Professional conduct in relation to defaults or unlawful acts guidance

This guidance is intended to provide advice to members on their responsibilities relating to defaults and unlawful acts encountered in the course of professional work and to their position where disclosure is made. This statement covers:

1. circumstances where a member is required or, may be permitted to, disclose confidential information to a third party relating to defaults or unlawful acts without the consent of the party to whom the duty of confidentiality is owed; including the provisions in the Code of Ethics relating to Non-Compliance with Laws and Regulations (‘NOCLAR’).
2. practical guidance on liaising with authorities seeking disclosure of confidential information.

For further details on the scope and application of NOCLAR, please refer to the ICAEW guidance.

For the purposes of this guidance, a default or unlawful act stems from civil or criminal law. A default can be broadly defined as a failure to perform a task or fulfil an obligation required by law. An unlawful act is an act which is contrary to the law. The most common offences members are likely to encounter in their professional work include:

1. fraud or theft which may involve falsification or alteration of accounting records or other documents, misappropriation of assets, suppression or omission of the effects of transactions from documents and other records, recording of transactions without substance, intentional misapplication of accounting policies or wilful misrepresentations of transactions or of the entity's state of affairs;
2. insider dealing, market abuse and other acts of dishonesty which may include payment and receipt of bribes, conspiracy, soliciting or inciting to commit a crime and attempting to commit a crime or operating an anti-competitive cartel;
3. money laundering offences resulting from acquiring, using, possessing, arranging or concealing 'criminal property', failure by a person working in the regulated sector to report known or suspected money laundering to the organisation's Money Laundering Reporting Officer (MLRO) or the National Crime Agency (NCA) or 'tipping off' offences;
4. offences in relation to taxation;
5. health and safety offences which may include corporate manslaughter;
6. breaches of employment legislation including, for example, unlawful discrimination;
7. environmental offences;
8. criminal damage which may include arson with intent to endanger life;
9. perjury and contempt offences;
10. bankruptcy or insolvency offences.

This guidance applies to:

1. all members, provisional members, affiliates, Foundation Qualification Holders, provisional Foundation Qualification Holders and employees of a member firm;
2. member firms and regulated firms;
3. current and previous clients and employers. A member may be required or permitted to disclose confidential information relating to defaults or unlawful acts relating to previous clients or employers.

The guidance is of general application and does not cover:

1. specific duties and responsibilities relating to directors and the reserved areas of audit, investment and insolvency which are dealt with elsewhere (see Appendix for further references);
2. client's taxation affairs which are dealt with in Professional conduct in relation to taxation;
3. information subject to Legal Professional Privilege. If a member believes or knows that the information relating to the default or unlawful act is subject to legal professional privilege, the member is encouraged to seek further advice. Guidance on money laundering reporting requirements in privileged circumstances can be found in the CCAB Anti-money laundering guidance for the accountancy sector.

Members must preserve the confidentiality of information of their clients and employer except where disclosure is justified:

1. by legal authority (see paragraphs 2.11-2.23);
2. in the public interest (see paragraphs 2.24-2.32 and NOCLAR guidance); or
3. to protect a member's own interests (see paragraph 2.33).

Members who are in doubt as to their ethical position may seek advice from the CAEW's Ethics Advisory Services by telephone +44 (0)1908 248 250. Issues can be discussed anonymously. The Ethics Advisory Service is available to all members including their representatives and is a confidential service free from the duty to report professional misconduct within the ICAEW.

Seeking advice from the Ethics Advisory Services does not discharge a member's duty to report misconduct, including their own misconduct. (See The duty to report misconduct).

If a member suspects that a client or employer or someone acting for a client or employer is committing or has committed a default or unlawful act, a member should, where appropriate, consider the matter to obtain an understanding of the nature of the act and the circumstances in which it has occurred. Not all suspicions turn out to be well founded. Unless otherwise required, disclosure of suspected defaults or unlawful acts prematurely can be detrimental to the member, employer and/or clients. A member should not disclose suspicions of defaults or unlawful acts unless required to do so by law, the process of law or after careful thought and having taken appropriate advice. Depending on the nature of the default or unlawful act, the member should refer to the provisions on NOCLAR in sections 260 and 360 of the Code of Ethics 

In general, unless there is a good reason not to, a member should first discuss known or suspected defaults or unlawful acts within reporting lines in the employing organisation and/or the client, if appropriate, before disclosing the matter to third parties. Reporting lines may include, but are not limited to, the member's immediate superior, the next level of management, the organisation's Money Laundering Reporting Officer (MLRO) and a corporate governance body, for example, the Audit Committee. Some individuals may also have obligations to report direct to a regulator in certain circumstances, such as those involving matters of material regulatory concern. For example, Health and Safety officers may have obligations to report to the Health and Safety Executive, or approved persons under the Financial Services and Markets Act 2000 to the Financial Conduct Authority.

Any discussions with individuals regarding defaults or unlawful acts should be subject to compliance with the money laundering regulations regarding reporting requirements and 'tipping off' offences (see helpsheets on tipping off). Reports of known or suspected money laundering offences (whether voluntary or required by law) should normally be made to the MLRO without delay or, if the organisation does not have a MLRO, to the National Crime Agency (NCA). The MLRO, if there is one, will determine whether or not a report should be made to the NCA (see CCAB Anti-money laundering guidance for the accountancy sector).

A member may wish to consider taking legal advice in the following situations:

1. where no higher authority exists within the organisation with whom that matter can be discussed;
2. if the member believes that no corrective action will be taken by the relevant individuals and/or organisation; or the members considers the response has been inadequate;
3. if a member believes that the appropriate disclosures to the proper authorities will not be made in a reasonable period of time;
4. where otherwise uncertain how to proceed.

Disclosing information to third parties without a client or employer's consent may be justified, despite the duty of confidentiality. A member may be required or permitted to make a disclosure to a third party if justified:

1. a. by legal authority (see paragraphs 2.11-2.23);
2. b. in the public interest (see paragraphs 2.24-2.32); or
3. c. to protect a member's own interests (see paragraph 2.33).

Proper authorities ²are defined by the courts as those third parties who have a proper interest in receiving such information, for example, law enforcement agencies and regulators. The proper authorities in the United Kingdom may include, but are not limited to, the National Crime Agency, the Crown Prosecution Service, police forces, the Financial Conduct Authority, the Department for Business, Energy and Industrial Strategy, Designated Professional Bodies, Recognised Supervisory Bodies, Recognised Professional Bodies, the Panel on Takeovers and Mergers, the Society of Lloyd's, the Bank of England, local authorities, the Charity Commission for England and Wales, the Office of the Scottish Charity Regulator, the Charity Commission of Northern Ireland and HM Revenue & Customs.

In the absence of consent, a member should consider the following before deciding to disclose confidential information:

1. refer to the organisation's internal procedures for liaising with authorities;
2. identify the authority, agency or regulator making the disclosure request;
3. clarify under what authority disclosure is sought;
4. ensure the extent of the request does not exceed the authority or contravene the law;
5. establish whether the relevant individuals or organisation may be informed of the request or disclosure;
6. keep records of decisions and actions taken (paragraphs 2.34-2.35).

The above points are discussed in greater detail in section 3 'Liaising with authorities seeking disclosures' of this guidance.

Some situations where a member is required to provide confidential information proactively to the proper authorities without the client's or employer's consent and without a request from the proper authorities or process of law, include but are not limited to:

1. knowledge or belief that information would be material in preventing an act of terrorism, or apprehending, prosecuting or convicting a terrorist which must be disclosed as soon as reasonably practicable to the police;
2. knowledge or suspicion of money laundering, formed by an individual in the regulated sector which must be disclosed where appropriate to the organisation's MLRO or the NCA (paragraphs 2.17-2.19);
3. information of material significance, when acting as an auditor or examiner of a charity which must be disclosed to the appropriate charity regulator.

Some situations where a member may be required to disclose information, if requested, to the proper authorities without a client's or employer's consent, include, but are not limited to circumstances surrounding:

1. knowledge or belief that an employer or client has committed fraud (disclosure to the police may be required);
2. certain information when acting as a liquidator (disclosure to the Department for Business,Energy and Industrial Strategy);
3. information given on oath to an inspector appointed by the Secretary of State to investigate the affairs of a company;
4. specified information to the liquidator, administrative receiver or administrator of the client or employer Documents and Records: Ownership, Lien and Rights of Access; or
5. information required by the process of law, for example, pursuant to a Court Order.

A member should take care when communicating relevant facts to others relating to known or suspected money laundering or terrorist activities. Under the Proceeds of Crime Act 2002 and the Terrorism Act 2000, it is a criminal offence to 'tip off' a money launderer or terrorist, or prejudice an investigation. For further discussion, refer to ICAEW's money laundering hub and the helpsheet on tipping off.

A member may be required to disclose information as part of the legal disclosure process or following the service on the member of a witness summons, including a summons to produce documents (see Documents and records: ownership, lien and rights of access).

Sections 260 and 360 of the Code of Ethics entitled Responding to NOCLAR, detail a professional accountant’s responsibility to disclose confidential information where it is in the public interest to do so. These provisions apply to laws and regulations that have a direct effect on material figures in the financial statements, and other laws and regulations that may be fundamental to an entity’s business and operations. Clearly inconsequential matters and misconduct of a personal nature are excluded. For further details on NOCLAR please refer to the guidance.

Examples of situations which may be regarded as being in the public interest, as set out in the Public Interest Disclosure Act 1998 (PIDA) include but are not limited to the disclosure of information where there has been:

1. a criminal offence;
2. a failure or likely failure to adhere to legal obligations;
3. a miscarriage of justice;
4. matters where the health and safety of individuals is endangered or likely to be endangered;
5. damage or possible damage to the environment.

When considering whether or not a disclosure is justified in the public interest, a member should take one or more of the following into account:

1. reliability and quality of information available and degree of suspicion;
2. whether members of the public are likely to be affected;
3. the possibility or likelihood of repetition;
4. whether the individuals or organisation will be willing to disclose the matter and remedy the situation;
5. the gravity of the matter, for example, the size of the amounts involved and the extent of the likely damage;
6. legal or regulatory obligations;
7. legal protection for breach of duty of confidentiality;
8. any legal advice obtained.

A member should consider carefully the approach to be taken to disclosure and to whom it should be made. A member may have a defence to ICAEW's disciplinary proceedings relating to breach of duty of confidentiality if:

1. the member had an honest and reasonable belief that the disclosure is made in the public interest; and
2. such disclosure is made to a proper authority (paragraphs 2.11-2.12).

In order for a 'worker' to be provided with protection under PIDA a 'worker' must make a 'protected disclosure' in 'good faith' to an employer, legal adviser, prescribed person or other appropriate person. In order for a disclosure to qualify as a 'protected disclosure', a 'worker' must have a reasonable belief that the 'protected disclosure' is substantially true. Further information on PIDA is available in ICAEW's Technical Release 17/99.

A member may disclose to the proper authorities information concerning a client or employer where the member's own interests require disclosure of that information. In general, members should only disclose information which is adequate, relevant and necessary in order to allow the protection of their own interests. Examples of such situations include, but are not limited to, the following:

1. to enable the member to defend himself against a criminal charge or to clear himself of suspicion;
2. to resist proceedings for a penalty or civil proceedings in respect of a taxation offence, for example in a case where it is suggested that the member assisted or induced a client or employer to make or deliver incorrect returns or accounts (see 'Professional conduct in relation to taxation');
3. to resist a legal action brought against him;
4. to enable the member to defend himself in disciplinary proceedings (see 'The duty to report misconduct'); or
5. to enable the member to sue for unpaid fees.

In situations where a member discloses confidential information to a third party, a member is encouraged to keep a record of:

1. any consent given;
2. discussions held or decisions taken concerning the disclosure of confidential information;
3. a schedule summarizing disclosures and to whom they were made;
4. copies of relevant documentation; and
5. any legal or other advice obtained.

When liaising with law enforcement agencies, authorities and regulators, it is important that members communicate their position effectively by emphasizing that although they have to comply with laws and regulations and the process of law, they must also consider their duty of confidentiality to their employer and clients. Those charged with enforcing the law and regulations include, but are not limited to, police officers, investigating officers or representatives from organisations such as the Financial Conduct Authority and the Child Support Agency. See the helpsheet on disclosure to police and other enforcement agencies.

A member should consider, as appropriate, the following when liaising with law enforcement agencies, regulatory bodies and other authorities:

1. Refer to the organisation's internal procedures for liaising with authorities.
   A member should refer to the organisation's internal policies and procedures for disclosure of confidential information to authorities.
2. Identify the authority, agency or regulator making the disclosure request.

   A member should identify which authority, agency or regulator the person is purporting to represent. A member should not be afraid to ask for proof of identity and other verification of credentials. If in any doubt, it would be reasonable for a member to ask for time to check the identity of the individual and the organisation, perhaps by telephoning the office of the agency or regulatory authority allegedly being represented. A member must not disclose confidential information to individuals without being satisfied as to the identity of these individuals.

   A member who is approached by an insolvency practitioner or official receiver to disclose confidential information should also establish in what capacity the insolvency practitioner or official receiver is acting. The powers and rights of such individuals vary slightly between roles (see Documents and records: ownership, lien and rights of access).

3. Clarify under what authority disclosure is being sought.

   Some powers are statutory, for example an Act of Parliament may give authority to a particular agency to demand information without further action. Other statutory provisions require the official to take further steps before being able to demand disclosure, for example a court order may be needed.

   A member should check with the individual requesting the disclosure under what powers they are seeking it, preferably obtaining the full reference for the power (for example the Act and Section). If acting under a court order a member should be provided with a copy. Disclosure should not be made without assurance that due process of law has been followed, for example, checking that the order has an official court seal and refers to the relevant party.

4. Ensure the extent of the request does not exceed the authority or contravene the law

   Although it would not be unreasonable to assume that a properly identified individual is ordinarily acting within their power, if a member is in doubt the member should not hesitate to ask for time to check that such powers exist. A member should be careful not to disclose information which is not covered by the authority and its powers. For example, a right to access specific documents under a Court order does not equate to unfettered access to all files.

   A member must also consider whether the information being requested is covered by Legal Professional Privilege. If so, a member is encouraged to seek legal advice.

5. Establish whether the relevant individuals or organisation may be informed of the request or disclosure.

   Wherever possible, consent should be sought from the client or employer, to respond openly to a request for information from law enforcement agencies and authorities acting within their legal powers. However, it should be noted that representatives from law enforcement agencies may approach the member before the client or employer is aware of investigations into their affairs. The matters subject to disclosure may be extremely sensitive. Disclosing the request for information might prejudice an investigation or represent an offence for example, 'tipping off' a money launderer. It is therefore, important that a member establishes if the request and/or disclosure may be discussed with the employer or client.

6. Keep records of decision and actions taken

   Disclosure without a client's or employer's consent represents a departure from generally accepted principles of confidentiality. It is therefore important, for their own benefit, that a member records details of any disclosures made. In most cases, it will be necessary to keep such records confidential (see paragraphs 2.35-2.36).

   If in doubt as to any of the matters referred to above, a member should seek legal advice before disclosing information.

• 18 August 2008
• 1 September 2006