My clients email me all the time with paperwork that has their social on it etc etc. It is their choice to put their data at risk.
My feeling and policy has been to provide a site for them to download and I will not email. In a pinch I'll password a pdf and email if I have to - rare.
I got a nasty push back from a state sales tax auditor about it. They can't use the link etc etc. I must email them the documents etc etc. Their is no such guidance or prohibition on email w2s etc etc. Bit of an Ahole. And yes a sales tax audit in nevada wants payroll info to cross reference state unemployment. That said
I seem to recall the IRS saying we should never email sensitive data - but I can't find that. Does anyone know of that kind of doc?
What is your policy?