CPAs Offering Privacy Services

CPAs represent the only profession with a set of standards for the examination and reporting on controls, ethical standards for the conduct of the work, and requirements for independence in appearance and fact from the entity for which they issue the report.

These examination standards are expanding to include specific criteria for practitioners to evaluate new trust issues, such as privacy. The business and professional experience, subject matter expertise (privacy, security, and control), and professional characteristics (independence, integrity, objectivity, and discretion) needed for such engagements are the same key attributes that enable a CPA to comprehensively and objectively assess the risks and controls associated with systems reliability. In addition, CPAs are required to follow comprehensive ethics rules and professional standards when providing professional services. 

This section explores privacy services in depth.

David M. Cieslak, CPA.CITP, GSEC, and Chairman of the AICPA's Information Technology Executive Committee discusses the relevance of Generally Accpted Privacy Principles (GAPP). Learn More>>

Building a Privacy Practice in Small and Medium-Sized CPA Firms

This guide serves as the first step for practitioners reviewing or considering investing time and resources in Privacy Advisory Services. It was developed under the leadership of practitioners in small firms for use by small and medium-sized accounting firms. The guide focuses on two areas: implementation (see Sections II, III, and IV) and marketing (see Sections V and VI). Learn More>>

Frequently Asked Questions About Privacy Services

This article presents a series of frequently asked questions regarding privacy and privacy services. Learn More>> 

What Skills Do I Need to Provide Privacy Services?

This article outlines the knowledge and skills needed to provide comprehensive privacy services. CPAs are uniquely qualified to provide privacy services due to their long history providing services based on each of these critical skills. Learn More>>

Why Should CPAs Offer Privacy Services?

This article explains several of the reasons why CPAs should be providing privacy services. Learn More>>

How to Profit by Safeguarding Privacy
This article shows CPAs in industry or in public practice how they can help businesses achieve their privacy compliance goals. It also summarizes provisions of the major federal privacy laws. Learn More>>

E-Mail and the Law
This article explains how CPAs can help implement e-mail programs that reduce compliance risks by using the privacy framework developed jointly by the AICPA and the Canadian Institute of Chartered Accountants (CICA). Learn More>>

Privacy and Electronic Communications
This article explains what CPAs should be doing in their own firms to protect the privacy of client and firm information. Learn More>>

Privacy Framework Helps CPAs Protect Consumers
This article explains how the Privacy Framework serves as a coordinated source of reliable information that CPAs can use to help their employers and clients comply with the growing body of overlapping privacy regulations.

Learn More>>

Enter the Privacy Compliance Marketplace

This article explains how the market for privacy compliance services is growing due to the increasing stringent domestic and international privacy regulations.  Because of their expertise in business processes and controls, CPAs are well positioned to safeguard individuals' personal data, which is a valuable business asset. Learn More>>

Solving Privacy Issues with a Privacy Framework: A Case Study

The recently launched AICPA/CICA Privacy Framework can help CPA firms and their clients ensure compliance with privacy laws and regulations. In the following case study, an experienced consultant describes the issues faced by one company and how it dealt with them. Learn More>>