IACAAB handles application, assessment and accreditation information responsibly so that confidentiality, integrity and availability are maintained.
How information is handled
- Information is collected only for defined accreditation and administrative purposes.
- Access is limited to authorized personnel and appointed assessment resources.
- Records are protected against unauthorized alteration, loss or disclosure.
- Information is retained and disposed of according to applicable procedures and legal requirements.
- Public information is limited to approved accreditation status, scope and other information that may be disclosed.
Confidentiality exceptions
Information may be disclosed with the organization’s authorization, when required by law, to an accreditation authority or oversight body, or when necessary to explain an accreditation status or decision under the applicable rules. Where appropriate, the organization is informed before disclosure.
Data accuracy and incidents
Organizations should keep contact, scope and certificate information accurate and report suspected unauthorized access, loss or incorrect publication promptly to IACAAB.
Contact info@iacaab.org for information-handling questions.