Is CRA implementing a new authorization policy?


Authored by RSM Canada

The Canada Revenue Agency (CRA) took action to enhance security measures due to the recent security breaches. In fact, the 2021 Budget earmarked almost $52 million a year to develop measures to protect taxpayer information against data breaches. This is particularly important in light of the pandemic; because CRA staff is remote, CRA is corresponding with taxpayers by cellphone, and is relying on the use of online platforms.  

The result is the CRA’s new unofficial policy on level 3 authorizations. When speaking to the CRA agents on the phone, the agents (e.g., auditors and appeals officers) now require that representatives have a level 3 authorization, despite already having a level 1 or 2 authorization on file. This undoubtedly causes some confusion for representatives. 

Currently, the CRA’s webpage provides two levels of authorization for personal and trust tax accounts: level 1 is to obtain information and level 2 is to request limited changes and obtain information. There is no level 3 authorization available for individuals or trusts. 

For non-resident and business accounts, there are three levels of authorization: the same two levels as identified above, and level 3 that allows the representative to delegate authority as well as update and obtain information. A level 3 delegated authority may authorize another representative or delegated authority on behalf of the business. Most representatives only have level 1 or 2 as, historically, level 3 delegate authority was typically reserved for employees of the taxpayer itself (e.g., a business’ CFO). 

Generally, level 2 access was sufficient for accountants and other representatives to communicate with the CRA and submit information both over the phone and online on a client’s behalf. Recently, the CRA unofficially stated that it introduced a new COVID security rule requiring level 3 authorization before communicating with representatives over the phone. The rationale is that cellphones are not secure and only a level 3 delegate has the authority to accept the risk on the taxpayer’s behalf. However, it does not appear that the CRA has made any formal announcements with respect to this new policy to date. 

These new measures could present problems for taxpayers and professional representatives alike, for example:

  1. Only an individual can apply for level 3 authorization, meaning a firm cannot secure level 3 authorization for a client; 
  2. The CRA website does not currently provide the option for level 3 authorization for individual or trust accounts; and
  3. The CRA website currently states that level 3 authorization provides delegate authority, meaning it does not accord with the unofficial statements from CRA agents, which can cause further confusion in an already complicated tax compliance season.  

To overcome these hurdles, some CRA auditors are accepting a letter from the client authorizing the CRA to speak with its level 2 representative by cell phone, but this seems to be on an ad hoc basis and does not appear to be an official CRA policy. It remains unclear whether the CRA will make a formal announcement or update its online authorization system to facilitate these new procedures. 

We will continue to monitor the situation and provide updates as we learn more.

Let's Talk!

Call us at (519) 426-5160 (Simcoe) or (519) 842-4246 (Tillsonburg) or fill out the form below and we'll contact you to discuss your specific situation.

  • Topic Name:
  • Should be Empty:

This article was written by Sigita Bersenas, Jen Reid and originally appeared on 2021-05-17 RSM Canada, and is available online at

The information contained herein is general in nature and based on authorities that are subject to change. RSM Canada guarantees neither the accuracy nor completeness of any information and is not responsible for any errors or omissions, or for results obtained by others as a result of reliance upon such information. RSM Canada assumes no obligation to inform the reader of any changes in tax laws or other factors that could affect information contained herein. This publication does not, and is not intended to, provide legal, tax or accounting advice, and readers should consult their tax advisors concerning the application of tax laws to their particular situations. This analysis is not tax advice and is not intended or written to be used, and cannot be used, for purposes of avoiding tax penalties that may be imposed on any taxpayer.

RSM Canada Alliance provides its members with access to resources of RSM Canada Operations ULC, RSM Canada LLP and certain of their affiliates (“RSM Canada”). RSM Canada Alliance member firms are separate and independent businesses and legal entities that are responsible for their own acts and omissions, and each are separate and independent from RSM Canada. RSM Canada LLP is the Canadian member firm of RSM International, a global network of independent audit, tax and consulting firms. Members of RSM Canada Alliance have access to RSM International resources through RSM Canada but are not member firms of RSM International. Visit for more information regarding RSM Canada and RSM International. The RSM trademark is used under license by RSM Canada. RSM Canada Alliance products and services are proprietary to RSM Canada.

Good Redden Klosler a proud member of the RSM Canada Alliance, a premier affiliation of independent accounting and consulting firms across North America. RSM Canada Alliance provides our firm with access to resources of RSM, the leading provider of audit, tax and consulting services focused on the middle market. RSM Canada LLP is a licensed CPA firm and the Canadian member of RSM International, a global network of independent audit, tax and consulting firms with more than 43,000 people in over 120 countries.

Our membership in RSM Canada Alliance has elevated our capabilities in the marketplace, helping to differentiate our firm from the competition while allowing us to maintain our independence and entrepreneurial culture. We have access to a valuable peer network of like-sized firms as well as a broad range of tools, expertise, and technical resources.

For more information on how Good Redden Klosler can assist you, please call us at (519) 426-5160 (Simcoe) or (519) 842-4246 (Tillsonburg).

Share This