LF logo
by learnformula
search
Log in
search
Courses/Information Technology/Cybersecurity

Who else is reading your client's tax return? Email Security Guide for Canadian CPAs 2026

Why standard email platforms are a master key for hackers and how to secure your practice's financial identity.

Created byAccounting Education Group
BeginnerUpdated Jun 22, 2026
Who else is reading your client's tax return? Email Security Guide for Canadian CPAs 2026

What You'll Learn

check_circleAnalyze the security risks of using standard email platforms for sensitive client financial data.
check_circleEvaluate the legal implications of the US Cloud Act on Canadian CPA practices.
check_circleCompare standard email encryption with zero-knowledge architecture.
check_circleApply a decision framework to determine the appropriate email infrastructure for a professional practice.
check_circleDocument technical safeguards to meet regulatory requirements like PIPEDA and Law 25.

About This Course

Most data breaches don't start with sophisticated cyberattacks. They start with a single email, clicked by one person, on an otherwise ordinary Tuesday. For a CPA practice, that one click sits in front of an inbox containing T1 returns, Social Insurance Numbers, RRSP histories, family business financials, and complete financial identities — protected by infrastructure that was never designed to keep them private. This course examines the email security gap most Canadian CPAs don't know they have, explaining what "encrypted" actually means on Gmail and Outlook, why both platforms leave client data legally accessible to US authorities under the CLOUD Act, and what the documented pattern looks like when things go wrong.

It also presents the solution: end-to-end encrypted email built on zero-knowledge architecture, available at entry-level pricing identical to Gmail, with setup that takes approximately one hour and leaves the email address, Outlook, and existing workflows unchanged. The course covers the full platform comparison — Google Workspace, Microsoft 365, and Proton Mail — across provider access, data jurisdiction, and cost, and provides a step-by-step decision framework tied to PIPEDA, Law 25, and the CPA Code of Professional Conduct. Every question that matters gets a specific answer, with the numbers, the comparison, and a clear process to act on it.

Learning Objectives

By the end of this course, participants will be able to:

  1. Explain why standard encryption on Gmail and Outlook does not provide client-grade confidentiality, and describe what it means for a provider to hold the master key.
  2. Describe the legal framework of the US CLOUD Act and its implications for Canadian CPA practices using American-owned email platforms.
  3. Identify the specific threat landscape facing CPA practices, including why accounting inboxes are deliberate targets and how AI has changed the sophistication of phishing attacks.
  4. Distinguish between standard encryption and end-to-end encryption using zero-knowledge architecture, and explain how the difference affects a practice's exposure in a breach, a legal demand, or a lost device scenario.
  5. Compare Google Workspace, Microsoft 365, and Proton Mail across provider access, data jurisdiction, and cost, and identify which platform provides a complete answer to PIPEDA, Law 25, and CPA Code obligations.
  6. Apply a practical decision framework to determine the right email platform for their practice, including when Microsoft is the defensible choice and what documentation PIPEDA requires.
  7. Outline the steps to migrate a CPA practice to Proton Mail, including what changes and what stays the same.

Ready to make the switch? Start your free 14-day trial here: https://now.getproton.me/hrfjs8infz4q-o3hzta

Your Instructor

Accounting Education  Group
Accounting Education Group

Online Learning for Modern Accountants

menu_book3 courses

Accounting Education Group provides online professional development and continuing education courses for accounting, bookkeeping, tax, and finance professionals. Our training is designed to support ongoing learning through practical, relevant, and accessible educational content that helps professionals maintain and expand their knowledge in an evolving business environment.

Credit Information

Do these courses count toward my professional development requirements?

This portal is provided as a training and development resource for City of Markham employees. Every course is delivered by a qualified subject matter expert or learning organization, is quantifiable in hours, and is verifiable — you receive a documented certificate of completion for every course you finish, stored on LearnFormula indefinitely.

If you hold a professional designation (for example in engineering, accounting, human resources, or law), courses may be counted as professionally relevant, verifiable learning activities toward your continuing professional development. Individual practitioners are responsible for confirming that an activity meets the requirements of their professional body. For questions about the City of Markham's training and development policies, please speak with your people leader or Human Resources.

What Students Are Saying

0.0
Student's Choice
0 reviews

Frequently Asked Questions

We are a registered provider with 327+ associations and regulatory bodies worldwide. We operate across 29 global markets including Canada, the US, Australia, and the UK. Every course page clearly displays its specific accreditations. Upon completion, you receive a professional certificate that can be validated online. Our certificates include all necessary accreditation details, credit hours, and completion dates, and are formatted specifically to meet the submission requirements of most global regulatory bodies.