CRA My Business Account for Municipalities, Public Sector & Non-Profit Organizations

Canada Revenue Agency (CRA) now delivers most correspondence for organizations electronically through CRA My Business Account. For municipalities, public sector entities, and non‑profit organizations, this shift has important implications for governance, continuity, and audit readiness.

CRA My Business Account is the portal used to manage an organization’s CRA correspondence and accounts (such as GST/HST, payroll, and information returns). While individuals log in using their personal CRA credentials, the information belongs to the organization.

This resource is intended for municipal administrators, treasurers, boards, and management teams.

​Why CRA My Business Account Matters

CRA My Business Account is now the CRA’s primary method of issuing:

• Notices of assessment and reassessment
• Requests for information
• GST/HST and payroll correspondence
• Compliance and audit related letters

In many cases, this information is no longer mailed.

For public sector and non‑profit organizations, missed CRA correspondence can lead to:

• Audit delays
• Missed response deadlines
• Compliance or funding issues
• Governance and record‑keeping concerns

If you already have a CRA My Business account we encourage you to enable email notifications in your Profile Settings. Visit CRA My Business Account log in page to sign in and update your Communication Preferences. 

​Personal CRA My Account vs. CRA My Business Account

Although CRA My Business Account is used for organizational matters, individuals must first have their own personal CRA My Account to access your CRA My Business Account.

In simple terms:

• CRA My Account = your personal login
• CRA My Business Account = the organization’s CRA information

At least one authorized individual must have both in place.

Here is a Step-by-step guidance on setting up a personal CRA My Account: How to Create a CRA Account

​Role Based Access (Not Owner Based)

Unlike private businesses, municipalities and non‑profits do not have a single owner responsible for CRA matters.

CRA My Business Account access should be managed based on roles, such as:

• Administrator or Treasurer
• Senior finance staff
• Backup personnel for continuity
• External auditors (where appropriate)

Access should be reviewed whenever there are staff, council, or board changes.

CRA Notifications – Phishing Emails

CRA email notifications will never include any correspondence. They only notify you that something new has been posted to your portal and you must log in to access the communication.

Sample screenshot of an email from CRA My Account; names and notification type have been blurred out:

How Stark & Marsh Can Help

Stark & Marsh can assist with:

• Understanding CRA My Business Account requirements
• Reviewing current access and authorizations
• Identifying gaps that may impact audits or compliance
• Providing guidance tailored to municipalities, public sector entities, and non‑profits

If you have questions about your CRA My Business Account setup, please contact your Stark & Marsh advisor today.