CRA & Cloud Computing in Canada
Yesterday I attended a presentation that included the statement that the Canada Revenue Agency does not allow charities to use cloud computing. The reference given was the CRA’s Information Circular IC78-10R5, “Books and Records Retention/Destruction”. (Also mentioned was RC4409 which has been withdrawn by CRA.) Note first that an Information Circular is not legislation. It is a statement of the CRA’s position. Here’s the link: http://www.cra-arc.gc.ca/E/pub/tp/ic78-10r5/ic78-10r5-10e.pdf
Here’s the actual section (with the important words underlined). Note: this Information Circular is not limited to charities. It applies equally to all taxpayers in Canada. The information circular mentions charities only in passing.
Location of records
- The books and records must be kept at the person’s place of business or residence in Canada or another place designated by the Minister and must, upon request, be made available to officers of the CRA for audit purposes at all IC78-10R5 2 reasonable times. Books and records kept outside Canada and accessed electronically from Canada are not books and records in Canada. Access to electronic records means that the taxpayer must provide an acceptable copy of the electronic records in an electronically readable and useable format to CRA auditors so that they can process the electronic records on CRA equipment.
Note that the CRA’s definition of “record” includes images.
- For the purpose of this circular, a record has the meaning assigned by subsection 248(1) of the Act. A “ ’record’ includes an account, an agreement, a book, a chart or table, a diagram, a form, an image, an invoice, a letter, a map, a memorandum, a plan, a return, a statement, a telegram, a voucher, and any other thing containing information, whether written or in any other form.”
This position is supported by Terence Carter, a Toronto lawyer specializing in charities. In his April newsletter http://www.carters.ca/pub/update/charity/15/apr29.pdf he states:
CRA’s response to [the cloud computing] question indicates CRA will not be eliminating the requirement for electronic records to be kept on a server located in Canada anytime soon. The response refers taxpayers to the ITA, IC05-1R1, IC78- 10R5, and RC4409 for guidance on where taxpayers should keep their records. Although CRA will allow most taxpayers to keep their records outside Canada, these taxpayers must first obtain CRA’s permission, which … imposes an administrative burden on both CRA and the taxpayer.
Let’s delve a little deeper into what the CRA really wants. In IC05-1R1, Electronic Record Keeping http://www.cra-arc.gc.ca/E/pub/tp/ic05-1r1/ic05-1r1-10e.pdf the CRA states:
- Electronically readable format means information supported by a system capable of producing an accessible and useable copy.
- Accessible copy means that the taxpayer must provide an acceptable copy of the electronic records in an electronically readable and useable format to Canada Revenue Agency (CRA) auditors to permit them to process and analyse the electronic records on CRA equipment.
- A copy is useable if the electronic records can be processed and analysed with CRA software.
- The useable copy must be in a non-proprietary, commonly used data interchange format that is compatible with CRA software.
- Electronic files retained in an encrypted or proprietary backup format must be able to be restored at a later date to an accessible and useable state to meet CRA requirements.
So, if you have a current backup of your books and records physically located in Canada, the reports from which can be produced in an electronically readable way, e.g. Excel spreadsheets, you are meeting both the letter and the spirit of the CRA requirements. Unfortunately, I haven’t found a credible source that discusses this possibility. It might have to be explored with the CRA itself.
So, taxpayers and charities using cloud computing in Canada for their books and records have two choices in order to meet the CRA policy requirements:
- They can apply to their local Taxation Office for permission to use the cloud
- They can keep a reasonably up to date, restorable, backup of their data in Canada.