Before You Paste Your Tax Return Into an AI Chatbot: Privacy, Privilege, and Your Preparer's Duties

It has become a common habit: an IRS letter arrives, and before calling anyone, the recipient snaps a photo and uploads it to a chatbot with the question, "What does this mean?" Others paste in a full return, a transcript, or a spreadsheet of business expenses and ask for a second opinion. The answers can be helpful. But tax documents are among the most sensitive records most people own, and where they go after you hit "send" matters more than most users realize.

This article covers what happens to tax information when it goes into an AI tool, why doing it yourself can weaken legal protections you might need later, what rules apply to your tax professional, and a short list of habits that let you get the benefits without the risk.

What You Give Up With a Consumer AI Tool

Free and consumer versions of AI chat products are governed by public terms of service and privacy policies. Those terms often allow the provider to keep what you type, review it, use it to improve its models, and share it in some circumstances, such as with service providers or in response to legal process. Business and enterprise versions are frequently different, with contracts that limit retention and prohibit training on customer data. The label on the product matters less than the terms you accepted.

A tax return can contain your Social Security number, your dependents' names and numbers, your bank routing and account numbers, your employer, your income, and your address. A transcript adds your full filing and payment history. That is close to a complete identity-theft kit, and once it sits on someone else's servers, you no longer control it.

Privilege: The Risk Most People Never Consider

Communications with your lawyer made for the purpose of getting legal advice are generally privileged. Sharing them with a third party can waive that protection. In February 2026, in United States v. Heppner, a federal district judge in Manhattan ruled that materials a criminal defendant generated by himself on a public AI platform were neither privileged nor shielded as attorney work product. The court pointed out that a chatbot is not a lawyer, that the provider's published terms warned users their conversations might be used for training and passed to others, and that the defendant had acted on his own rather than at counsel's request.

For tax matters, the stakes are similar. If you are under audit, facing a collection dispute, or worried about a past filing, an AI conversation about your situation could become something the government asks to see. Talk to your representative first, and let them decide whether and how any tool is used.

The Tax Practitioner Privilege Is Narrower Than You Think

Section 7525 of the Internal Revenue Code extends a version of attorney-client privilege to CPAs, enrolled agents, and other federally authorized tax practitioners. It is useful, but limited:

• Noncriminal matters only. It applies before the IRS and in noncriminal federal tax cases. It does not protect you in a criminal investigation.
• No protection for return preparation. Information gathered to prepare a return is generally not privileged.
• A tax shelter carve-out. Written communications promoting participation in a tax shelter are excluded, and the definition of tax shelter in this context is broad: any plan or arrangement with a significant purpose of avoiding or evading federal income tax.

If a matter has any chance of becoming criminal, involve a tax attorney early. Do not assume your conversations, with a person or a machine, are protected.

What the Law Requires of Your Tax Preparer

If you hire a professional, a separate set of rules governs what they can do with your information.

• Section 7216 consent. Tax return preparers generally cannot disclose or use your return information for purposes other than preparing your return without your written consent, unless a specific exception applies. Consent must be obtained before the disclosure, must identify the recipient and the purpose, and cannot be a condition of service. A preparer who discloses without authority faces a civil penalty of $250 per disclosure (up to $10,000 per year, with higher amounts for identity-theft-related disclosures), and knowing or reckless violations can be a misdemeanor. The IRS's Section 7216 Information Center lists the governing guidance.
• Limited vendor exceptions. The regulations allow some disclosures to software and service vendors without consent, but they are narrow. A tool that analyzes your situation and recommends a course of action may fall outside them, which is why many firms now ask clients to sign a specific consent before using certain AI tools.
• Offshore processing. For individual returns, a U.S. preparer generally cannot get your permission to send your Social Security number to an overseas preparer; the number has to be masked before the file leaves the country, with a narrow exception for certain data protection safeguards.
• Data security plans. Under the FTC Safeguards Rule, tax preparers are treated as financial institutions. They must maintain a written information security program, designate a qualified individual to oversee it, and notify the FTC of certain breaches affecting 500 or more people. IRS Publication 5708 provides a template.
• Professional standards. Circular 230 requires practitioners to exercise due diligence, be competent, and protect client information. That means verifying anything a tool produces and choosing tools whose data handling they understand.

The IRS Holds Itself to a Similar Standard

The IRS's own AI policy, IRM 10.24.1, prohibits employees from entering taxpayer information into public or unapproved AI systems and requires human review of AI output before it is used in government business. If the IRS will not paste your return into a public chatbot, that is a reasonable standard for you too.

Practical Habits for Using AI Safely

• Strip identifiers before you upload. Remove or black out your SSN, EIN, account numbers, address, and names. Often you can type the relevant facts instead of uploading the document at all.
• Ask general questions. "What does a CP2000 notice mean and what are my options?" is safer and nearly as useful as uploading your own notice.
• Check the settings. Many tools let you turn off training on your conversations or delete history. Use those settings, and know they do not undo what was already shared.
• Never rely on AI for deadlines or figures without checking. AI tools can state wrong dates, amounts, and even invent citations. Confirm anything important against the notice itself or IRS.gov.
• Beware look-alike apps. Scammers offer "IRS help" apps and websites designed to collect personal data. Use the official IRS Online Account for your own records.
• Ask your preparer about their AI policy. Which tools do they use, are they enterprise versions, where is data processed, and will they ask for your consent? A good firm will have clear answers.
• Keep sensitive matters off AI entirely. If you have a possible criminal exposure, unfiled returns, or undisclosed foreign accounts, talk to a professional first.

A Quick Example

Imagine a small business owner who receives a proposed assessment for unreported 1099-K income. She uploads the notice and three months of bank statements to a free chatbot and asks it to draft a reply. The draft cites a "safe harbor" that does not exist, and her statements now sit on a third-party server. A better approach: ask the chatbot, without uploading anything, what a proposed assessment is and what documents usually help. Then bring the notice and statements to her CPA, who can use secure tools under a signed consent and verify every figure before anything goes to the IRS.

Key Takeaways

• Consumer AI tools often keep and may use what you type. Treat anything uploaded as no longer private.
• A 2026 federal court decision held that a defendant's own AI conversations were not privileged. Avoid discussing open tax disputes in public AI tools.
• The tax practitioner privilege does not cover criminal matters, return preparation, or tax shelter promotion.
• Your preparer needs your written consent for many disclosures, must protect your data under the FTC Safeguards Rule, and must verify AI output.
• Redact identifiers, ask general questions, verify everything, and bring sensitive matters to a professional.

If you have an IRS notice or tax question and want answers from people, not a chatbot, schedule a consultation with SMB CPA Group. You can also contact us, read about our process, or review our pricing.

Disclaimer: The information presented on this website or any SMB CPA Group, PC online platform is for general information and illustrative purposes only. It should not be considered tax, legal, financial, or other professional advice. The content is not intended to provide definitive answers or solutions to specific business situations and is not a substitute for careful research or the advice of a licensed professional that knows your unique circumstances.

Readers are advised not to rely solely on SMB CPA Group materials or use them as the basis for any business, legal, tax, or accounting decision without first seeking independent subject matter expertise and counsel. All case studies shown are hypothetical and intended for demonstration purposes only; results shown are not guarantees of performance or outcomes.

Please contact an SMB CPA Group professional directly to discuss your specific questions or business situation. Our team would be happy to speak with you about a tailored consultation to your needs. We also encourage all readers to seek counsel from licensed attorneys, financial advisors, CPAs, Enrolled Agents, or other qualified professionals prior to making decisions related to their finances or enterprises.