This notice explains how GAICC, acting as a personnel certification body, handles personal information about applicants, candidates and certified persons.
What we collect
| Category | Examples | Why |
|---|---|---|
| Identity | Name, date of birth, government photo ID at examination | To confirm you are the person being examined and certified |
| Contact | Email, phone, country | To administer your application and issue results |
| Eligibility evidence | Training certificates, education and experience records | To verify you meet published eligibility criteria |
| Examination data | Responses, scores, domain performance, attempt history | To score objectively and make the certification decision |
| Proctoring data | Video, audio and screen recording; integrity flags | To protect examination integrity |
| Certification record | Credential ID, issue and expiry dates, status, CPD records | To maintain and verify your certification |
| Special category | Health information supporting a reasonable adjustment | Only to implement an approved adjustment |
How we use it — and what we do not do
We use your information to assess eligibility, deliver and score examinations, make and record certification decisions, maintain the certification register, and meet accreditation obligations. We do not sell your personal information, and we do not share it with training providers for marketing.
Public verification. To allow employers and the public to confirm a credential, GAICC publishes only the minimum necessary — holder name, certification held, issue and expiry dates, and status. Nothing else about you is made public.
AI in the certification process
GAICC uses AI-assisted online proctoring to flag potential integrity events. AI does not make certification decisions. Flagged events are reviewed by a person, and a human makes any final integrity decision. GAICC maintains a register of AI tools used in the certification process, with validation and monitoring evidence, and you may request information about it.
Retention
Records of applicants, candidates and certified persons are retained for a minimum of six years — one full three-year certification cycle plus one subsequent cycle — to meet ISO/IEC 17024 requirements. Proctoring recordings are retained for a shorter, defined period unless needed for an investigation or appeal.
Security and your rights
Data is stored in encrypted storage with cloud providers independently audited against SOC 2 and ISO/IEC 27001. Access is restricted on a least-privilege basis. Subject to applicable law, you may request access to, correction of, or deletion of your personal information, object to certain processing, or lodge a complaint. Contact support@gaicc.org.
This certification privacy notice complements the general Privacy Policy and Exam Privacy Policy published at gaicc.org.