ACAMS Privacy Policy

ACAMS Privacy Policy

Latest updated: February 28, 2025

The Association of Certified Anti-Money Laundering Specialists, LLC (hereinafter together with “ACAMS”, “we”, or “us”) is focused on promoting the development and implementation of anti-money laundering policies and procedures. It is the largest international membership organization dedicated to helping improve the professional knowledge, skills and experience of those dedicated to the detection and prevention of money laundering around the world. 

This Privacy Policy describes the types of personal information we collect, how we collect, use, process, and disclose that personal information, and the choices you can make about how we collect, use, process, and disclose your personal information. 

This Privacy Policy applies to the personal information collected and processed (i) on the websites www.acams.org, www.moneylaundering.com and www.acamstoday.org (individually referred to as our “Website” and collectively referred to as our “Websites”), (ii) as part of our provision of products and services to you (as set out in the terms applicable to your purchase of our Services), and (iii) anywhere else this Privacy Policy is posted. This Privacy Policy applies to personal information collected through our digital properties, services we offer, our events, certifications, e-certificates, webinars and seminars (collectively, our “Services”). This Privacy Policy does not apply to personal information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Websites, nor does it apply to information collected by ACAMS through any other means not identified here. 

Please read this Privacy Policy carefully. By accessing our Websites or using our Services, you agree to us collecting, storing and processing your personal information in accordance with this Privacy Policy. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy), and your continued use of the Websites or Services after we make those changes is deemed to be acceptance of those changes. Please check this page periodically for updates to our Privacy Policy. 

If you reside or are located in the European Economic Area ("EEA") or the United Kingdom (“UK”), ACAMS is the controller of your personal information collected via the Websites and Services.

Table of Contents

Personal Information We Collect
How We Use the Personal Information Collected
Disclosing Personal Information
Cookies and Similar Technologies
Security
International Transfer of Personal information
Retention
Third-Party Websites
EEA and UK Data Subject Privacy Rights
China Data Subject Privacy Rights
Notice for Nevada Residents
Parents/Guardians
Changes to This Privacy Policy
How to Contact Us
Notice for California Residents

Personal Information We Collect

We collect various types of personal information from and about users of our Websites in order to provide and improve the Websites and Services we offer and to communicate with you about our offerings. The personal information we collect includes information (“personal information”):

• by which you may be personally identified, such as any identifier by which you may be contacted online or offline;
• that is about you but individually does not identify you (but when combined with other information that we have access to, it does personally identify you); and/or
• about your internet connection, the equipment you use to access our Websites or Services, and usage details about how you use the Websites and Services. 

We collect your personal information from a range of sources. We combine information that we have about you from various sources, including the information that you have provided to us. We collect information in the following ways:

• Directly from you when you provide it to us.
• Automatically as you navigate through the Websites. Information collected automatically may include usage details, IP addresses, and information collected through cookies or other tracking technologies. We may also collect images or footage of you through CCTV cameras on our premises or at our events where we have posted a notice of recording.
• From third parties, for example, our service providers, including third parties with whom we cohost events.

Personal Information you provide to us: We collect personal information you provide to us through the Websites or as part of the Services, such as when you create an account with us, join an ACAMS local chapter, attend a conference or presentation (either virtually or in-person) hosted by ACAMS, enroll in a course, register to take an ACAMS certification exam, obtain a certification, request informational materials or publications such as our white papers, or attend an event or correspond with us by email, post or any other form of communication for e.g. by way of an enquiry, complaint, accommodation request, or similar concern. The types of personal information you may provide to us are:

• Basic information, such as your name
• Contact information such as your personal and professional mailing address, email and phone number, and professional and educational history
• Payment and billing information
• Account or course login credentials
• Transaction details about purchases and the content of your communications (written, oral or electronic) when you interact with our customer service team
• Information that you provide in community forums, in directories, on social media, or in response to promotions and surveys, such as photos, comments, and reviews
• Audio recordings from customer service calls, for quality and training purposes

Information collected automatically: We automatically collect and store certain types of information about your equipment, browsing actions, and patterns, as well as your use of the Services, such as through the use of “cookies,” pixels and other tracking technologies. The types of personal information we may collect automatically include:

• Course enrollment information, course access dates/times and course completion data
• IP address of the device you are using
• Device ID
• Location of your device
• Browser type • Internet service provider
• Video recordings from CCTV security monitoring on our premises or at our events, for security and crime prevention purposes [(where CCTV is in operation, appropriate on-site signage will make you aware of this)]
• Content interaction information, such as files or content viewed, time spent viewing content, and download information

Information we collect automatically may not by itself personally identify you, but we may maintain or associate it with other information we collect from you or receive from third parties which, when combined with the other information, may be able to identify you and constitute personal information. We treat such information as personal information. 

We use the automatically collected information to help us to improve our Services and deliver better and more personalized experiences with the Websites and our Services, including by enabling us to:

• Estimate our audience size and usage patterns
• Store information about your preferences, allowing us to customize our Services according to your individual interests
• Speed up your searches
• Recognize you when you return to our Websites so that we can return you to where you were on the Website

See our Cookie Policy for more detail about information we collect automatically. Further information is also set out in the Cookies and Similar Technologies section below.

Information from other sources: We may receive information from other sources, such as employers with enterprise accounts, testing centers, social media, third-party platforms and forums, contacts, and business partners (which include our training and referral partners). The type of information we may receive from other sources are:

• Your name, personal and professional mailing address, email and phone number, and information regarding your professional and educational history, including:
  • Testing attendance, data forensics with regards to testing, identity verification documents, testing duration, and test results
  • Profile information, comments, and similar information provided to or on social networks and other forums that connect to us
  • Interests, demographic data, and purchasing behavior
  • Information collected from cookies or similar technologies described below.
  • Aggregate and anonymised collected data
  • Trends and insights based on collective data of all visitors to our websites
• Information collected from you offline or through other channels. For example:
  • Information (you provide when attending a conference, event (in person or online), or other in-person function.
  • Photos, videos and other recordings taken at events.
  • Any feedback given and surveys submitted.
  • Information you provide over the phone, such as when we discuss services, terms and payment. 

Some of the information we collect may not by itself personally identify you, but we may maintain or associate it with other information we collect from you or receive from third parties, which when combined with other information, may be able to identify you and constitute personal information. We treat such information as personal information. 

You are responsible for ensuring the accuracy of personal information you provide to us. Inaccurate information may affect your ability to use the Services, including your certifications, the information you receive when using the Services, and our ability to contact you. 

How We Use the Personal Information Collected: We use, store, and process the information we collect to provide and improve the Services, to support our business functions, and to personalize, provide, measure and improve our advertising and marketing. 

A description of the purposes for which we use the personal information we collect include:

• *To present our Websites and their contents to you
• *To provide you with information, products, or services that you request from us such as membership enrollment, managing certifications and recertifications, and registration for online and in-person events
• *To assess your eligibility for certain certifications and exams
• For customer service and customer support purposes
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection activities
• To facilitate payment or delivery of services requested 
• *To provide you with support and respond to your inquiries, such as to investigate and address your concerns, and monitor and improve our responses
• To manage your account and provide you with notices regarding the Services, including expiration and renewal notices
• If you enrolled in automatic renewal of any of our Services, then to provide you with automatic renewal notice for such Services and bill you and collect payment for such renewals using the payment information provided for such Services;
• *To provide, personalize, measure, and improve your experience with our Websites and to deliver content and product and service offerings based on your advertising customization preferences
• *to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences
• *To send you information about ACAMS products, services, and promotions through emails
• *To administer promotional activities, such as surveys, sweepstakes, contests, and referrals
• *To help maintain and improve the safety, security, and integrity of our Websites and Services
• *For testing, research, analysis, and product development, such as to develop and improve our Websites, Services, databases, other technology assets, and other offerings
• *To support our general business operations
• *To notify you about changes to our Websites or Services
• *To maintain security and detect and prevent crime at our premises (e.g. through the use of CCTV cameras on our premises)
• To provide information to your employer about your use of our services when your employer is known to have paid for your access to our services or is known to us to be reimbursing you for the same
• As mentioned below by the use of cookie or similar third party technologies;
• *to help us design our site to better suit our users’ needs
• *use or distribute and deidentified or aggregate data for any lawful purpose, including without limitation, analytics, benchmarking, and research purposes
• As described to you when collecting your personal information
• To fulfil any other purpose for which you provide it

We may also use your personal information to contact you about our own or third-parties' goods and services that may be of interest to you or to enable us to display advertisements to our advertisers' target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria. For more information about how third-parties might collect your information or make assumptions about whether you meet its target criteria, please see our Cookie Policy. If you do not want us to use your personal information in this way, please adjust your preferences in your user account profile. For more information about exercising your rights with respect to your personal information, please see Your Choices in Relation to Tracking and Online Advertising.

On what basis do we use your personal information? 

• We use the below legal basis to collect and use your personal information. These include:
• To comply with our legal and regulatory obligations.
• Where we have a legitimate interest in doing so, which does not outweigh your interests, including the legitimate interests that have been marked with an asterix in the “How We Use Your Personal Information Collected” section above (“ACAMS Legitimate Basis”).
• Where you have given us your consent. At times we may ask for your consent to allow us to use your personal information for one or more purposes (e.g. in order to send you direct marketing emails). See the section ‘EEA and UK Data Subject Privacy Rights’ below for information about the rights that you have if we process your information on the basis of your consent (“Consent basis”).
• To perform a contract to which you are a party. We may need to process your personal data to provide a service that you request (“Contractual basis”).
• Where necessary to comply with our legal obligations (“ACAMS Legitimate Basis”).

Disclosing Personal Information

We may disclose your personal information to other businesses, entities public bodies and law enforcement agencies, and other third parties where it is required in order for us to perform our obligations under our contract with you, where it is required to provide the goods or services you requested, where it is required by law, or where we have another legitimate interest in doing so, or with your express consent including, but not limited to, as follows:

• To our subsidiaries and affiliates in order provide you with services, or in order to manage our business effectively;
• To contractors, service providers, and other third parties that perform services on our behalf, such as credit card payment processors, event planners and coordinators, venue owners, co-sponsors, sponsors, third party trainers, data management and storage providers, marketers and advertisers, analytics and research companies, and professional advisors;
• To ACAMS chapter boards for communicating with their respective members;
• To law enforcement agencies, regulators, and courts in response to a court order, subpoena, regulatory requirements or similar legal process, to report any activities we reasonably believe to be unlawful, or as otherwise required by law;
• To combat fraud or criminal activity, and to protect our rights, users, and business partners, or as part of legal proceedings affecting ACAMS;
• To another entity in connection with a merger, transfer of data assets, reorganization, divestiture, financing, dissolution, or similar corporate event involving all or part of our business;
• To enforce or apply our Terms of Use and other agreements we have entered into with you, including for billing and collection purposes;
• To the public when we publish our graduate lists on our Websites (where you have given your consent for us to do so);
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of ACAMS, our customers, or others;
• Where it is necessary to respond to a public health emergency, or in an emergency, to protect the safety of your health and property;
• To a reasonable extent, for purposes of carrying out news reporting and media monitoring for public interests;
• as necessary with our exam hosting service, Pearson Vue;
• As necessary with our third-party service provider Test Run for you to be able to take a mock test;
• To provide information to your employer about your use of our services when your employer is known to have paid for your access to our services or is known to us to be reimbursing you for the same;
• to address emergencies or acts of God;
• For any other purpose disclosed by us when you provide the information; and
• Otherwise with your consent. 

See the ‘Security’ section below for information on how we keep your personal information secure when sharing it with others.

Cookies and Similar Technologies

We, as well as third parties that provide content or other functionality for our Services, may use cookies, pixel tags, local storage, and other technologies to automatically collect information through our Websites or Services. These technologies allow us to understand who has interacted with us and also help us to operate our Services more efficiently. These technologies also help us deliver online advertising to you.

• Cookies. Our Websites use cookies that fall into the following categories: Strictly Necessary, Functionality, Performance, Third-Party and Marketing and Advertising. For more information on cookies, please read our Cookie Policy.
• Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded on the Websites or emails, that collect information about users’ engagement on that web page or email. The use of a pixel allows us to record, for example, that a user has visited a particular web page.
• Interest-based advertising. We permit third parties to use technologies on our Websites to collect information about your device and your use of our Services to advertise products and services to you that are tailored to your perceived interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. Such third parties act on our behalf, and we may grant them the right to use your information for their own purposes. For example, one such third party vendor, Google, shows our ads and uses cookies to serve ads based on a user’s prior visits to a Website. We also use data analytics to serve ads based on a user’s prior visits to a Website. For more information on how Google uses your information, please see: How Google uses information from sites or apps that use our services – Privacy & Terms – Google
• Analytics. We also use Google Analytics and Google Analytics Demographics and Interest Reporting to collect information regarding visitor behavior and visitor demographics for some of our Services and to develop content. For more information on how Google uses your information, please see:  How Google uses information from sites or apps that use our services – Privacy & Terms – Google.
• Social Media. Our Websites may include social media features, such as Twitter, Facebook, Instagram, LinkedIn, YouTube or other widgets. These social media companies may recognize you and collect information about your visit to our Websites, or if you choose to "like" or ” share” information from our website through their services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.

For more details on how we use cookies on our websites, please see our Cookie Policy.

Your Choices in Relation to Tracking and Online Advertising

• Users can visit Ad Settings (google.com) for more information about its settings. 
• Users can visit Google Analytics Opt-out Browser Add-on Download Page for information on how to opt-out of Google Analytics.
• To opt-out of third-party interest-based advertising from advertisers and third parties that participate in certain self-regulatory programs, please visit the Network Advertising Initiative and the Digital Advertising Alliance. Alternatively, you may opt-out of this advertising if you are located in the European Union by visiting Your Online Choices. Opt-outs are generally device and browser specific, meaning that you will need to opt-out on each device and browser you use. Please note, even if you opt-out of interest-based advertising, you will continue to receive ads, but they will not be targeted to your interests.
• Users can manage their cookie preferences for our Websites by utilizing the online cookie preference center at the bottom of a Website.
• For California users, please see our Notice for California Residents.

Security

To help protect the privacy and security of your personal information we use reasonable security measures, including administrative, technical, and physical measures. These measures help protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of your personal information. Additionally, we train our colleagues who will have access to your personal information and legally protected data about the importance of confidentiality and maintaining the privacy and security of your personal information. 

While we do our best to protect your personal information, please be aware that no security measures are perfect or impenetrable. If you know or have reason to believe that your personal information has been lost, stolen, misappropriated, or otherwise compromised, please see the final section of this Privacy Policy for ways to contact us.

International Transfer of Personal information

ACAMS operates and processes personal information in multiple jurisdictions. Personal information may be collected, used, disclosed, stored, and processed in a jurisdiction other than where you reside or are located, including in the United States and in other countries including Portugal, United Kingdom, France, and Germany where the third-parties (to whom we may disclose your personal information) listed above are based for the purposes outlined above. These jurisdictions may have data protection laws that differ from your home jurisdiction. 

We will implement appropriate measures to ensure that your personal information remains protected and secure when it is transferred outside of your home country, in accordance with applicable data protection laws. These measures include data transfer agreements implementing standard data protection clauses (e.g. where you are based in the EEA or UK, we may enter into regulator-approved standard contractual clauses with the non-EEA / non-UK information recipient). 

If you require further information about this you can contact us n the contact details listed at the end of this Privacy Policy.

Retention

We keep personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements, where we reasonably believe that there is a prospect of litigation in respect of our relationship with you, and for purposes of our legitimate interests in maintaining such personal information in our records. 

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Third-Party Websites

Any links to third-party websites on our Websites are provided solely as a convenience to you. We do not endorse or make any representations about these websites or any products, materials, or services offered through those websites. Any personal information you provide on these third-party websites is subject to the privacy practices and policies of those websites, and we recommend you review their privacy practices. We do not accept any responsibility or liability for the privacy practices or content of any websites or services that are not operated by or for us.

Data Subject rights

This Privacy Notice is intended to provide you with information about what personal data we collect about you and how it is used.

You may request access to the Personal Data we have about you or may request information about the purpose of the processing, the categories of personal data concerned, third parties who might have received the data from ACAMS, (to the extent not clarified by this Privacy Policy), what the source of the information was (if you didn’t provide it directly to the us, and how long it will be stored.

You have a right to correct (rectify) the record of your personal data maintained by us if it is inaccurate. You may request us to erase that data or cease processing it, subject to certain exceptions. You may also request us to cease using your data for direct marketing purposes by contacting us in writing or by updating your preference in your account. 

When technically feasible, we will at your written request, provide your personal data to you or transmit it directly to another controller.

For questions or complaints concerning the processing of your personal data or if you have any questions regarding your Personal Data or about this Privacy Policy, please contact us at: 

ACAMS
1030 15th Street NW, Suite 550 
Washington, D.C., 20005 
USA 

Email Us: access@acams.org

Website: www.acams.org

Jurisdiction specific data subject rights are detailed below.

EEA and UK Data Subject Privacy Rights

If you are an individual located in the EEA or UK, you also have the following rights in certain circumstances:

• The right to request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• The right to edit, correct, and update your personal information. This enables you to have any incomplete or inaccurate information we hold about you corrected, though we may need to verify the accuracy of the new information you provide to us.
• The right to request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal information to comply with law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• The right to restrict processing of your personal information. This enables you to ask us to suspend the processing of your personal information in one of the following scenarios: (i) if you would like us to establish the accuracy of your information; (ii) where our use of your personal information is unlawful, but you do not want us to erase it; (iii) where you need us to retain the information even if we no longer require it as you need it to establish, exercise or defend legal claims; (iv) where you have objected to our use of your information (see below) but we need to verify whether we have overriding legitimate grounds to use it. 
• The right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your information. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object. You also have the absolute right to object any time to the processing of your personal information for direct marketing purposes. 
• The right to request the transfer of your personal information to you or a third party. We will provide to you, or a third-party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. 
• The right to withdraw your consent, to the extent that we have collected your personal information based on your affirmative informed consent. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.

We will only use your personal information when the law allows us to, and consistent with the terms of this Privacy Policy.

If you wish to contact us in connection with the exercise of your rights listed above, click here. Unless we notify you at the time of your request, we will not charge any fee in connection with the exercise of your rights. In the event that you are not satisfied with the way in which we have handled your personal information, you also have the right to complain to or seek advice from a supervisory authority for data protection issues and/or bring a claim against us in any court of competent jurisdiction. If you are in the UK, you can lodge a complaint with the Information Commissioner’s Office (the UK supervisory authority responsible for enforcing data protection law in the UK). If you are based in the EEA, you can lodge a complaint with the supervisory authority in your home jurisdiction (a list of all EEA supervisory authorities can be found here). However, we would appreciate the opportunity to resolve any complaints or queries that you may have, so we would encourage you to contact us in the first instance.

China Data Subject Privacy Rights

If you are an individual located in China, in addition to the rights provided above, you have the following rights:

• The right to receive information related to your personal information,
• The right to access your personal information,
• The right to correct and rectify your personal information,
• The right to erasure of your personal information,
• The right to object and restrict processing of your personal information,
• The right to data portability, as stipulated by the Cyberspace Administration in China,
• The right not to be subject to automated decision-making,
• The right to withdraw your consent, to the extent that we have collected your personal information, based on your affirmative informed consent, and
• The right to lodge a complaint with the regulator in China. 
•  

We will only use your personal information when the law (including, the Personal Information Protection Law in China (PIPL)) allows us to and consistent with this Privacy Policy. 

If you wish to contact us in connection with the exercise of your rights listed above, click here. 

Notice for Nevada Residents

If you are a Nevada resident, you can opt out of sales of certain covered information that a website operator has collected or will collect about the resident. You can opt-out by clicking Do Not Sell My Personal Information and otherwise managing your preferences in the Cookies Settings at the bottom of the Website.

Parents/Guardians

Neither our Websites nor our Services are directed to or intended for children under the age of 16. We do not knowingly collect any personal information from children under 16. If you are under the age of 16, do not use or provide any information on the Websites, through features of the Websites or through the Services, register on the Website or for the Services, make any purchases through the Websites, purchase any Services, use any of the interactive or public comment features of the Websites, or provide any information about yourself to us, in any manner, including your name, address, telephone number, email address, or any screen name or user name you may use. 

If we become aware that we have unknowingly collected personal information from a child under the age of 16, and we do not have parent or guardian consent on file, we will delete such personal information from our records. If you believe we have collected or are processing personal information from a child under 16 years of age, please Contact Us.

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see California Notice at Collection and Privacy Notice for more information.

Changes to This Privacy Policy

This Privacy Policy may be updated periodically. If we make material changes, we will attempt to let you know via email or other communication. We encourage you to periodically review this page for the latest information on our privacy practices. As long as you continue to use the Services, you agree to this Privacy Policy and any updates we make to it. We will not, however, use your personal information in a manner that is materially different than what we disclosed to you at the time the personal information was collected without your consent.

How to Contact Us

If you have any questions or concerns about this Privacy Policy, contact us at: 

ACAMS
1030 15th Street NW, Suite 550
Washington, D.C., 20005
USA 

Email Us: access@acams.org

Website: www.acams.org

Notice for California Residents

Last Updated: February 28, 2025

This ACAMS California Notice at Collection and Privacy Notice (“California Privacy Notice”) should be read in conjunction with the main ACAMS Privacy Policy as it supplements the ACAMS Privacy Policy and applies solely to all visitors, users and others who reside in the State of California.

This California Privacy Notice applies to information collected on the websites www.acams.org, www.moneylaundering.com and www.acamstoday.org (individually referred to as “Website” and collectively referred to as the “Websites”) and anywhere the Privacy Policy and this California Privacy Notice are posted. This California Privacy Notice applies to information collected through our digital properties, services we offer, our events, certifications, e-certificates, webinars and seminars (collectively, our "Services"). This California Privacy Notice does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Websites, nor does it apply to information collected by ACAMS offline or through any other means not identified here. We have adopted this notice pursuant to the California Consumer Privacy Act of 2018 (“CCPA”) and it applies only to residents of the State of California (“you”).

Scope

Our websites collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household or device ("personal information"). Personal information does not include publicly available information from government records; deidentified or aggregated consumer information, and information excluded from the CCPA's scope, like, health or medical information covered by the Health Insurance Portability and Accountability act of 1996, as amended, and the California Confidentiality of Medical Information Act, clinical trial data, or other qualifying research data, personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or California Financial Information Privacy Act, and the Driver's Privacy Protection Act of 1994.

Notice at Collection

We may collect the following categories of personal information about:

• Identifiers, such as, name, postal address, email address, phone numbers, online identifiers, IP address; 
• Personal Information Categories Listed in the California Customer Records statute, such as name, driver’s license or other photo identification, postal address, phone numbers, employment, employment history;
• Characteristics of Protected Classifications Under California or Federal Law, such as, age, national origin, disability;
• Commercial Information, such as, products or services purchased or considered, other purchasing or consuming tendencies;
• Financial Information, payment and billing information;
• Internet or Other Electronic Network Activity, such as, browsing history, search history, website or advertisement interaction;
• Geolocation Data, such as, IP address, physical location;
• Audio, Video and Other Electronic Data, such as, photos, call recordings, and CCTV footage;
• Professional and Employment-related Information, such as, current or past job history, business contact details, job title or employer;
• Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)), such as education records maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information or student disciplinary records; and
• Inferences drawn from other personal information, such as a profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. 

We do not collect biometric information or sensory data. 

We may use or disclose the personal information we collect for one or more of the following purposes:

• To present our Websites and their contents to you
• To provide you with information, products, or services that you request from us
• To assess your eligibility for certain certifications and exams
• For customer service and customer support purposes
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us
• To facilitate payment for or delivery of Services you request
• To help prevent transactional fraud
• To provide you with support and respond to your inquiries, such as to investigate and address your concerns, and monitor and improve our responses
• To create, maintain, customize and help secure your account with ACAMS
• To manage your account and provide you with notices regarding the Services
• To provide, personalize, measure, and improve our Website experiences and to deliver our content, product and Service offerings based on your advertising customization preferences
• To send you information about our products, services, and promotions
• To administer promotional activities, such as surveys, sweepstakes, contests, and referrals
• To help maintain and improve the safety, security, and integrity of our Websites and applications
• For testing, research, analysis, and product development, such as to develop and improve our Websites, products and services, databases and other technology assets, and offerings
• To support our general business operations
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Websites or Services is among the assets to be transferred
• To notify you about changes to our Services
• To respond to law enforcement requests as required by applicable law, court order or governmental regulation
• As described to you when collecting your personal information
• To fulfill any other purpose for which you provide it
• For any other purpose with your consent

You can opt-out by clicking Do Not Sell My Personal Information or contacting us via the information in the How to Contact Us section of this California Notice at Collection and Privacy Notice.

Sharing of Personal Information

We may share your personal information by disclosing it to a third party for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, ACAMS has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below. In addition ACAMS may share information as permitted or required by law, such as with law enforcement and third parties pursuant to legal requests or proceedings.

Sales of Personal Information

We disclose the following categories of personal information to event sponsors for them to use for their own marketing purposes. Such disclosures may be considered a sale for purposes of the CCPA.

• Identifiers

We also disclose the following categories of personal information to third-party cookie and other ad-tech providers, who may further disclose your information throughout the digital advertising ecosystem. Such disclosures may be considered a sale for purposes of the CCPA.

• Identifiers
• Internet or other electronic activity information
• Geolocation data
• Inferences drawn from personal information such as preferences, characteristics and behaviors.

California Privacy Rights

To the extent provided for by law and subject to applicable exemptions, you have the following rights in relation to the personal information about you that we have collected:

Right to Know: You have the right to request the following information relating to our collection and use of your personal information over the past 12 months:

• Categories of personal information we have collected about you;
• Categories of sources of the personal information we collected about you;
• Business and/or commercial purposes for collecting or, if applicable, selling that personal information;
• Categories of third parties to whom we have disclosed or sold that personal information;
• Specific pieces of personal information we have collected about you;
• Categories of personal information that we have disclosed or sold to a third party for a business purpose; and
• Categories of third parties to whom the residents’ personal information was sold.

Right to Delete: You have the right to request that we delete your personal information. Subject to certain exceptions, we will endeavor to delete your personal information and direct any service provider to delete your personal information. Once we receive your request and confirm your identity (see To Exercise Your Right to Know or Right to Deletion), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent. 
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us. 
• Comply with a legal obligation. 
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or de-identify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action. We do not provide these deletion rights for individuals whose access to services are provide by or through their employment, including where the employer purchases such access directly or is known to us to be reimbursing you for your payment to access the services.

Right to Opt-Out: You have the right to direct us not to sell your personal information. If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.

Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of the rights described above. We will not:

• Deny you services. 
• Charge you higher prices or rates for services because of exercising your consumer rights to your data, including through granting discounts or other benefits, or imposing penalties. 
• Provide you a different level or quality of services. 
• Suggest that you may receive a different price or rate for services or a different level or quality of services. 

However, we may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels (See Notice of Financial Incentives). Any legally-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time. We do not currently provide any such incentives.

To Exercise Your Right to Know or Right to Deletion

Right to Know: California residents may make up to two requests to know within a 12-month period. If you would like to exercise your rights, you can fill out our online webform or email us at access@acams.org.

Right to Deletion: California residents may fill out our online webform or email us at access@acams.org to request that we delete your personal information.

Verification: Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require you to login to your account or we must be able to match certain information you provide us to the information we maintain about you. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of such person.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. 

Certain requests may require us to obtain additional personal information from you. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please email access@acams.org.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. 

We will deliver our written response electronically to the email address we have on file for you, regardless of the email address from which you submitted the request. 

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity. 

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

To Exercise Your Right to Opt-Out

You can opt-out of any sales of your personal information by clicking Do Not Sell My Personal Information and managing your preferences in the Cookies Settings.

Minors Under Age 16

We do not “sell” the personal information of consumers we know to be under 16 years of age.

Requests Submitted by Authorized Agents

In certain circumstances, you are permitted to use an authorized agent, as that term is defined by the CCPA (“Authorized Agent”), to submit requests on your behalf where you provide sufficient evidence that the requestor is an authorized agent with written permission to act on your behalf and you successfully verify your own identity with us. An Authorized Agent can make a request on a California resident’s behalf by:

• For requests to know and delete: (1) providing a valid power of attorney under the laws of California; or (2) providing sufficient evidence to show that the California resident has (i) provided the Authorized Agent signed permission to act on their behalf, (ii) verified their own identity directly with us, and (iii) directly confirmed with us that they have provided the Authorized Agent permission to submit the request on their behalf.
• For requests to opt out: submitting a signed permission demonstrating that the Authorized Agent has been authorized by the California resident to act on their behalf.

Notice of Financial Incentives

From the time to time, we may run sweepstakes, contests, or other offers and promotions (collectively, “Programs”) that may be deemed “financial incentives” in relation to our collection of personal information under CCPA. a business may offer financial incentives for the collection, sale or deletion of California residents’ personal information, provided it is not unjust, unreasonable, coercive or usurious, and is made available in compliance with applicable transparency, informed consent, and opt-out requirements. We may run sweepstakes or contests from time to time. Please refer to the terms and conditions of each Program for additional information about the Program, including how eligible consumers can opt-in or opt-out of the Program at any time. In order to enter a Program, you may be required to provide us or a service provider acting on our behalf with certain personal information, such as identifiers including your name and contact information (“Rewards Data”). If you submit your entry in accordance with the applicable Program’s rules, you may be entered into the Program and will get a chance to win a prize or receive another benefit from us. The value of Rewards Data is related to the value of your information and the costs associated with offering the Program.

California "Shine the Light"

In addition to the rights described above, California’s “Shine the Light” law permits California residents to request certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. To make such a request, please send an email to access@acams.org. This request may be made no more than once per calendar year.

Do Not Track

Some web browsers may transmit “do-not-track” signals to websites with which the user communicates. Because there is a wide variety of standards for "do-not-track" signals, our Websites will generally not respond any differently if you transmit "do-not-track" signals.

Notice of Automatic Renewal

The Product or Services, we offer, automatically renews. If you enrolled in automatic renewal of any of our Services, then to provide you with automatic renewal notice for such Services and bill you and collect payment for such renewals using the payment information provided for such Services.

Changes to this Privacy Notice

This California Privacy Notice may be updated periodically. If we make material changes, we will attempt to let you know via email or other communication. We encourage you to periodically review this page for the latest information on our privacy practices. As long as you continue to use the Services, you agree to this California Privacy Notice and any updates we make to it. We will not, however, use your personal information in a manner that is materially different than what we disclosed to you at the time the personal information was collected without your consent.

How to Contact Us

If you have any questions or concerns about this California Privacy Notice, contact us at:

ACAMS
1030 15th Street NW, Suite 550
Washington, D.C., 20005
USA 

Email Us: access@acams.org

Website: www.acams.org