to maintain. It is imperative to manage files in an efficient manner, and, often, there are different considerations for physical storage versus digital storage.

 

AICPA resources

Document Retention FAQs for Tax Practitioners — Having a written document retention policy for your firm is a must-do along with advising clients on taxpayer record retention.

Document Retention Policy Template for Tax Practitioners — Formalize your tax firm’s policies about retaining documents related to firm operations and client records.

Optimizing your tax practice — Explore tools to manage a more efficient tax practice, enhance your operations, add value to your service offerings and reinforce client relationships.

Transcript

April Walker: Hello everyone and welcome to the AICPA's tax section Odyssey podcast, where we offer thought leadership on all things tax facing the profession. I'm April Walker, a lead manager from the Tax Section. I'm here today with Mark Gallegos from Porte Brown in Chicago. He is a second-time guest, but welcome back, Mark.

Mark Gallegos: Thanks for having me, April.

Walker: Today's topic is about document retention, and this came to my mind for two reasons. One, on a practical level, we at the AICPA just updated some resources around this, some FAQs, as well as a document template, which of course I will share in the show notes.

But second, on a more personal level, recently my family has been cleaning out my in-law’s house and it was pretty clear that their document retention policy was to retain all documents. Either they didn't have one or that was their policy to retain everything. That was fun. But I thought this doesn't seem like a super sexy topic, but it's an important topic.

Mark, I thought maybe let's talk about the importance of a firm having a document retention policy. Maybe talk about some risks associated with not having one or maybe you have one to check the box, but you're not following it. What are your thoughts on that?

Gallegos: I know with clients I always run into either they save everything forever and then they have no idea what they've actually saved in all the boxes. Then there's ones that don't save anything.

Document retention policy is so important. It's critical, especially to a CPA firm, but even beyond that to individuals, to businesses. Because you're dealing with sensitive and regulated information, and when you're looking at that, there's different areas you need to break it down to.

Many industries we work in, including the accounting profession, you're highly regulated and you need to keep documents and you need to have a defined policy that helps define what are the legal obligations for keeping these. You don't want to be fined. You want to make sure you are the trusted adviser that can provide the information, but also you don't want to be the one that's keeping things for 20 or 30 years, that is just keeping up space.

It makes you efficient as an organization because you're basically organizing your documents. You can easily access them, and you can pull them when you need to. It's a good way of keeping security on those documents. Because at the end of the day, you want to be able to secure them.

Obviously, you can secure them in paper form, we can secure them in digital form, and we'll talk about all that. But I think there's different ways, because it is sensitive information, to make sure that you're also doing that. I think one of the most important things is from my perspective, from an accounting firm perspective, is client trust.

They trust us with their information. They trust us with their documents and so we want to make sure that we maintain a systematic approach to handling their information in a sensitive way.

We have that responsibility, and our reputation is on the line to make sure that we're holding up to that. But beyond that, there's a lot of risks that can go involved in this. You're talking about sometimes just legal risks and regulatory risks, like we mentioned.

If you don't have a policy, you might retain the documents [for] too long or too short, or maybe you don't have a policy, so you destroy them after a year when really you should have kept them for a period of time that was in fact what you should have kept them for.

Also, now, someone needs them, and you don't have them.

Operationally, it's good to have it because without a retention policy, these documents can accumulate [and that] can lead to your whole organization being disorganized. Then when you need to find something, you can't find it. That I find is a very common occurrence out there. On top of that, security.

Walker: Lots of reasons to have one. This never happened to me when I was in practice, but I don't know if it has happened to you, or you've heard about it anecdotally. Again, hope it never happens to you, but if in a lawsuit, your records are subpoenaed and you have a document retention policy and you're following it, then maybe if you are asked to produce documents and they're outside of your document retention policy. You're not required to provide them. But if you do have them, then you have to provide them and maybe provide even more.

I think that's like a firm liability risk, also, like so many risks around this. I don't know if you have any thoughts on that piece.

Gallegos: That alone is why you need the policy. I have not run into that.

I've had other colleagues and other firms run into this policy problem, where they've been subpoenaed to provide, we'll call it tax documents, tax work papers and they don't have them.

The first thing that people asked for when they start getting more into a litigation situation is providing your retention policy and they realized they don't have one then. Now, whether they've kept them and destroyed them in the proper amount of time, now their reputation, potentially, they could be on the hook for other fines and penalties.

It's just unnecessary legal action that they get drawn into, when at the end of the day, if they actually had a policy, they can say, we kept it for, we'll say seven years and then we destroyed them. Here's the record of us destroying them and you can provide all that information. It helps the entire situation, which I think is very important.

Walker: I think so. We've talked about the importance of having a policy. What about the guidelines? Are there very firm and fast guidelines on how long you keep certain documents?

Gallegos: One of the things, for us, tax returns — you want to keep indefinitely. I tell my clients that all the time, but there are workpapers and bank statements and payroll documents.

Typically, seven years is the policy. But you want to make sure that you are adhering to what are the rules. And for whether it's a permanent document or whether it's just a work paper. [Determine] what kind of document it is and make sure your policy identifies what your policy is to keep them and then how are you taking steps to make sure that you're following that.

When you're looking at different guidelines. Obviously, the legal requirements are based on what kind of document. Is it a federal tax law mandate? Is it something that is more HIPAA, health care type stuff? Is it SEC regulations and finance? Is it legal? Then you want to establish those categories to identify those different types of documents so that you can put them into different buckets. I think that's very important in this process.

Walker: I mentioned that we have a template for it. It's again, just those general guidelines that you can use for your firm and share with your clients.

But as Mark said, we want to make sure that you understand that there could be different reasons — Government grants or something like