What we collect during your exam
While you sit a remotely proctored GAICC examination, we collect:
- Webcam video — to verify your identity and monitor for exam violations.
- Microphone audio — to detect unusual sounds or conversations during the exam.
- Screen recording — to detect prohibited applications, tabs, or devices.
- Periodic snapshot images — still images captured at intervals during your session.
- Browser activity events — such as tab switches or window changes.
- AI flag events — automated alerts (e.g., “second face detected,” “phone detected”) generated during your session.
- Human proctor review notes — the outcome when a proctor reviews a flagged moment.
Why we collect it
To protect the integrity of GAICC certification exams and ensure results reflect your own unaided performance, consistent with our obligations as an accredited certification body (ISO/IEC 17024).
How AI is used, and human oversight
Face, object (e.g., phone), and audio-activity detection run on your own device, inside your browser—this processing does not send your biometric data to an external AI company.
The detection may raise a flag (e.g., “second face detected”), but no exam result or disciplinary decision is ever made by AI alone.
Every flagged session is reviewed by a trained human proctor, and only a human confirms whether a violation occurred.
Legal basis for processing
- Recording your camera, microphone, and screen (biometric elements): your explicit consent, given before the exam starts.
- Recording as part of exam delivery (non-biometric elements): necessary to perform our contract with you to deliver the examination you registered for.
- AI flag logs and proctor review notes: our legitimate interest in maintaining exam integrity, and our accreditation record-keeping obligations as a certification body.
How long we keep your data
If you dispute or appeal an exam result, your specific recording may be retained beyond the standard period until your case is resolved.
Where your data is stored
Your data is stored securely with our infrastructure providers, each bound by a data processing agreement consistent with GDPR requirements.
Because our providers process data outside the European Economic Area, transfers are protected using Standard Contractual Clauses, a data protection safeguard recognised under EU law.
Who can see your data
Access is limited to authorised GAICC personnel involved in exam integrity review and certification decisions.
Your recording is not shared with anyone outside GAICC, and is not used for any purpose beyond verifying your exam.
Your rights
You have the right to:
- Request access to the personal data we hold about your exam session.
- Request deletion of your data (subject to our retention obligations described above).
- Withdraw consent to recording (this may mean you are unable to sit the exam remotely, since recording is a required part of remote exam delivery).
- Object to processing based on our legitimate interest, or lodge a complaint with your local data protection authority.
Contact us
For any questions about this notice, or to exercise your rights, contact: support(at)gaicc(dot)org
This notice covers exam-specific data processing only. For how we handle your general account information, see our main
Privacy Policy.
