Introduction – What Is Form 10301?
IRS Form 10301, titled CD Encryption Code Authorization For CP2100/972CG Notices, is an administrative authorization form governed by the Internal Revenue Service (IRS) and the U.S. Department of the Treasury. It is cataloged under IRS Catalog Number 33392H.
This form is used by commercial payers, financial institutions, universities, and payroll bureaus that file large volumes of information returns (such as Forms 1099, 1098, or W-2G). When the IRS identifies missing or incorrect Taxpayer Identification Numbers (TINs) in bulk, it sends the affected payee data on an encrypted compact disc (CD) or DVD. Form 10301 officially registers the company’s designated contact personnel and establishes a secret 10-digit Personal Identification Number (PIN) needed to obtain the decryption key to open the disc.
Purpose of the Form – Why Does Form 10301 Exist?
Under federal tax law, businesses that make reportable payments must match each payee’s legal name with their Social Security Number (SSN) or Employer Identification Number (EIN). When errors occur, the IRS issues Notice CP2100 (ordering the payer to begin backup withholding) or Notice 972CG (proposing financial penalties for incorrect information returns). For high-volume payers with 250 to over 100,000 mismatched records, printing paper lists would require thousands of pages, so the IRS delivers these lists on encrypted digital media.
To protect sensitive taxpayer data and comply with federal privacy mandates under IRC Section 6103, the IRS never sends the encryption key with the physical disc. Form 10301 solves this security dilemma by creating a secure verification system. The payer submits Form 10301 to pre-register an authorized contact person and a self-assigned 10-digit PIN. Once the encrypted CD arrives in the mail, the authorized contact calls the IRS, verifies the secret PIN, and receives the decryption code to unlock the data.
Who Needs to File This Form?
You need to complete and submit Form 10301 if your organization meets the following criteria:
- High-Volume Information Return Payers: You are a business, bank, credit union, insurance company, government agency, or payroll service provider that files large volumes of Forms 1099, 1098, or W-2G.
- Receiving Digital CP2100 or 972CG Notices: Your organization has 250 or more payee discrepancies, meaning the IRS will deliver your backup withholding list or proposed penalty notice on an encrypted CD or DVD.
- Updating Authorization Records: Your company needs to change its designated primary or secondary contact persons, update its corporate mailing address, or reset its 10-digit encryption PIN.
Who Is Exempt / Not Required to File?
Most small businesses and everyday taxpayers will never need to handle Form 10301. You are exempt or not required to submit this form if:
- Small Payers Receiving Paper Notices: Payers with fewer than 250 incorrect payee records receive their Notice CP2100A printed on paper through the mail and do not receive encrypted discs.
- Zero TIN Discrepancies: Businesses whose information returns match IRS records perfectly with no missing or mismatched names or TINs.
- Individual Taxpayers: Private individuals and regular employees (payees) never file Form 10301.
- Existing, Unchanged Authorizations: Payers that previously submitted Form 10301 and have the same active contacts and PIN on file with the IRS.
When to File Form 10301
Form 10301 is an event-driven administrative form that does not follow the standard April 15 tax filing calendar.
Crucial Processing Window: You must allow at least 5 business days from the date the IRS receives Form 10301 before your authorized contact can call to obtain an encryption code. Because the IRS typically mails annual CP2100 backup withholding notices in September and October (and penalty notices in the spring), high-volume payers should submit Form 10301 proactively during the summer to ensure their authorization is active before the discs arrive.
Where and How to File
Form 10301 is a physical paper document that must be completed using black ink, signed by a corporate official, and submitted by mail. It cannot be submitted through consumer tax software.
Mail the completed form to the dedicated IRS Information Returns Branch processing unit at the designated IRS address as per instructions for Form 10301. Critical Warning: Do not mail Form 10301 to the Tax Forms Committee address in Rancho Cordova, California. That address is strictly for submitting comments under the Paperwork Reduction Act; sending your form there will result in processing delays or lost paperwork.
Step-by-Step Instructions to Fill Form 10301
Form 10301 is a single-page document divided into eight clear blocks. Every field marked with an asterisk (*) is mandatory.
Block-by-Block Line Breakdown
| Block Number | Form Heading | Filing Directions |
|---|---|---|
| Block 1 | Type of Request | Check Original if submitting for the first time. Check Revised if updating previously submitted company contacts, addresses, or PINs. |
| Block 2 | Payer Information | Enter the full legal business name of the company receiving the CD, along with its complete physical street address, city, state, and ZIP code. |
| Block 3 | Taxpayer Identification Number | Enter the payer’s nine-digit Employer Identification Number (EIN) or Social Security Number (SSN). |
| Block 4 | Primary Company Contact | Enter the full name and direct business telephone number of the primary employee authorized to call the IRS and receive the encryption code. |
| Block 5 | Secondary Company Contact | Enter the full name and direct telephone number of an alternate authorized employee who can retrieve the code if the primary contact is unavailable. |
| Block 6 | Personal Identification Number | Provide a self-assigned 10-digit alphanumeric PIN chosen by your company (e.g., combining letters and numbers). Keep this confidential. |
| Block 7 | Affidavit Acknowledgment | Check the mandatory box certifying that you have read the affidavit in the instructions and possess legal authority to execute the document. |
| Block 8 | Official Signature | Must be signed, titled, and dated by a corporate officer, partner, owner, or fiduciary under penalties of perjury. |
Required Documents and Information Needed Before Filling
Before completing Form 10301, assemble the following corporate and contact details:
- Legal Company Records: The exact corporate legal name and 9-digit EIN matching IRS master files.
- Contact Details: Full legal names and direct telephone numbers for both the primary and secondary authorized employees.
- 10-Digit Alphanumeric PIN: A unique 10-character code created by your organization that both authorized contacts will memorize or securely store.
- Form 2848 (Power of Attorney): Required if an outside CPA, tax attorney, or third-party payroll bureau official signs Block 8 on behalf of the company.
Common Mistakes to Avoid
Errors on Form 10301 can lock your organization out of its encrypted data files. Watch out for these frequent mistakes:
- Omitting Contacts on a Revised Form: Filing a revised form to add a new contact without re-listing the existing contact. Submitting a new Form 10301 completely overwrites and revokes all prior authorizations. You must list both the primary and secondary contacts on every revision.
- Unauthorized Signatures in Block 8: Having a payroll clerk, accounts payable specialist, or bookkeeper sign the form. Block 8 must be signed by an owner, corporate officer (President, Vice President, Treasurer), general partner, or authorized fiduciary. Staff signatures without an attached Form 2848 will be rejected.
- Calling the IRS Too Early: Phoning the IRS before allowing 5 business days for processing. The IRS Technical Services Operation (TSO) call center cannot view your PIN until the form is fully entered into the system.
- Forgetting the Self-Assigned PIN: Having an authorized contact call the IRS without knowing the 10-digit PIN from Block 6. IRS agents are legally forbidden from releasing the decryption key if the caller cannot verify the exact PIN.
- Calling from an Unauthorized Name: Having an unlisted coworker call the IRS for the code. The IRS will strictly refuse to speak to anyone whose name does not appear in Block 4 or Block 5.
Penalties for Non-Filing or Errors
While Form 10301 carries no direct late-filing fine, failing to submit it creates catastrophic downstream tax penalties for your business:
- Inability to Access Mismatched Data: Without Form 10301, your company cannot decrypt the CD, leaving you blind to which payees have incorrect or missing TINs.
- Mandatory Backup Withholding Liability (IRC Section 3406): If you receive Notice CP2100 and fail to issue statutory “B-Notices” to payees and start 24 percent backup withholding on future payments, the payer becomes personally liable for paying that 24 percent tax out of corporate funds.
- Information Return Penalties (IRC Section 6721): If you cannot open Notice 972CG to review and contest proposed penalties within 45 days, the IRS will finalize the proposed fines, which can reach hundreds of thousands of dollars for large filers.
Related Forms and Schedules
Form 10301 operates directly alongside the federal information return reporting and backup withholding framework:
- Notice CP2100 / CP2100A: Notice of Backup Withholding List (the IRS notice delivered on encrypted CD).
- Notice 972CG: Notice of Proposed Penalty for Information Returns.
- Form W-9: Request for Taxpayer Identification Number and Certification (sent to payees upon receiving a B-Notice).
- Form 945: Annual Return of Withheld Federal Income Tax (used to report and remit 24 percent backup withholding).
- Form 2848: Power of Attorney and Declaration of Representative.
- Publication 1281: Backup Withholding for Missing and Incorrect Name/TIN(s).
Frequently Asked Questions
Why did the IRS send us a CD instead of a letter?
When a payer has 250 or more information return discrepancies (such as mismatched payee names or TINs), federal regulations direct the IRS to deliver the data electronically on an encrypted CD or DVD rather than mailing hundreds of pages of paper.
Why isn’t the encryption key included in the box with the CD?
For data security. Under IRC Section 6103, taxpayer identification numbers and financial records are strictly protected. Shipping the encryption key with the physical disc would expose your payees to identity theft if the package were lost or intercepted.
What phone number does our authorized contact call to get the code?
Once 5 business days have passed since the IRS received your Form 10301, your primary or secondary contact should call the IRS Technical Services Operation (TSO) at 1-866-455-7438 (or 304-263-8700 for international callers) Monday through Friday.
What must the caller have ready before dialing the IRS?
The caller must have the company’s full legal name, EIN, the caller’s own name (matching Block 4 or 5), and the exact 10-digit alphanumeric PIN from Block 6.
How long is a Form 10301 authorization valid?
Form 10301 authorizations remain in effect indefinitely until your company submits a revised Form 10301 updating its contact personnel, address, or PIN.
What file format is on the CD once decrypted?
Once you enter the encryption key provided by the IRS, the executable program on the disc extracts your data into standard text or ASCII format, which can be imported into your accounting software, database, or spreadsheet program.
Conclusion – Key Takeaways Summarized
IRS Form 10301 is the vital security authorization that enables high-volume payers to decrypt digital Notice CP2100 and Notice 972CG files. By establishing authorized contacts and a confidential 10-digit PIN, it ensures that sensitive payee records are accessed safely and legally.
To keep your organization compliant, submit Form 10301 well before fall notice cycles, ensure a corporate officer signs Block 8, memorize your 10-digit PIN, allow at least 5 business days for processing, and have only your authorized contacts call the IRS to retrieve the decryption code.
