When the Association of Chartered Certified Accountants and its affiliated entities (together 'ACCA', 'us' or 'we') collects your information, we are required by law to be fair in notifying individuals on how their information will be managed and to inform them of their rights. But more than that, we want to be transparent, open and ethical in our practices.
This data protection notice provides information on how we use personal data relating to our prospective and existing customers, our partners and other individuals we do business with (also referred to in this notice as 'you'), including:
A list of ACCA affiliated entities relevant to this notice and their activities is set out in the appendix to this notice.
We have a separate Privacy Notice for our staff, employees and those wishing to become our employees, which can be accessed at the time of applying to ACCA.
We try and give you all the information you need at the point of collection, in tailored privacy notices specific to the product or service you want to take up.
However, it is sometimes impossible to give you all the information in a small space, or to tell you everything in as much detail as you may want. In that case we redirect you to this longer notice, which outlines a more general approach to privacy (but will not hold specifics for the product or service), which you may read at your leisure.
We try to use plain language throughout the next sections, but there is a lot of detail to communicate, which is however important for you to understand.
If you want a more principle based approach to our general intention surrounding privacy, you should read our privacy promise and you can always navigate directly to the part or question of your interest directly.
We will only process personal data where we have a lawful basis to do so.
The basis for processing your personal data will vary depending on the activity we collected it for. In some occurrences, we may have more than one lawful basis for processing.
The information below summarises the basis on which we process personal information.
A summary of the legal basis used by ACCA are:
Administration of studentship and membership records
We will collect and hold personal data relating to members, affiliates and registered students in order to administer membership or studentship with ACCA and comply with our regulatory obligations. We will use this information to provide and manage your access to our student, affiliate, and member portals (myACCA).
In certain cases, it is also voluntary for members, affiliates and registered students to provide us with details of ethnic origin, in order for us to review equality or opportunity of treatment.
Training and examinations
We will use your information to administer courses and exams and to monitor the pass rates and performance of learning providers, as well as ACCA students. We may use sensitive information to determine your eligibility for special accommodations in order to provide you with assistance as part of the examinations and to comply with various equality and disability legislations. Please note that some examinations may be taken electronically and therefore may require the collection of additional information for the purpose of electronic processing.
ACCA works with third-party service providers to deliver online exam delivery solutions which feature remote invigilation whilst ensuring the security and integrity of our exams. As part of this exam delivery method, the capture of audio, video and biometric information may be necessary to allow third-party service providers to administer the exams, verify student identity, and remote invigilators to monitor students during the exam session.
This information will be used solely for the purpose of exam delivery and any subsequent ACCA disciplinary processes relevant to the exam. More details with regards to the data captured during exams featuring remote invigilation will be presented to students in the supporting pre-exam documentation.
Practice tests
ACCA self-study students and students studying with our Approved Learning Partners (ALPs) and tutors can undertake practice test papers, using our online resources. Practice test results will be retained by our service provider. These practice test results can be accessed by students, and our ALPs and tutors in order to assist their studies. We may use information from these practice test results to identify areas of improvement within our syllabus and exams. Practice exam results will not be shared with any other third parties.
ACCA Exchange
This is a service offered to employers and learning providers. It enables them to upload details of the ACCA students, affiliates and members whom they employ and/or are training and monitor examination status exam results, PER and CPD. ACCA requires such employers and learning providers to obtain your consent before including your details on this service.
ACCA Learning Community
We will use your personal data to validate your registration to ACCA’s learning community services.
Continuing Professional Development (CPD) and other courses
ACCA offers CPD training courses and other training events, online or offline, for both members and non-members and we will need your information, in order to administer such courses. We will use your information to establish and validate your work experience as part of your progression to membership.
ACCA Connect
We will use your information to respond to enquiries and assist you with your request. Your communications with ACCA, including online, by email, text message (SMS), via ACCA's customer contact centre (or otherwise) may be recorded and retained for training and record-keeping purposes. Records may be used to monitor the quality of the assistance given and to verify the matters discussed.
If you post or interact with us via social media, we may use your information, in order to contact you in relation to the query, we will not use this for the purpose of further marketing or communications, unless you give us your consent to do so. We may share information with our suppliers in order to assist you.
Communications (including marketing)
We use your information for marketing purposes and to send you relevant communications about our qualifications, our products and services and any other relevant events. We may use your contact details to send you registration or information packs, learning support and recruitment materials, surveys, questionnaires, invitations regarding ACCA-based consultations, details of ACCA courses and events or to notify you of any updates and changes to ACCA's products and services.
You will have the right to withdraw your consent for these at all times, and we will make this process as easy as possible.
We also use your information for custom audience social media campaigns, such as information about student exam dates, member subscription deadlines and other key events. This allows us to present you with the most relevant information to yourself across all our channels.
ACCA uses email management tools to manage our email communications and newsletters. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter and campaigns to ensure they remain relevant to you.
ACCA may also carry out mailings on behalf of third parties (without disclosing your details to such third parties), subject to obtaining your consent. Consent may be requested on your ACCA registration form or separately by ACCA. Please let us know if you do not wish to receive (or wish to change the way in which you receive) any of the above materials (see How do I get a copy of my data or update my preferences? below).
We will not pass your information on to other marketing providers and we will not sell your information to any third party.
Publications
We will use your information in order to manage subscriptions to ACCA's publications, including Accounting & Business, Accounting Link, Finance Matters, Student Accountant, and Teach Accounting magazines. Please contact ACCA if you wish to change the format in which you receive such publications, e.g. electronically or in hard copy (see How do I get a copy of my data or update my preferences? below).
We may also use information, which you explicitly provide to us when participating in ACCA campaign programmes, within internal and external publications to promote ACCA in the public and for advertisement purposes. We will always inform you when participating in public campaigns and will seek your explicit agreement prior to using your information. Examples of these are ambassador and leadership campaign programmes or interviews undertaken during public events.
Professional conduct
We will use your information for the purpose of enquiries, investigations and complaints relating to members, affiliates and registered students (or prospective and former students) and may disclose your personal data to third parties in order to investigate complaints and disciplinary matters. Please be aware that disciplinary hearings and outcomes may be made public.
Anti-Money Laundering and Sanction Checks
Where necessary we will use your information for the purpose of performing Anti-Money Laundering and Sanction checks on nationals of sanctioned countries (where applicable)This is required to satisfy the Sanctions and Anti-Money Laundering Act 2018 UK, and we may disclose limited personal data to a third party for the purpose of performing these checks on ACCA's behalf.
Regulation of firms
We will use personal information of nominated individual representatives of firms and other organisations as part of our regulatory activities, including monitoring purposes.
Partner relationship management
We will use personal information of nominated individual representatives of firms and other organisations as part of our partner relationship management activities, including accreditation and approved employers and learning partner’s applications.
Benevolent Fund
Certain additional information may be collected from members and dependants, who are beneficiaries of the ACCA Benevolent Fund. More information on use and disclosure of your data will be provided to you if you apply for the Fund.
Simpson Scholarship Fund
Certain additional information may be collected from existing students, who are applying to the Simpson Scholarship Fund. When you apply we will use this information to assess your eligibility for assistance with exam and student subscription fees. More information on use and disclosure of your data will be provided to you if you apply for the scholarship Fund.
We process information relevant to the above reasons and/or purposes. This information may include:
Details may include name, contact details, membership ID numbers, nationality, date of birth, dates of affiliation, membership or fellowship, and details of exam sessions, including course results, payments, queries and complaints.
We also process sensitive classes of information that may include:
Details may include medical certificates, proof of income and details of supporting mitigating circumstances.
In addition, in the case of exams which feature remote invigilation, ACCA and/or our third-party service providers may also collect additional information to support the delivery of exams using this method, which may include:
These third-party service providers may share with ACCA the information collected during remotely invigilated exams in the event of suspected misconduct, which would then be used as part of any subsequent disciplinary process undertaken by ACCA.
IP addresses
If you visit our website, we collect information about the Internet Protocol (IP) addresses of your device used to access the site which helps us monitor the level of activity and the service we provide. For more information, please see our website cookies notice.
We will collect data directly from you (for example from registration forms, change of details forms, at fairs and events and via our website) and will create some data internally (e.g. when we assign you an ACCA ID or determine examination results).
Where we collect information, whether that be via websites, telephone, or manual forms we will provide at the point of collection a more tailored and specific privacy notice pointing out the relevant information for that product or service and justifying why the collection is necessary.
We may also collect some data from external sources. For example:
ACCA's main information systems are located within the United Kingdom (UK) and the European Economic Area (EEA) and accessed by ACCA's customer services teams, which may be located in regional hub centres.
We process information within the UK & EEA, but may also transfer data outside of UK & EEA to our suppliers as part of our operations and service delivery. Other teams within ACCA may need to access, use and store your data in certain circumstances for the purposes listed above, e.g. to communicate with you in relation to training or examinations or to investigate incidents or complaints.
If you are an overseas member or student, your information may be accessed by ACCA's national office in your country and records may be maintained locally (subject to local legislation).
Some of our partners or service providers, or technology vendors may pass information outside of the UK & EEA into jurisdictions where privacy laws, obligations and rights may vary. For such transfers, we will always ensure that appropriate safeguards and measures are put in place to protect your privacy and we will also point this out to you in specific privacy notices for that product or service, if applicable.
Please note that it is your responsibility to inform us of any change to your contact details during your studentship or membership with ACCA and to keep us informed of which courses you have attended to satisfy ongoing CPD requirements. We endeavour to provide self-service where possible, so you can review and update your own information at your leisure via myACCA portal.
If you don’t have a myACCA portal account you can always contact us via our contact centre to update your information.
Service providers
ACCA uses a number of third-party service providers in order to carry out the activities described above, for example, to send you mailings or operate or administer exams, including exam solutions delivered with remote invigilation. ACCA requires such service providers to use your personal data only for the purpose of the relevant service.
Joint scheme partners & other professional bodies
In some countries, ACCA operates joint qualification schemes with national professional accountancy bodies. Under these partnerships, students register with both ACCA and the national partner and are thereby able to satisfy the exam criteria for membership of both simultaneously. ACCA and the joint scheme professional bodies need to share information with each other to operate the scheme. This information will include, but is not limited to, information on exam results, subscription payments and contact details. In certain circumstances, ACCA may also rely on legitimate interest as the legal basis when introducing a new joint scheme.
Event sponsors
ACCA may organise events, such as webinars, CPD sessions, conferences and career fairs which may be sponsored by other organisations or partners, and in order to administrate these events we may share your personal information with these sponsors.
Oxford Brookes partnership*
When becoming an ACCA student, you are automatically registered for the 'Oxford Brookes' BSc degree as a benefit to your studies. We therefore share information with Oxford Brookes University. For further information, visit our Oxford Brookes BSc in Applied Accounting programme section.
For more details on how Oxford Brookes use your personal data, please refer to the Oxford Brookes privacy policy.
*The BSc programme is closing in 2026. Find out more.
ACCA Exchange partners
Certain information, such as your name and examination results, will be shared with employers and learning providers who receive this service, subject to obtaining your consent.
Learning provider results service
Some learning providers subscribe to an ACCA 'results service' under which they may access examination results of the students they have trained in order to monitor their pass rate performance. Your learning provider is required to inform you separately if they use your data in this way. Other learning providers may be provided with your student results, where you have given them your consent to do so.
Continuing Professional Development (CPD) accredited employers
ACCA may liaise with employers who are accredited for CPD purposes to verify your employment with them and/or to validate their accreditation as a CPD provider.
Approved Employers
If you are employed by an organisation, which is a member of ACCA's approved employer scheme, ACCA may liaise with your employer and provide relevant details, in order to validate your experience records or give you the opportunity to receive additional member benefits (e.g. training courses). Employers may be provided with your student results, where you have given them your consent to do so.
General public
ACCA is required to publish customer information in its members' directory and a register relating to accountancy accreditations. We may also include details of our affiliates and members (including names and the country that they are located in) within lists to be published within appropriate publications, such as Accountancy Age and the Financial Times in the UK, and similar overseas financial and accountancy publications. In addition, disciplinary hearings and outcomes may be made public.
Verification of details and employment assistance
If you are a student, affiliate or a member, subject to obtaining your consent, we may provide relevant details to recruitment agencies, employers and educational or professional bodies (e.g. other accountancy bodies) for the purposes of assisting you to find appropriate employment once qualified. We will also provide information relating to verification of membership, training and qualification details.
Professional advisers, regulatory and legal authorities
ACCA may disclose your personal data to its professional advisers, legal authorities, other professional bodies, other regulators or other third parties, in order to investigate complaints and disciplinary matters, to exercise or defend its legal rights or otherwise, where required by law.
We may sometimes process your personal data when using AI tools, however we adhere to the highest standards of confidentiality and have internal policies, processes and training to ensure compliance. We have measures in place to mitigate the use of your data in the AI tools in any way that impacts your fundamental privacy rights. ACCA ensures all relevant technical and organisational safeguards are applied to any processing that will involve the use of AI provided by any third parties.
We will retain your details for as long as they are needed for the relevant purposes listed in the section Why does ACCA hold information on me? above.
We may also retain certain records for other legitimate reasons (including after your relationship with ACCA has ended), for example to resolve any potential disputes, cross-check against future membership applications and to comply with other reporting and retention obligations.
For more details on how long we keep your data for, you can review our data retention schedule:
| Retention period (minimum) | Retention period exception |
|
| For students, affiliates and members (active and regulated) | ||
| Case resulting in a regulatory or disciplinary finding: * summary of closed case | 7 years after death or 100 years after birth | |
| Case resulting in a regulatory or disciplinary finding: * any other documents: Committee notes, hearing transcripts etc. | Closure of case + 7 years | Immediate deletion if related to Rehabilitation Act 1974 Order |
| Investigations but no sanctions including Rest on Files (RoF) and closed at assessment stage | Closure of case + 5 years | |
| Advice only, no investigation | Decision + 1 year | |
| Practicing activities: monitoring | 7 years after death or 100 years after birth | No deletion if firm or any of the principals monitored within it at any time is still active. In line with case timeframes if documentation (e.g. monitoring reports) relate to a case |
| Granting a certificate or authorisation to practice | 7 years after death or 100 years after birth | |
| General student records (e.g. transcripts & exam etc.) | 7 years after death or 100 years after birth | |
| General affiliate records (e.g. Professional Experience Records) | 7 years after death or 100 years after birth | |
| General member records except certificates (e.g. CPD records etc.) | 7 years after death or 100 years after birth | |
| Former students, affiliates and members (previously regulated) Any termination of relationship except death and sanction, i.e. Resignation | ||
| All records | 7 years after death or 100 years after birth | |
| Other individuals (non-regulated) | ||
| Individuals who ACCA has a service contract with such as suppliers, markers, examiners, content providers, independent assessors etc. | End of contract + 7 years | |
| All records belonging to an individual who has shown interest about becoming a prospective student | Registration of interest date or first date + 2 years | If there is contact made by either party, account will be held for 7 years from last contact date – see Statute of limitation Act |
| All records belonging to an individual who started an application to become a student but has not fully completed or submitted it. | 7 years from last contact date – see Statute of limitation Act | |
| All records belonging to an individual who applied to become a student but has been rejected | Date of rejection + 7 years | |
| All records belonging to an individual who applied to become a student but their application for membership is on-hold | Date of the on-hold + 7 years | |
ACCA has implemented technical, physical and organisational security measures and safeguards to protect the confidentiality, integrity and availability of personal data against unauthorised or unlawful processing of personal data, accidental loss, destruction or damage, accidental, unlawful or unauthorized access, copying, damage, destruction, disclosure, distribution, manipulation, modification, processing, use, reuse, interception, or transmission.
This includes physical and electronic security measures, as well as other organisational measures such as appropriate training, access control, the use of, firewalls, intrusion detection systems, encryption, locking file cabinets, current revisions of all software releases and all software patches and other appropriate physical and electronic security mechanisms.
ACCA security approach is aligned to globally recognised standards and frameworks such as the ISO27001 standard, NIST, Cyber essentials, Cloud security principles standards and the Microsoft cloud adoption framework.
For information about cookies used on our website, please see our website privacy and cookies notice.
ACCA is not listed as a 'public body' for the purposes of the FOIA and therefore is not under a duty to comply with the provisions of the FOIA.
Individual’s rights are qualified (meaning they may not have these rights at all times, or in all circumstances), but generally speaking, individual’s rights include:
If you want to exercise one of these rights please get in touch at:
ACCA
Privacy Office
Corporate Assurance
The Adelphi
1-11 John Adam Street
London
WC2N 6AU
Alternatively, you can email our privacy office directly at privacy@accaglobal.com,
We try and provide a self-service style of service, or login to your account and review and update your own information or alternatively you can call our contact centre.
Before providing you with your personal data, we may require confirmation of your identity or further information about the data requested to assist ACCA to locate your personal data.
Please also let us know if you believe any data we hold to be inaccurate or if you have other concerns about our use of your personal data.
These rights are subject to certain exemptions which may apply, for example, in relation to some professional conduct matters and accessing examination scripts.
You can update your contact details and options for receiving publications and communications via myACCA or by contacting ACCA's contact centre.
For more information, or for further assistance with a more detailed enquiry, or if you want to exercise your rights, please contact privacy@accaglobal.com
From time to time we will review this document, when we make substantial changes to our processes or procedures and systems, or if laws and regulations change.
We will update the notice here, and make reasonable efforts to contact and update those affected if the changes are substantial in nature.
In the event of any inconsistencies between the English version and the version of this notice in any other languages, the English version shall prevail.