ChatGPT for Accountants: What the IRS's AI Guidance and Section 7216 Mean for Your CPA Firm This Tax Season

Disclosure: Sayfe.ai is an OpenAI SMB Channel Partner. OpenAI may pay Sayfe.ai a referral commission for qualifying ChatGPT Business signups. The promotion described here is set by OpenAI; it is not a Sayfe.ai discount, and it does not change what Sayfe.ai earns. This article is general information, not tax, legal or ethics advice. Talk to your own counsel about Section 7216 consents.

Short answer: yes, accountants can use ChatGPT, but how you use it matters a lot. The IRS Office of Professional Responsibility's June 24, 2026 guidance (Issue Number 2026-19) applies Circular 230 to AI. Its rule on client data is short: "Practitioners must strictly handle all client data using only secure, enterprise-approved AI." It also says you cannot rely on AI alone. A personal ChatGPT account fails that test. A firm-managed ChatGPT Business workspace, where OpenAI says it does not train on your data by default, is the kind of tool the guidance points you toward. It still does not settle the Section 7216 consent question for you.

That question is getting attention now because the 2027 filing season is less than three months away. Rightworks published a detailed Section 7216 explainer on November 3, 2026, and the IRS refreshed its "Protect your clients; protect yourself" page for tax pros on October 27. Below: what the IRS actually said, where the 7216 line sits, a checklist for a two- to five-person firm, and what ChatGPT Business costs a practice that size.

What the IRS Actually Said About AI in 2026

Issue Number 2026-19, "Introductory Guidelines for Responsible AI Use in Federal Tax Practice," does not create new rules. It maps existing Circular 230 sections onto AI use. The parts that matter most for a small firm:

• Diligence (§ 10.22): "Practitioners cannot rely solely on AI; human scrutiny and editing are essential to ensure correctness and compliance with IRS expectations."
• Fees (§ 10.27): billing for "manual labor or time that was not actually spent or double billing for AI-assisted tasks may violate § 10.27, depending on the facts."
• Competence (§ 10.35): "Lack of technological competence could lead to improper advice or flawed filings."
• Firm procedures (§ 10.36): "Firms must deploy internal policies and procedures for compliance with Circular 230 in the AI space."
• Written advice (§ 10.37): "Blind reliance on what AI yields, especially when the underlying logic or sources are unclear, may constitute unreasonable reliance."
• Taxpayer information (§ 10.51(a)(15), IRC 6713 and 7216): the document cites the civil and criminal preparer penalties, tells practitioners to "Never upload sensitive data to unsecured sites," and warns that "Willful mishandling of taxpayer information through AI may lead to disciplinary actions under Circular 230."

Note what the document leaves out. It never uses the word "consent." Some commentary goes further than the IRS did. Thomson Reuters' July 8 explainer says that where 7216-protected information is involved, "specific signed client consent is generally required before sharing data with any AI tool." That is Thomson Reuters' reading, not language from the OPR document. Rightworks takes the more cautious view that the IRS guidance "didn't settle the consent question."

Section 7216: Where the Line Actually Sits

Section 7216 makes it a crime for a return preparer to knowingly or recklessly disclose or use tax return information without authorization. The regulations allow some disclosures without consent, and they require consent for others. The hard part with AI, as Rightworks puts it, is that "No exception in the regulations names generative AI tools." Its analysis, from a security lead at a firm that hosts accounting software:

• "Entering client tax data into a consumer AI tool that can retain or reuse it is likely an unauthorized disclosure."
• "A general confidentiality clause isn't a valid consent." Rightworks says 7216 consents must be separate documents for disclosure and for use, and that Form 1040 consents must follow Revenue Procedure 2013-14.
• Any disclosure to a preparer, employee or contractor outside the US needs the client's signed consent first.

Until the IRS or your counsel says otherwise, here is a defensible way for a small firm to operate:

1. Most AI work needs no tax return information at all. Engagement letters, a plain-English explanation of a CP2000 notice type, an Excel formula, a staff training outline, a newsletter on the new standard-deduction figures: none of these need a client's name, SSN or numbers.
2. When a task needs client facts, strip identifiers first. "Married couple, two W-2s, a Schedule C with $40k net, moved states mid-year" is enough to draft a planning memo outline. Names, SSNs, EINs, addresses and account numbers stay out.
3. If you want to put identifiable return information into an AI tool, get counsel's view and a 7216-compliant consent first. Use a firm-controlled business workspace only, never a personal account.

What ChatGPT Business Does, and Doesn't, Give a CPA Firm

Everything below comes from OpenAI's business data page, the plan comparison on chatgpt.com/pricing, and OpenAI's help article "What is ChatGPT Business?", all read November 4, 2026.

The training default is the main reason a firm workspace beats personal accounts. OpenAI's wording is "We don't train our models on your organization's data by default," and ChatGPT Business is listed among the products it covers. The admin console matters almost as much for a tax practice. When a seasonal preparer leaves in April, you remove their seat, and the client work stays with the firm instead of in someone's personal chat history.

Be honest about the gaps too. Business has no zero-retention option, no data residency and no IP allowlisting. If a client's contract or your WISP needs any of those, Business is not enough for that work. For the general security picture, see our ChatGPT data privacy and security guide.

A Tax-Season AI Checklist for a 2–5 Person Firm

This is what we walk accounting firms through during onboarding. Most of it fits into an existing WISP review, which the IRS says FTC regulations already require you to have. The IRS points tax pros to Publication 4557, Safeguarding Taxpayer Data, and Publication 5709 on writing a Written Information Security Plan.

1. Close the personal-account gap before January. The real risk is a preparer at 10 p.m. in March pasting a client's K-1 into a personal Plus account. Put everyone in one firm workspace and say in writing that client work goes nowhere else.
2. Add AI to your WISP. Name the approved tool, who has access, what data may go in, and who reviews output. Keep a dated PDF of OpenAI's business data page in the file. That is your record of due diligence on "enterprise-approved AI."
3. Write a one-page AI policy. OPR § 10.36 says firms "must deploy internal policies and procedures." One page is enough: approved uses, banned inputs (SSNs, EINs, bank details, full returns), the review rule, and who answers questions.
4. Make "no identifiers" the default. Train staff to describe the fact pattern, not the client. It costs nothing on most tasks.
5. Settle 7216 consent with counsel. If you ever want identifiable return information in an AI tool, use a separate, compliant consent, not a line in the engagement letter.
6. Verify every authority. ChatGPT drafts and explains well. It is not a tax research database. Check every code section, regulation and ruling it mentions against the primary source before it goes in a memo or a return position.
7. Bill for real time. OPR § 10.27 flags billing for time not spent. If AI cuts a two-hour memo to forty minutes, bill forty minutes, or move to fixed fees.
8. Turn off seasonal staff on day one of their exit. Remove the seat in the admin console when you close their software access.

Where accountants actually get value

Without touching return data, small firms use ChatGPT Business for client emails that explain a notice or a missing document; engagement letter and organizer cover-letter drafts; Excel formulas and cleanup of exported trial balances; month-end close commentary from figures the bookkeeper already prepared; first-draft outlines of planning memos, which a CPA then checks; and staff training on new-season changes. For more workflows across accounting and other professional firms, see ChatGPT for professional services. For spreadsheet work, see ChatGPT in Excel and Google Sheets.

What ChatGPT Business Costs a Small Accounting Practice

OpenAI's help article lists ChatGPT Business at $25 per user per month billed monthly, or $20 billed annually, in most countries, with a minimum of two standard seats. That suits a solo CPA with one admin or bookkeeper. Since November 2, 2026, OpenAI's partner promotion takes 20% off up to five ChatGPT Business Standard seats for 48 months. It is applied only through an OpenAI SMB Channel Partner's referral link, such as Sayfe.ai's, and you cannot get it buying direct at chatgpt.com. OpenAI's examples use monthly Standard seats:

Two notes for tax practices. First, the promotion math above is for monthly Standard seats, which is what OpenAI's examples cover. If you are weighing annual billing, ask us to confirm the figure at checkout before you commit, because we will not quote numbers OpenAI has not published. Second, if you add a seasonal preparer for January to April, plan the seat count with us first. Sayfe.ai adds no markup. Full details are in our guide to the 20% partner promotion. If you are still choosing between plans, our ChatGPT Business vs. Plus comparison explains why the training default and admin control matter more for a firm than for an individual.

Lawyers face a similar question under their bar rules. Our post on whether ChatGPT is confidential for lawyers covers that side, and many CPA firms share clients with law firms. Our professional services page and finance page show how we set up workspaces for accounting and finance teams.

Frequently Asked Questions

About Sayfe.ai: Sayfe.ai is an OpenAI SMB Channel Partner. We help small and medium-sized businesses, including accounting and bookkeeping firms, implement and get value from ChatGPT Business. Sources for this article were read on November 4, 2026.