The National Board of Accountants and Auditors ("NBAA," "we," "us," or "our") is an independent Regulatory and Membership Board for the accountancy profession established under the Accountants and Auditors (Registration) Act [Cap 286 R.E. 2002] operating under the Ministry of Finance in Tanzania. The core mandatory functions of the Board include Registration (Candidates, Firms and Members), Regulation (Members and Firms), Development of Accountancy Profession, Standards Setting (Accounting and Auditing) and carrying out such other functions after consultation with the Minister

We are committed to protecting your privacy and processing your personal data in compliance with the Personal Data Protection Act (PDPA), No. 11 of 2022 and other relevant national laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website National Board of Accountants and Auditors, register for NBAA Examinations as a candidate , member, firm and apply for use our professional services.

2. Information We collect:

We collect several types of information to provide services to our candidates, members, firms and the public general public as a whole.

A. Personal Identification Information

When you register, apply for exams, or renew your license, we may collect:

• Identity Data: Full name, Date of Birth, Gender, Nationality, and National ID Number.
• Contact Data: Postal address, email address, and phone numbers.
• Professional Data: Education history, employer details, Professional designation (e.g., CPA, CPPM), and Continuing Professional Development (CPD) records.
• Financial Data: Payment details for registration fees, examination fees, and annual subscription dues.

B. Automatically Collected Data (Technical Data)

When you visit our website, we automatically collect:

• Usage Data: IP address, browser type, operating system, access times, and pages viewed.

3. How we use your information.

NBAA uses your data for the following purposes:

• Licensing & Certification: To manage student registration, exam administration, and issuance of practicing certificates.
• Regulatory Maintenance: To manage CPD compliance, handle complaints, and conduct professional audits.
• Communication: To send you updates regarding CPD events, changes in accounting standards, regulatory alerts, and other notices.
• Verification: To respond to third-party verification requests regarding your professional standing (e.g., employers verifying your license status).

4. For what purpose do we process your person data:

NBAA processes your personal data for the following purposes:

• Legal Compliance: To fulfill our statutory obligations as a government regulatory body under Tanzanian law, including the Accountants and Auditors (Registration) Act.
• Enforcement of Regulatory Standards: To monitor compliance with professional ethics, investigate misconduct, and impose sanctions where necessary.
• Policy Development & Research: To analyze anonymized data for the purpose of improving regulatory frameworks, examination standards, and continuing professional development (CPD) policies.
• Public Interest Functions: To carry out functions mandated by the government in the public interest, including maintaining the integrity of the accounting profession.

5. Disclosure of your information.

We do not sell or rent your personal data. As a government body, we do not share your data with external service providers. However, we may share your data with:

• Government Authorities: The Ministry of Finance, the Personal Data Protection Commission (PDPC), or other legal bodies where required by law.
• Other Regulatory or Law Enforcement Bodies: Where necessary for the prevention, investigation, or prosecution of offenses, or to comply with a legal obligation.
• Professional Networks: We publish a directory of registered accountants. Members cannot opt out of being listed in the official public directory, as this listing is a requirement of maintaining your professional standing with NBAA.

 6. Data Security and Retention.

• Security: We implement strict security measures, encryption of sensitive data in transit and at rest, to protect your data from unauthorized access or alteration.
• Retention: We retain your data for as long as your registration is active and thereafter as required by Tanzanian legal and audit retention requirements.

7. Your privacy rights.

Under the PDPA 2022, you have the right to:

1. Access: Request a copy of the data we hold about you.
2. Rectification: Correct inaccurate or incomplete data.
3. Erasure (Right to be Forgotten): Request deletion of your data, subject to legal retention requirements.
4. Objection: Opt-out of marketing communications.
5. Complaint: Lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe we have violated the Act.

8. Contact Us

For any questions regarding this policy, to request data correction, or to report a breach, please contact the NBAA Data Protection Officer at: dismas.albert@nbaa.go.tz

By using the NBAA website, you acknowledge that you have read and understood this Privacy Policy.