If you are referring to your client preferring paper return, yes, you should have a security plan in place as you would still possess data that may be breached if the appropriate precautionary measures are not taken.

Please see this recent discussion about security plan templates: https://accountants-community.intuit.com/questions/1875169-written-data-security-plan-for-tax-prepar...