• Current students
      • Student centre
        Enrol on a course/exam
        My enrolments
        Exam results
        Mock exams
      • Course information
        Students FAQs
        Student induction
        Course enrolment information
        Key dates
        Book distribution
        Timetables
        FAE elective information
        CPA Ireland student
      • Exams
        CAP1 exam
        CAP2 exam
        FAE exam
        Access support/reasonable accommodation
        E-Assessment information
        Exam and appeals regulations/exam rules
        Timetables for exams & interim assessments
        Sample papers
        Practice papers
        Extenuating circumstances
        PEC/FAEC reports
        Information and appeals scheme
        Certified statements of results
        JIEB: NI Insolvency Qualification
      • Training and development
        Mentors: Getting started on the CA Diary
        CA Diary for Flexible Route FAQs
        Training Development Log
      • Admission to membership
        Joining as a reciprocal member
        Admission to Membership Ceremonies
        Admissions FAQs
      • Support & services
        Recruitment to and transferring of training contracts
        CASSI
        Student supports and wellbeing
        Audit qualification
        Diversity and Inclusion Committee
    • Students

      View all the services available for students of the Institute

      Read More
  • Becoming a student
      • About Chartered Accountancy
        The Chartered difference
        Student benefits
        Study in Northern Ireland
        Events
        Hear from past students
        Become a Chartered Accountant podcast series
      • Entry routes
        College
        Working
        Accounting Technicians
        School leavers
        Member of another body
        CPA student
        International student
        Flexible Route
        Training Contract
      • Course description
        CAP1
        CAP2
        FAE
        Our education offering
      • Apply
        How to apply
        Exemptions guide
        Fees & payment options
        External students
      • Training vacancies
        Training vacancies search
        Training firms list
        Large training firms
        Milkround
        Recruitment to and transferring of training contract
      • Support & services
        Becoming a student FAQs
        School Bootcamp
        Register for a school visit
        Third Level Hub
        Who to contact for employers
    • Becoming a
      student

      Study with us

      Read More
  • Members
      • Members Hub
        My account
        Member subscriptions
        Newly admitted members
        Annual returns
        Application forms
        CPD/events
        Member services A-Z
        District societies
        Professional Standards
        ACA Professionals
        Careers development
        Recruitment service
        Diversity and Inclusion Committee
      • Members in practice
        Going into practice
        Managing your practice FAQs
        Practice compliance FAQs
        Toolkits and resources
        Audit FAQs
        Practice Consulting services
        Practice News/Practice Matters
        Practice Link
      • In business
        Networking and special interest groups
        Articles
      • District societies
        Overseas members
      • Public sector
        Public sector presentations
      • Member benefits
        Member benefits
      • Support & services
        Letters of good standing form
        Member FAQs
        AML confidential disclosure form
        Institute Technical content
        TaxSource Total
        The Educational Requirements for the Audit Qualification
        Pocket diaries
        Thrive Hub
    • Members

      View member services

      Read More
  • Employers
      • Training organisations
        Authorise to train
        Training in business
        Manage my students
        Incentive Scheme
        Recruitment to and transferring of training contracts
        Securing and retaining the best talent
        Tips on writing a job specification
      • Training
        In-house training
        Training tickets
      • Recruitment services
        Hire a qualified Chartered Accountant
        Hire a trainee student
      • Non executive directors recruitment service
      • Support & services
        Hire members: log a job vacancy
        Firm/employers FAQs
        Training ticket FAQs
        Authorisations
        Hire a room
        Who to contact for employers
    • Employers

      Services to support your business

      Read More
☰
  • Find a firm
  • Jobs
  • Login
☰
  • Home
  • Knowledge centre
  • Professional development
  • About us
  • Shop
  • News
Search
View Cart 0 Item

☰
  • Becoming a student
  • The Institute
  • ACA Professionals
  • Find a firm
  • Home
  • About us
  • Current students
  • Professional development
  • Sign up for The Bottom Line
  • Accountancy Ireland
  • Employers
  • Members
  • News
  • Knowledge centre
  • Professional Standards
  • Ethics Resource Centre
  • Governance Resource Centre
  • Membership
  • Shop
  • Terms & conditions
  • Privacy statement
  • Forgot Password
  • CACurriculum
  • Lecturer Calendar
  • Western Society
  • Australia Society
  • ResourceBookingAdmin
  • Enrollment
  • Jobs
  • New Password
  • CPD and events calendar
  • Annual Dinner
  • Unauthorized
  • Taxsource disclaimer
  • Chartered Accountants Ireland Educational Trust
  • Career Pathway
  • pull products by topic code
  • Thrive - wellbeing hub
  • CA Support
  • Our impact
  • Publishing
  • Event privacy statement
  • Admission to Membership ceremonies
  • Thought Leadership
  • Become a Chartered Accountant
  • Applicant privacy statement
  • Leadership Summit 2024
  • Leadership Summit 2025
  • Budget updates
  • CPD Blitzes 2025
  • Privacy complaint
  • Home/
  • Applicant privacy statement

Applicant privacy statement

Chartered Accountants Ireland (the “Institute”, “We”, “Us”) respects all data subjects rights to privacy, and this statement (published on our website) sets out the Institute's policy towards safeguarding information which is disclosed to us by an applicant or student participating in the Chartered Accountancy Professional Education Programmes. Any personal information which an applicant or student volunteer to the Institute will be treated with the highest standards of security and confidentiality, strictly in accordance with applicable data protection rules, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the “GDPR”).

Where the Institute asks an applicant or student for personal information, such as their name and address, that can identify them individually, we do so only for specific purposes. For example, for all prospective students or candidates participating in the Chartered Accountants Ireland Professional Education Programmes ("CA Proficiency 1" or "CA Proficiency 2") who apply for an exemption from CAP1 and/ or CAP2 examination(s).

In every case, we will let the applicant or student know what we intend to do with that information before collecting it in the context of CAP1 and CAP2 exemption applications and in using Robotic Processing Automation ("RPA").

The Institute acts as the Data Controller. The Institute’s registered address is Chartered Accountants House, 47-49 Pearse Street, Dublin 2, D02 YN40.

We are committed to meeting our obligations and maintaining trust and integrity in our data processing activities. Please see our general privacy statement for more information.

Definitions

Reference  Definition 
Applicant  An applicant refers to a student who is in the process of enrolling in the Institute’s professional education programmes, such as the Chartered Accountancy Proficiency Programmes (CAP1 and CAP2). This includes individuals submitting applications for registration, exemptions, or any related entry requirements prior to becoming a fully registered candidate. 
Chartered Accountants Ireland Professional Education Programmes 

The Chartered Accountants Ireland Professional Education Programmes are the structured education and examination pathways provided by Chartered Accountants Ireland for individuals pursuing the Chartered Accountant designation. These programmes include:

  • CAP1 (CA Proficiency 1): The first stage of professional education, covering foundational subjects such as financial accounting, management accounting, finance, taxation, and business law.
  • CAP2 (CA Proficiency 2): The second stage, focusing on advanced topics like audit and  assurance, and strategic finance, financial reporting and taxation.
  • FAE (Final Admitting Examination): The final stage, assessing candidates’ ability to apply technical knowledge in practical, real-world scenarios.

These programmes combine academic learning, practical training, and professional development to ensure candidates meet the standards required for membership in the Institute.

Customer Relationship Management (“CRM”) 

A Customer Relationship Management (CRM) system is the Institutes software platform to manage and analyse interactions with applicants throughout their lifecycle.

  • CRM record: An individual entry within the CRM system that contains all relevant information about a specific applicant, such as contact details, interaction history, and associated documents.
  • CRM database: The underlying structured collection of all CRM records. It serves as the central repository where data is stored, organized, and accessed by the CRM system for reporting, automation, and analytics. 
Data  Data is information, which is stored electronically, on a computer or in certain paper-based filing systems.  
Data Controllers  Data Controllers are the people or organisations who determine the purposes for which, and the manner in which any personal data is processed. They are responsible for establishing practices and policies in line with the relevant laws and regulations. The Institute is the data controller of all personal data used in our business for our own commercial purposes.  
Data Processors  Data Processors include any person or organisation that processes personal data on our behalf and on our instructions. Employees of data controllers are excluded from this definition, but it could include suppliers which handle personal data on the Institute’s behalf.  For example, FWF and UiPath are the "Processors", responsible for processing the applicant’s data using RPA on behalf of the Institute. 
Data Processing Agreements (DPA)  A Data Processing Agreement is a legally binding document that outlines the responsibilities and liabilities of data controllers and processors regarding the handling of personal data. 
Data subjects  Data subjects include all living individuals about whom we hold personal data (including applicants and students). All data subjects have legal rights in relation to their personal information.  
Education department and Education team  The Education & Training Department (ETD) is responsible for managing the education, training, and assessment of students. Any references to the “Education Department” or “Education Team” within this Privacy Statement refer to the internal team responsible for carrying out these processes within the organisation. Contact details for queries related to Education activities are provided in the relevant section of this document. 
Exemption rules  An exemption is credit for prior learning.  An exemption in a subject means that the student has met the requirement for that subject based on earlier studies and the student does not have to present for examination in that subject with Chartered Accountants Ireland. 
Future Work Force Limited (“FWF”)  The Institute delivers RPA in collaboration with its appointed supplier, Future Work Force Limited. FWF provides implementation services for the RPA technology. The software and technology used for the RPA is developed by UiPath SRL ("UiPath" – see below for definition). 
Legitimate Interests Assessment ("LIA")  A Legitimate Interest Assessment is a process for organisations to carry out a risk assessment in order to analyse and evaluate the justification for processing personal data based on Legitimate Interests as the lawful basis under GDPR. 
Personal data   Personal data is data relating to a living individual who can be identified from the data in conjunction with other information that is in or is likely to come into the Institute’s possession. Examples of Personal Data include name, address, date of birth, telephone number, email address, membership number and so on. 
Processing of personal data  Processing of personal data is any activity that involves the use of the data. We require this information to understand your needs and provide you with a better service. 
Robotic Processing Automation (“RPA”)  Robotic Processing Automation is a machine learning technology, to support Institute personnel working in our Education Department, when dealing with the high volume of Applicant exemption applications received. 
Sensitive Personal Data (special category data)   Sensitive Personal Data relates to specific categories of data such as data relating to a person’s racial origin; political opinions or religious or other beliefs; physical or mental health; sexual life; criminal convictions or the alleged commission of an offence and trade union membership. The Institute may collect sensitive personal data, such as limited health data in the event that specialised services are required. 
Standard Contractual Clauses (SCCs)  Standard Contractual Clauses (SCCs) are a set of contractual terms approved by the European Commission that organisations use to legally transfer personal data from the European Economic Area (EEA) to countries outside the EEA that do not have an adequacy decision under GDPR. 
Student  A student is an individual who has successfully enrolled in the Institute’s Professional education programmes or examinations and is officially registered to undertake the Chartered Accountancy curriculum, including attending classes, sitting examinations, and completing any required assessments. Unlike an applicant, a student has completed the registration process and holds active status within the Institute’s education framework. 
Transfer Impact Assessment (TIA)  A TIA assessment ensures that the destination country provides an essentially equivalent level of protection to that guaranteed under EU data protection laws. 
UiPath  

The software and technology used for the RPA is developed by UiPath SRL ("UiPath"). 
UiPath is a platform for Robotic Process Automation (RPA), which automates repetitive tasks. The cloud environment is UiPath’s hosted infrastructure where automation workflows run without needing on-premises servers.


Obligations of the Institute as Data Controller

As a Data Controller, the Institute is required to comply with the following Data Protection principles of good practice. These provide that personal data must:

  1. Be obtained and processed lawfully and fairly.
  2. Be collected and kept only for specified, explicit and legitimate purposes and not be used or disclosed in a manner incompatible with those purposes for which it was given to you initially.
  3. Be protected against unauthorised access, alteration, disclosure or destruction, or unlawful processing.
  4. Be accurate, complete and where necessary, kept up to date.
  5. Be adequate, relevant and not excessive in relation to the purpose for which they were collected.
  6. Not be kept for longer than is necessary.

What is Robotic Processing Automation?

The Institute uses technologies to enhance our application processes and services for the benefit of all. We use Robotic Processing Automation ("RPA"), a machine learning technology, to support Institute personnel working in our Education Department, when dealing with the high volume of Applicant exemption applications received.

Put simply, applicant exemption application data is inputted into a software process (robot) to assist with assessing if the exemption application data satisfies exemption application requirements or not. The robot provides a yes or no answer. The robot is programmed to deal only with pre authenticated data and it does not have the capacity to make decisions in relation to any applicant or their personal data other than a yes or no answer to an applicant's exemption application.

Testing and evaluation

Initial testing:

From inception until July 2024, the outputs of the robot were reviewed at several stages of the process by a member of our education team to verify the answers provided, so there was no possibility of an automated decision being made in relation to any applicant in the absence of human intervention. The feedback from this validation phase was used to improve the process further, and the RPA process was extended to CAP2 exemption applications.

A further validation phase was completed in March 2025 and at that stage, we were satisfied with the results of the testing. There is a human check performed to ensure the RPA is reading the transcript correctly. Once this has been verified the remainder of the process is fully automated.

Ongoing testing:

To ensure continued accuracy, we will conduct random quarterly checks of the output of the automated system. If any applicant raises a query regarding their application, our team can review the matter and provide assistance through human intervention

The Institute will continuously validate and test the outputs of the RPA and train personnel involved in exemption assessment on how to appropriately use the RPA for the benefit of students and the Institute.

In the event that any applicant would prefer that their exemption application is not processed by means of the RPA process, then the applicant can notify the Institute of their objection by emailing privacy@charteredaccountants.ie  Please note that objecting to the RPA data processing may slow down the processing of any exemption application.

Human checks of RPA activity

As noted above at section 4.1 (“Initial testing”), during the period ending March 2025, the RPA had three "Human In the Loop" points where the activity of the Robot was verified before it was allowed to progress and prior to communicating the outcome of the exemption application to a student.

Please also note the “ongoing testing” detailed at section 4.1.

Source of the personal data

Personal data required for data processing is collected from applicants via an online application form during the Institute’s student registration process. In addition, personal data is also collected from Applicants’ awarding college/universities, which can submit transcripts on applicants’ behalf.

For more information on the data processing steps involved in setting up your exemption application, refer to Appendix A.

Where is personal data stored and updating your personal data

The records of personal data are stored within the following areas:

  • The Institute's CRM database
  • The Institute's instance of the UiPath cloud environment (which is the platform for RPA – see definitions) and The Institute’s Admission’s SharePoint site
  • The Institute’s offsite storage facilities (operated by our service provider Kefron and used by the Education team to store student and member data records separate to the UiPath cloud environment).

The accuracy of outputs from the RPA depends on the accuracy of the data entered by the applicant or the awarding college/ university on the applicant's behalf. It is important that the personal data we hold in relation to the student is accurate and up to date.

A student can update their personal data through the 'My Account' section of the Institute's student portal webpage once they have logged into their personal profile. A member of the Education team will update the Institute's records of personal data accordingly. If a student is experiencing issues, they should send an email to studentqueries@charteredaccountants.ie

RPA third party service providers: data processors

The Institute delivers RPA in collaboration with its appointed supplier, Future Work Force Limited ("FWF"). FWF provides implementation services for RPA technology. The software and technology used for the RPA is developed by UiPath SRL ("UiPath").

FWF and UiPath are the "Processors", responsible for processing the applicant and student data using RPA on behalf of the Institute.

Purposes of processing personal data via the RPA

The Institute processes personal data using the RPA for the high-level purposes of:

  • Exemption application processing.
  • Enhancing timelines for the delivery of the results of exemption applications to applicants.
  • Creating efficiencies in the processing of applicants' personal data to meet with the Institute's legislative mandate to run examinations and accountancy training programmes.
  • Ensuring ongoing improvements to the RPA through testing of the technology and its outputs; and
  • Any other data processing purposes reasonably and necessarily required to fulfil the above processing purposes.

Use of personal data

Please see information in relation to categories of personal data in scope, purposes and legal bases of processing in the table below.

What personal data is processed?  Purpose for processing  Legal basis for processing 

CRM profile for each applicant on registration to include:

  • Student ID
  • Student name
  • Student home address
  • Student mobile number
  • Email address
  • Date of birth (insofar as this information is contained in your university transcripts)
  • Training firm (and in some cases the name(s) and contact details of persons in the training firm)
  • Application status
  • Application details
  • Route of entry
  • University
  • Specialty
  • End date
  • Degree classification
  • Subject names
  • Subject codes
  • Grade 
Creating a CRM profile for each applicant when they register with the Institute and submit an exemption application;

Training the Robot to recognise the various formats of university transcripts and to:

  • read the name and educational details from the transcript (using an imaging / data extraction tool);
  • verify the applicant details against the CRM record (as created during the online application upon registration with the Institute);
  • apply the Institute’s rules to ensure the exemption application meets the standards required;
  • update the Institute's CRM records to log the applicant’s educational history; and
  • log any exceptions and the outcome of the review (i.e. determine your application for an exemption)

and

Determining any appeals of the application decision. An appeal involves a human review to assess whether a correction is necessary. Regardless of the outcome of the appeal review, the outcome is explained to the applicant.
In order to ensure the Institute's legitimate business interests in promoting the efficient administration of your exemption application in a timely and reliable manner, and in appropriately managing the application details and status in an electronic format (including for internal record keeping purposes). 

University transcript to include:

  • University
  • Specialty
  • End date
  • Degree classification
  • Subject names
  • Subject codes
  • Grade
Date of birth (insofar as this information is contained in the university transcripts) 

Processing the applicant’s university transcript for the purposes of confirming a match with the corresponding inputs by the applicant in the application process:

  • The Robot reads the details on the transcript for the purposes of confirming that they match the details inputted in the online application form during registration and when the applicant makes their exemption application.
  • Comparing the Institute's exemption rules to the confirmed university transcript details:
The Robot conducts this comparison for the purposes of applying the Institute's exemption rules to the confirmed university transcript details to determine whether the applicant’s details meet the Institute’s exemption requirements. 
In order to ensure the Institute's legitimate business interests in promoting the efficient administration of the applicant’s exemption application process in a timely and reliable manner, and in appropriately managing their application details and status in an electronic format (including for internal record keeping purposes). 

Updating your CRM profile to include:

  • Student ID
Application status 

Updating your CRM profile:

The Robot updates the applicant’s CRM profile with its review outcome for the purposes of recording the exemption application decision. 
In order to ensure the Institute's legitimate business interests in promoting the efficient administration of your exemption application process in a timely and reliable manner, and in appropriately managing your application details and status in an electronic format (including for internal record keeping purpose. 

Note: The data subjects have the right to object to the use of their personal data for the Institute’s legitimate business interests (see "Right to Object where Processing is on the basis of the Institute's Legitimate Interests"). To make an objection, the data subject should contact privacy@charteredaccountants.ie.

If a data subject objects, the Institute will have an opportunity to demonstrate that there are compelling legitimate grounds which override the data subject’s rights and freedoms or that processing is necessary for the establishment, exercise or defence of legal claims.


Legitimate Interest Assessment

The Institute has carried out a Legitimate Interests Assessment ("LIA") to determine if we can process Personal Data on the legal basis of our legitimate interests (Article 6(1)(f) of the GDPR).

A Legitimate Interests Assessment requires us to:

  1. identify our legitimate interests in processing personal data;
  2. demonstrate that the processing is necessary to achieve the legitimate interests; and
  3. consider carefully the Institute's right to process Personal Data for the purposes of CAP1 and/or CAP2 exemption application and to use the RPA machine learning technology in the context of the applicants or students right as a Data Subject to privacy.
  4.  

    We have concluded that:

    • While each applicant's right to privacy is significant and important, the Institute's responsibility to process CAP1 and CAP2 exemption requests efficiently and in a timely manner outweighs an Applicant's privacy right in these particular circumstances. The following is relevant to this conclusion: the Institute has a legitimate interest in processing your personal data in order to make determinations about your exemption application for the examinations.
    • The processing is necessary because there is no less intrusive way of managing the exemption application process.
    • Automation through the RPA technology significantly improves turnaround time for eligibility decisions enabling students to access the enrolment process earlier and make timely decisions about their education pathway.
    • The personal data processed is limited to the minimum amount necessary to achieve the purpose of making determinations about your exemption application.

Right to object where processing is on the basis of the Institute's legitimate interests

Every applicant has the right to object to their personal data being processed on the basis of legitimate interests (as noted above).

If the applicant wishes to object to the processing or to opt out of the use of automation in processing their transcript, and have your application processed on a manual basis only, the objection or RPA opt-out request should be emailed to privacy@charteredaccountants.ie

If an objection is raised, the Institute may demonstrate that there are compelling legitimate grounds which override the applicant’s rights and freedoms, or that processing is necessary for the establishment, exercise or defence of legal claims.

Where an RPA opt-out request is submitted and the Institute facilitates manual processing, steps will be taken to ensure any manual decision will not prejudice the outcome of the relevant exemption application or, to the extent possible, the timeline for the exemption decision. Where there are a high number of exemption applications received, processing of manual applications may take longer than automated processing via the RPA.

In order for an application to be processed, the following are relevant the candidates must share their data with us using one of the appropriate channels as noted in our communication to you

Third party personal data

This statement also applies to personal data relating to third parties that the Institute are required to process to facilitate our relationship with data subjects. An example of third-party personal data processed for this purpose are the name(s) and contact details of individuals at the applicant’s or student’s training firm.

Disclosures of personal data

The following personal data is shared with our third-party service providers (including FWF and UiPath) to enable us to carry out our operations:

Category of recipients  Personal data shared by the Institute  Purposes for which the personal data is shared 
Suppliers, service providers, vendors, other commercial entities  Student ID, student name, email address, subject names, subject codes, grade, date of birth, application status, application details, route of entry, university, specialty, end date, degree classification.  Service providers provide and implement the software used for the RPA. 
Other regulatory or oversight bodies  Student ID, student name, email address, subject names, subject codes, grade, date of birth, training firm, application status, application details, route of entry, university, specialty, end date, degree classification.  Where we are required or requested to share information with another regulatory or oversight body, including where a member requests that we confirm details with such bodies. 
Another Recognised Accountancy Body (“RAB”)  Student ID, student name, email address, subject names, subject codes, grade, date of birth, training firm, application status, application details, route of entry, university, specialty, end date, degree classification.  The Institute may generally share personal data with another RAB where it perceives there is a legitimate interest in doing so. 

Regulatory and oversight bodies

The Institute interacts with and shares personal data with various regulatory and oversight bodies including but not limited to:

  • The Irish Auditing and Accounting Supervisory Authority
  • The Central Bank of Ireland
  • The Financial Reporting Council
  • The Office of the Director of Corporate Enforcement
  • An Garda Siochana
  • Revenue Commissioners Ireland
  • National Crime Agency
  • Office for Professional Body AML Supervision (“OPBAS”)
  • GB/NI Insolvency Service
  • Other RABs
  • Disciplinary panel members
  • Committee members and
  • External disciplinary committees.

Third-party service providers

The Institute also engages third-party service providers (each acting as a Processor) to deliver and implement the software used for the RPA. This processing activity includes the automated extraction of personal data from the relevant awarding college/university transcript.

To ensure compliance with GDPR, the Institute has put in place Data Processing Agreements and will seek to obtain these for all key processors. These agreements require the processors to implement appropriate technical and organisational measures in such a manner that the processing will meet the requirements of the GDPR. The Institute may undertake regular assessments, including periodic audits where deemed necessary, to verify compliance with these standards.

While the processors may engage sub-processors as part of their operations, the Institute has received confirmation that the personnel of such sub-processors providing services in connection with the RPA do not access students' personal data.

Retention of personal data

The Institute is obliged to retain certain information for legitimate business purposes and to the extent necessary to comply with legal obligations or for the establishment, exercise or defense of legal claims.

The retention periods required by law vary depending on the type of data. The Institute minimise the retention period for the storage of personal data to the minimum possible in order to achieve the purpose(s) for which the data is processed. Retention periods are reviewed and updated from time to time in line with legal requirements and best practices.

Key retention principles:

  • Personal data will be held by the Institute for no longer than is necessary to carry out the data processing and in exceptional cases to investigate issues that may arise.
  • Personal data submitted or contained in awarding college/university transcripts will be retained on the RPA system throughout the enrolment season plus one month, in order to determine your exemption application, unless we are obliged to hold it for a longer period under law or applicable regulations.
  • If an appeal is lodged in respect of the exemption application decision within one month of the decision being communicated, personal data (including transcripts) will be retained for the duration of and pending the conclusion of the appeal process.
  • Where an exemption application is successful and applicant/student becomes a member to the Institute, Personal Data will be retained on the CRM profile for the duration of the membership plus a period of seven years after member ceases, unless obliged to hold it for a longer period under law or applicable regulations.
  • In certain circumstances, where required by law or applicable regulations, or where deemed necessary for legitimate business, regulatory and/or disciplinary purposes, personal data may be held for a longer or shorter period.

International data transfers and RPA processing

The Institute does not transfer personal data to third parties other than necessary educational institutions and our processors. For more information on data transfers, see our Privacy Statement.

RPA service providers

Our Robotic Process Automation (RPA) partners are:

  • FWF - located in the United Kingdom. The United Kingdom is deemed to have adequate protection for personal data by virtue of the adequacy decisions adopted by the European Commission in respect of the United Kingdom dated 28 June 2021.
  • UiPath - located in Romania. The Personal Data processed by UiPath is hosted in the EU in the UiPath Document Centre within the UiPath cloud environment and is subject to GDPR protections.

Transfers outside the EEA and UK

In the event that the Institute, or our Processors acting on our behalf, wish to transfer personal data to a country outside the European Economic Area ("EEA") or the United Kingdom (“UK”), we will ensure that one of the following safeguards applies:

  • An adequacy decision under Article 46 GDPR for the destination country.
  • Appropriate safeguards under Article 45 GDPR, such as Standard Contractual Clauses (SCCs)
  • A valid Article 49 GDPR derogation, where applicable.

Processor agreements and compliance

As noted above in ‘Disclosure of personal data', the processors involved in the RPA have signed agreements to ensure compliance with applicable data protection legislation in their processing of personal data, including with respect to international data transfers. In most cases where the Institute or our processors transfer your personal data outside of the EEA and UK, we will rely on the Standard Contractual Clauses ("SCCs") under Article 46(2)(c) GDPR to ensure adequate protection.

Transfer impact assessment (TIA)

Prior to authorising the execution of the SCCs and the transfer of the personal data outside of the EEA and UK pursuant to the SCCs, the Institute will conduct a “transfer impact assessment” (“TIA”). This assessment ensures that the designated country provides an essentially equivalent level of protection that is guaranteed under EU data protection laws. Where necessary, we implement additional technical and/or organisational measures to safeguard the personal data.

Ongoing compliance

Assessments of processors are completed by the Institute in order to ensure compliance with the contracted standards and general data protection requirements.

Data security

Appropriate physical, organisational and technical security measures are in place to protect the applicants / student’s personal data from accidental loss, unauthorised access, use, alteration or disclosure. Strict internal guidelines are in place to ensure that privacy is safeguarded at every level in the Institute. We limit access to personal data to only those employees and processors who have a legitimate business need to access such data. We will continue to revise our policies and implement additional security features as new technologies become available.

Your rights in relation to your personal data

Data subjects have the following rights, in certain circumstances, under Articles 12-22 of the GDPR: 

  1. The right of access enables data subjects to receive a copy of their personal data. Students have a right to make a Data Access Request by emailing the Privacy Manager at Privacy@charteredaccountants.ie with details of the request. A form is available to download on the student portal and should be submitted with a copy of current ID.
  2. The right to rectification enables the data subject to ask us to correct any inaccurate or incomplete personal data we hold about the person.
  3. The right to erasure enables the data subject to ask us to delete their personal data in certain circumstances.
  4. The right to restrict processing enables the data subject to ask us to halt the processing of their personal data in certain circumstances.
  5. The right to object enables the data subject to object to us processing your personal data on the basis of our legitimate interests (or those of a third party). Please contact us at privacy@charteredaccountants.ie  if you want to object to any processing carried out on the basis of legitimate interests including to the use of automation in processing the applicants/student’s transcript.
  6. The right to data portability enables the data subject to request us to transmit personal data that they have provided to us, to a third party without hindrance, or to give the data subject a copy of it so that they can transmit it to a third party, where technically feasible.
  7. The right not to be subject to automated decision making, where possible, the data subject can request human intervention in the processing of their personal data.
  8.  

    In any case where the Institute is relying on the data subjects consent to process their personal data (which is not currently the case), the data subjects have the right to change their mind and withdraw consent at any time. Such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

How to exercise your rights

A data subject (applicant/student) can exercise any of the rights listed above by contacting our Privacy Manager at the details listed below.

A data subject (applicant/student) also have the right to lodge a complaint about our processing of their personal data with the relevant supervisory authority in accordance with Article 77 GDPR, details as follows:

Republic Of Ireland:

Telephone: 1890 252 231

Email: info@dataprotection.ie

Address:          
Data Protection Commission,
6 Pembroke Row,
Dublin 2,
D02 X963,
Ireland

Northern Ireland:

Telephone: 028-9027-8757

Email: ni@ico.org.uk 

Address:          
Information Commissioner’s Office,
10th Floor Causeway Tower,
9 James Street South,
Belfast,
BT7 2JB,
Northern Ireland 

 

You can read the Institute Data Privacy Complaints Procedures. All questions in relation to this procedure can be directed to the Privacy Manager at the details below.

Updates to this statement

The Institute reserves the right in its sole discretion to amend this statement at any time (for example, to comply with changes in laws or regulations, our practices, procedures and organisational structures, requirements imposed or recommended by supervisory authorities or otherwise).

Changes to this statement will be communicated to you where we are legally required to do so.

Contacting the Institute

If an applicant/student has any queries or complaints regarding the use of their personal data and/or the exercise of their individual rights, they should contact the Institutes Privacy Manager whose contact details are as follows:

Email: privacy@charteredaccountants.ie

Address:
Privacy Manager
Chartered Accountants Ireland,
Chartered Accountants House,
47-49 Pearse Street, Dublin 2
D02 YN40

Appendix A

Steps in setting up exemption application, using RPA

  1. Fill in the online application form during the Institute’s registration process. Please ensure the information you input (particularly your student number) is accurate to ensure the proper processing of the application and to make sure the information we hold about you is accurate and as up to date as possible.
    An internal CRM record is created on submission of your completed online application. The purpose of the CRM record is to track the progress of each applicant's exemption application.
  2. Share your transcript with the Institute via the appropriate channel. On receipt, a member of the Education team creates a folder for the applicant and feeds the transcript to the Robot.
  3. The Robot confirms that your university transcripts match the educational achievements input by you on your online form by loading the image of the transcript to a Document Understanding Cloud where the details are read and sent back to the Robot as data fields.
  4. The Robot then applies the Institute's exemption rules to determine whether an applicant meets the Institute’s exemption requirements. Please view our exemptions page for more information.
  5. The Robot updates the CRM system with the outcome of the review. The Robot has a number of exception handling scenarios where it notifies the Student Admissions Team if it cannot make a decision or if any of the steps do not complete satisfactorily (for example, if the degree specialty is not found in the rule database or the student record is not found on CRM. See also 'Human Checks of RPA Activity' in relation to the human intervention.

The latest news to your inbox

Please enter a valid email address You have entered an invalid email address.

Useful links

  • Current students
  • Becoming a student
  • Knowledge centre
  • Shop
  • District societies

Get in touch

Dublin HQ 

Chartered Accountants
House, 47-49 Pearse St,
Dublin 2, D02 YN40, Ireland

TEL: +353 1 637 7200
Belfast HQ

The Linenhall
32-38 Linenhall Street, Belfast,
Antrim, BT2 8BG, United Kingdom

TEL: +44 28 9043 5840

Contact us

Connect with us

Something wrong? Is the website not looking right/working right for you? Browser support
Chartered Accountants Worldwide homepage
Global Accounting Alliance homepage
CCAB-I homepage
Accounting Bodies Network homepage

© Copyright Chartered Accountants Ireland 2020. All Rights Reserved.

☰
  • Terms & conditions
  • Privacy statement
  • Event privacy statement
  • Privacy complaint
  • Sitemap
LOADING...

Please wait while the page loads.