PTIN renewal: what Form W-12 line 11 asks about your security plan

Leer en español

If you renew a PTIN, line 11 of Form W-12 is the line about data security. Read its exact words before you check a box.

The IRS says PTIN applications and renewals for 2027 are now being processed. It also says anyone who prepares or assists in preparing federal tax returns for compensation must have a valid 2027 PTIN before preparing returns.

What line 11 says

Line 11 is titled "Data Security Responsibilities." This is the text:

I am aware that paid tax return preparers are required by law to create and maintain a written information security plan that provides data and system security protections for all taxpayer information.

The form says you must check Yes or No. The line asks you to confirm that you are aware of the requirement. It does not ask whether you have a plan. Nothing on the form asks you to attach or send one.

Line 11 ends with a pointer: "See IRS Publication 5708 and 4557 for more information about your responsibilities." The form text we read is the October 2026 revision; line 11 reads the same as in the October 2025 revision. It says you can file online at www.irs.gov/ptin or by mail.

Do I need a WISP to renew my PTIN?

The form does not check for a plan. The law requires one anyway, and you sign the form under penalties of perjury. The IRS says federal law requires tax and accounting professionals to create and maintain a Written Information Security Plan (WISP). Publication 5709 says the law is enforced by the Federal Trade Commission.

Where the requirement comes from

Publication 5708 explains that under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule, tax and accounting professionals are considered financial institutions, regardless of size. The Safeguards Rule lists "an accountant or other tax preparation service that is in the business of completing income tax returns" as an example of a financial institution. The rule says the information security program must be written. See our plain-words guide to the rule.

Before you check the box

1. Read Publication 5708. It is the IRS's free sample plan. Our template guide walks through it.
2. Write your plan. Publication 5708 says it must be written and accessible.
3. Plan to review it. Publication 5708 calls a WISP an evergreen document that is regularly reviewed, tested and updated.

Websites are one part of a plan. Our report on tax preparer websites shows what a passive scan found.

Sources

• IRS, PTIN requirements for tax return preparers: irs.gov/tax-professionals/ptin-requirements-for-tax-return-preparers
• IRS Form W-12 (Rev. 10-2026), line 11 and "How To File": irs.gov/pub/irs-pdf/fw12.pdf
• IRS Publication 5708 (Rev. 8-2024), "Requirements": irs.gov/pub/irs-pdf/p5708.pdf
• IRS Publication 5709 (Rev. 5-2024): irs.gov/pub/irs-pdf/p5709.pdf
• IRS news release IR-2026-92, August 18, 2026: irs.gov newsroom
• 16 CFR 314.2(h)(2)(viii) and 314.3(a): ecfr.gov, Part 314

This is general information, not legal advice.