CDTFA Audit Defense — California
CDTFA Audit Attorney
A CDTFA audit is a formal examination of your sales and use tax records by the California Department of Tax and Fee Administration. The outcome can include substantial back taxes, penalties based on statistical sampling of limited records, and personal liability for business owners and officers. Since 2013, Brotman Law has represented California businesses through CDTFA audits, sampling methodology disputes, and appeals to the Office of Tax Appeals.
Written by Sam Brotman, J.D., LL.M. (Taxation), MBA — Managing Attorney, Brotman Law · Updated June 2026
On This Page
What CDTFA Audits Are
The California Department of Tax and Fee Administration (CDTFA) is the state agency responsible for administering sales and use tax, cannabis taxes, fuel taxes, and a range of other special taxes. Most CDTFA audits are sales and use tax examinations of retail businesses, restaurants, contractors, and other sellers of taxable goods and services.
The CDTFA has authority to audit returns going back three years for standard assessments, and eight years where the CDTFA determines there was fraud, intent to evade, or failure to file required returns. In practice, most audits cover three to five years of business activity — which means a relatively small error rate applied by sampling across the full period can produce a very large assessment.
For context: a business with $2 million in annual sales that had a 5% sales tax error rate on a sampled period could face an assessment of $100,000 per year — $300,000 to $500,000 across a three-to-five-year audit period — before penalties and interest. The math on sampling is why CDTFA audits deserve serious legal attention, not just bookkeeping.
What Triggers a CDTFA Audit
Returns audit selection. The CDTFA selects returns using risk-scoring models. Returns with unusual fluctuations in taxable sales, high ratios of resale exemptions, or inconsistencies between income tax returns and sales tax returns are flagged.
Industry campaigns. The CDTFA runs targeted audit programs in specific industries: restaurants and food service, automotive dealers, cannabis retailers, contractors, and online sellers with California nexus.
Use tax on business purchases. Businesses that purchase equipment, supplies, or inventory from out-of-state vendors without paying California use tax are a common audit target. The CDTFA cross-references purchases against use tax reported on returns.
Missing or invalid resale certificates. If your business claimed resale exemptions without valid certificates on file, the CDTFA will disallow those exemptions and assess tax on the full sale price.
Tip or referral. Former employees, competitors, and customers occasionally report suspected underreporting to the CDTFA. Competitor reports are common in cash-intensive industries where underreporting creates a pricing advantage.
The CDTFA Audit Process
CDTFA audits move through four formal stages under the California Revenue and Taxation Code (R&TC) § 6452 et seq.
1. Pre-audit notification. The CDTFA sends a written notice identifying the audit period, the tax types under examination, and the records that will be required. With an attorney, this is the stage to assess the scope of the audit, identify exposure areas, and decide whether additional records preparation is needed before the audit opens.
2. Records examination and sampling design. The auditor reviews your records, proposes a sampling methodology, and selects the sample period. This is the most legally significant stage in most audits. How the sample is designed — what period is sampled, how errors are projected, and what adjustments are made — drives the final assessment more than any individual transaction.
3. Preliminary Findings Letter. After sampling is complete, the auditor issues a Preliminary Findings Letter showing the proposed assessment. You have 30 days to respond with additional documentation, challenge the methodology, or present legal arguments. This is typically where CDTFA audits are resolved or narrowed.
4. Notice of Determination. If the case is not resolved at the preliminary stage, the CDTFA issues a Notice of Determination (NOD) — the formal assessment. You have 30 days to file a petition for redetermination. Failing to file within 30 days makes the NOD final and the CDTFA can begin collection action.
Sampling Methodology — The Core Issue
Most businesses cannot produce complete records for a three-to-five-year audit period. The CDTFA’s response is to examine a shorter representative sample — typically one year or one quarter — and project the error rate from that sample across the full audit period. The projected assessment can be dramatically larger than the actual errors found in the sample.
Sampling methodology is a legal and statistical question, not just an accounting one. The issues that come up most often:
- Sample period selection. If the sampled period was atypical — a strong year, a period with a major one-time transaction, or a period during which the business’s practices changed — the projection is unreliable and challengeable.
- Error rate calculation. Individual transactions that the auditor categorized as taxable may be defensible on the merits. Each successfully disputed transaction reduces the projected error rate across the entire audit period.
- Stratified sampling. For businesses with widely varying transaction sizes, a statistically valid sample must be stratified by transaction size. An unstratified sample applied to a business with large one-off transactions overweights the error rate.
- Block sampling. Auditors sometimes use block sampling (every transaction in a specific month) rather than statistical random sampling. Block sampling is generally less reliable and more contestable than probability sampling.
An attorney who understands both the legal standards under R&TC § 6452 and the statistical requirements for valid sampling can challenge a flawed methodology and significantly reduce the projected assessment — independent of whether the underlying transactions were actually taxable.
CDTFA Audit Penalties
The CDTFA can add penalties to an assessment under the Revenue and Taxation Code:
- Late payment penalty — 10% of unpaid tax under R&TC § 6591.
- Negligence penalty — 10% additional where the CDTFA finds negligence or disregard of the rules.
- Fraud penalty — 25% of the unpaid tax where the CDTFA concludes there was an intent to evade.
- Interest — compound daily from the original due date of the return.
Personal liability. Under R&TC § 6829, officers, members, managers, or other persons responsible for collecting, reporting, and remitting California sales tax can be personally assessed for unpaid amounts. This is not limited to situations involving fraud — the responsible person standard applies to negligent failure to collect and remit as well. The corporate structure does not protect responsible persons, even after business closure.
Appealing a CDTFA Determination
A taxpayer who receives a Notice of Determination has formal appeal rights under R&TC §§ 6451–6455:
Petition for redetermination. Filed within 30 days of the NOD, this requests that the CDTFA reconsider its determination. The CDTFA conducts a legal review; in most cases you can also request a hearing with a CDTFA attorney.
Office of Tax Appeals (OTA). If the petition for redetermination is denied, you can appeal to the OTA — California’s independent tax tribunal created in 2018. OTA hearings are formal legal proceedings. You have 30 days from the CDTFA’s final action to file. OTA decisions are published and binding on the CDTFA going forward.
Superior Court. If the OTA’s decision is adverse, you can petition Superior Court for a writ of mandate under Code of Civil Procedure § 1085. This option is unusual and expensive, but available where the OTA decision raises a significant legal error.
The deadlines at each stage are hard. Missing the 30-day petition window makes the NOD final. An attorney tracks these deadlines and ensures every available review stage is preserved.
How Brotman Law Handles CDTFA Audits
Brotman Law represents California businesses in CDTFA audits from the pre-audit notice through OTA appeal. Our focus in most CDTFA cases is the sampling methodology: whether the auditor’s sample period is representative, whether the error rate is correctly calculated, and whether the projection method meets the legal and statistical requirements under R&TC § 6452.
In cases where the sampling methodology is sound but individual transactions are disputed, we build the transaction-level record — obtaining resale certificates, reconstructing records, and presenting legal arguments on exemption eligibility — to reduce the underlying error rate before the projection is applied.
We also handle the back-end: penalty abatement for reasonable cause (useful where records were unavailable due to a disaster, illness, or business disruption), payment plan negotiations with the CDTFA, and personal liability defense for officers in cases where the business cannot satisfy the full assessment.
For a detailed walkthrough of the CDTFA audit process — from pre-audit notice through appeal — see our California sales tax audit process guide.
CDTFA audit notice received?
A 15-minute call is free. We will assess what the CDTFA is looking for, what your sampling exposure looks like, and whether the preliminary findings can be challenged. If the facts support a defense, we will take it.
Frequently Asked Questions
How long does a CDTFA audit take?
Most CDTFA sales and use tax audits run twelve to thirty-six months from initial notice to final determination, depending on the complexity of the records and whether sampling methodology is disputed. Cases that go to the Office of Tax Appeals add another twelve to eighteen months to the timeline.
Can I be personally liable for my business’s CDTFA assessment?
Yes. Under California Revenue and Taxation Code § 6829, officers, managers, and other responsible persons can be personally assessed for unpaid California sales tax, including penalties and interest. The responsible person standard applies to negligence — not just fraud — and survives business closure or dissolution.
What is the statute of limitations for a CDTFA audit?
The standard statute of limitations is three years from the date a return is filed. The CDTFA can extend this to eight years where it finds fraud, intent to evade, or that required returns were not filed. For businesses that failed to register and collect sales tax altogether, the CDTFA’s assessment period is unlimited.
Can I challenge the CDTFA’s sampling methodology?
Yes. The CDTFA’s sampling methodology is a legal and statistical question challengeable on multiple grounds — including that the sample period was atypical, the sample was not properly stratified, or the error rate calculation was incorrect. Successfully challenging the methodology reduces the projected assessment across the entire audit period, which is where most of the exposure is in a CDTFA defense.
What happens if I miss the 30-day deadline to contest a CDTFA Notice of Determination?
If you do not file a petition for redetermination within 30 days of receiving the Notice of Determination, the assessment becomes final. The CDTFA can then collect by attaching bank accounts, filing a tax lien against your property, or levying accounts receivable. There is no routine administrative procedure for reopening a final NOD — the 30-day deadline is a hard cutoff.
What records does the CDTFA typically request in an audit?
The CDTFA typically requests sales journals and registers, purchase invoices, resale and exemption certificates, bank statements, general ledger, and accounts receivable and payable records. For businesses with incomplete records, the CDTFA will propose an alternative computation method — usually a markup or industry-average approach — which often produces a larger assessment than a records-based audit would.