Our colleagues over at the Privacy & Security Matters blog wrote a really good piece entitled "It's Tax Time – Don't be Phished," which guides employers on how to avoid phishing scams during this tax season. It's a must read because the targets of these scams are HR and payroll departments, and employer awareness is necessary not only to protect employees, but also because responding to one of these scam emails constitutes a reportable data breach under state laws. Employers could have significant liability for failure to provide notice to employees and/or state regulators (where required).
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.