Audit and Assurance · Professional ethics and ACCA's Code of Ethics and Conduct

Confidentiality, Conflicts of Interest and Money Laundering in ACCA Audit and Assurance

Updated 11 October 2026 · Fact-checked

Auditors must keep client information confidential unless disclosure is permitted or required by law, authorised by the client, or there is a professional right or duty to disclose. Conflicts between clients need disclosure, safeguards such as separate teams, or refusal. Suspected money laundering must be reported internally, and you must never tip off.

Understand Confidentiality, Conflicts of Interest and Money Laundering

Confidentiality is a fundamental principle in ACCA's Code of Ethics and Conduct. You must not disclose information gained through professional work to others, and you must not use it for personal advantage or for anyone else's. The duty continues after the engagement ends and also applies in social settings, for example talking about a client at a dinner.

The duty is not absolute. Disclosure is allowed or required in three broad cases: when the client (or the person with the right to the information) has given permission, when the law requires it, and when there is a professional right or duty to disclose, for example to comply with technical standards, respond to a regulator's enquiry, or defend yourself in legal proceedings. Even where disclosure is permitted, you should consider whether it is in the public interest and how much to disclose. Where the exception is a judgement call, take legal advice and consult your professional body before acting.

Confidentiality is not the same as legal privilege. Confidentiality is an ethical duty owed by the professional to the client. Legal privilege is a legal right, mainly covering confidential communications between a client and their lawyer for legal advice. Auditors generally do not have privilege in the same way, so a court or regulator can often compel disclosure of audit working papers. Treat this as a general point; the exact rules differ by country.

A conflict of interest arises when your firm's interests, or the interests of two clients, pull in different directions. Examples are acting for two clients competing for the same takeover target, or advising a buyer and a seller in the same deal. This is a threat to objectivity and sometimes confidentiality. Safeguards include telling both clients, separate engagement teams, information barriers, and independent review. If the conflict cannot be managed, you decline or withdraw.

Money laundering is turning the proceeds of crime into apparently legitimate funds. Auditors are usually in a regulated sector with legal duties to have procedures, carry out client due diligence, and report suspicion. Staff report to the firm's nominated officer (MLRO), who decides whether to report to the authorities. Tipping off means alerting the suspect that a report has been or may be made. It is a criminal offence in many jurisdictions. Report suspicion promptly and keep quiet.

Key rules to remember

Permitted disclosure of confidential information: Client consent OR required by law OR professional right or duty to disclose; Check each route in turn. Disclosure required by law overrides the duty of confidentiality, and consent should ideally be in writing.
Factors before disclosing: Consider: harm to others if not disclosed, whether facts are known and proven, who will receive the information, and legal advice; Use these to justify a disclosure in the public interest. Disclose only what is necessary.
Confidentiality vs privilege: Confidentiality = ethical duty to the client; Privilege = legal right protecting certain lawyer-client communications; Confidentiality does not stop a court or regulator from demanding information.
Conflict of interest response: Identify conflict → disclose to affected parties → apply safeguards → decline or withdraw if unmanageable; Consent of affected clients is usually required to continue.
Money laundering reporting route: Suspicion → report to nominated officer (MLRO) → MLRO decides on external report → no tipping off; Do not investigate yourself or discuss it with the client.

How to solve Confidentiality, Conflicts of Interest and Money Laundering questions

Use this method for any scenario question on confidentiality, conflicts or money laundering.

1Identify the issue: is it disclosure of information, a conflict between clients or interests, or suspected money laundering?
2Name the principle or rule: confidentiality, objectivity, or the law on money laundering and tipping off.
3Apply the facts: who holds the information, who wants it, and is there consent, a legal requirement or a professional duty?
4Identify the threat or risk, for example self-interest, advocacy or familiarity for conflicts, or criminal liability for money laundering.
5Recommend specific actions: disclose or refuse, apply named safeguards, or report to the MLRO.
6Add what not to do, such as tipping off or discussing the matter with the client.
7Document the decision and the reasons, and take legal or professional advice where unsure.

Quickest way: Three-question triage

When to use it: Use for Section A and B objective questions where you have about 3 minutes.

Ask: is this confidentiality, conflict or money laundering? Match to the right rule.
For disclosure: look for consent, legal requirement or professional duty. If none fits, the answer is usually not to disclose.
For conflicts: the answer is rarely just to carry on. Look for disclosure plus safeguards, or withdrawal.
For money laundering: look for report to the MLRO and no tipping off. Reject any option that tells the client or investigates alone.
Remove options that are absolute, such as always or never disclose, unless the rule really is absolute.

Common mistakes in Confidentiality, Conflicts of Interest and Money Laundering

Saying confidentiality is absolute and the auditor can never disclose.
Students remember the principle but forget the exceptions.
Fix: Always list the three routes: consent, legal requirement, professional right or duty.
Treating confidentiality and legal privilege as the same thing.
Both involve keeping information private.
Fix: State that confidentiality is an ethical duty, while privilege is a legal right that does not generally cover auditors' work.
Resolving a conflict by simply telling the client and carrying on.
Disclosure feels like a complete answer.
Fix: Add safeguards such as separate teams and information barriers, and say when you would decline or withdraw.
Telling the client about a suspicion of money laundering to give them a chance to explain.
It seems fair and open, and students confuse it with normal audit communication.
Fix: Report only to the MLRO. Telling the client risks tipping off, which is an offence.
Deciding for yourself whether the suspicion is strong enough and not reporting.
Students think they must be sure before reporting.
Fix: Suspicion is enough to report internally. The MLRO judges whether an external report is needed.
Listing threats without recommending an action.
Students stop at identifying the problem.
Fix: Every point in a written answer should end with what the auditor should do.

Worked examples

Example 1

Your audit client, Ravi Ltd, has asked you to share its draft financial statements with a bank that is considering a loan. Separately, a competitor of Ravi Ltd, also your client, has asked for information about Ravi Ltd's pricing. Explain the confidentiality position for each request. (6 marks)

Show the solution

Bank request: the information belongs to Ravi Ltd. Disclosure is allowed with the client's consent, so you obtain written authority from Ravi Ltd before sharing anything.
Even with consent, you disclose only what the client has authorised and agree the form of any communication.
Competitor request: there is no consent, no legal requirement and no professional duty. Disclosing would breach confidentiality.
You must also not use Ravi Ltd's information to benefit the competitor, as that is a misuse of confidential information.
Because you act for both, consider a conflict of interest and apply safeguards such as separate teams and information barriers.

Answer: Share with the bank only if Ravi Ltd consents, and only what is authorised. Refuse the competitor's request, as no exception applies, and manage the resulting conflict with safeguards.

Example 2

During the audit of Sita Ltd, a junior finds large cash deposits from unknown overseas parties that do not match the business. She suspects money laundering and asks whether to ask the finance director about them. Advise her. (5 marks)

Show the solution

Recognise that the facts give rise to suspicion of money laundering, and that suspicion is enough to trigger reporting.
She should report her suspicion promptly to the firm's nominated officer (MLRO) rather than deciding herself whether it is serious enough.
She must not ask the finance director in a way that reveals the suspicion, because this could be tipping off, which is a criminal offence in many jurisdictions.
Normal audit questions about the nature of transactions may continue, but she must not hint that a report has been or will be made.
The MLRO decides whether to report externally to the authorities. The firm should document the matter and consider whether to continue acting for the client.

Answer: She should report to the MLRO immediately, not alert the finance director, and leave the MLRO to decide on any external report. Discussing the suspicion with the client could be tipping off.

Exam tips

For disclosure scenarios, always test consent, legal requirement and professional duty before concluding. Name which one applies.
For conflict questions, give safeguards and a fallback. Examiners reward the phrase decline or withdraw if the conflict cannot be managed.
In money laundering questions, mention the MLRO and tipping off by name. These are the usual mark-earning points.
In objective questions, reject answers that tell the client or investigate alone, and answers that say disclosure is never allowed.

Confidentiality, Conflicts of Interest and Money Laundering in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Confidentiality, Conflicts of Interest and Money Laundering: frequently asked questions

When can an auditor disclose confidential client information?

When the client consents, when the law requires it, or when there is a professional right or duty to disclose, such as responding to a regulator or defending the firm in legal proceedings. Even then, disclose only what is necessary and consider taking legal advice.

What is the difference between confidentiality and privilege?

Confidentiality is an ethical duty not to disclose client information. Privilege is a legal right that protects certain communications, mainly between lawyers and clients, from being forced into disclosure. Auditors generally cannot rely on privilege, so confidentiality does not stop a court demanding information.

How do you manage a conflict of interest between two audit clients?

Identify the conflict, tell the affected clients and obtain consent, then apply safeguards such as separate teams, information barriers and independent review. If these do not reduce the threat to an acceptable level, the firm should decline or withdraw from one engagement.

What is tipping off in money laundering?

Tipping off is alerting a person that a suspicion has been reported or an investigation may follow, which could prejudice it. It is a criminal offence in many jurisdictions. Report suspicions only to the nominated officer and do not discuss them with the client.