How the Global AI Standards Body collects, uses, and protects personal information: written to meet the GDPR (EU/UK), the CCPA/CPRA (California), and PIPEDA (Canada).
Effective date: July 2026 · Data controller: Global AI Standards Body (GAISB) · Privacy contact: privacy@gaisb.org
GAISB is the vendor-neutral standards body that governs the GAISB certification programs, the Authorized Training Partner (ATP) network, the Certified GAISB Instructor program, and the Public Verification Registry at registry.gaisb.org. This policy covers this partner website, the ATP Portal, and the Instructor Portal.
| Purpose | Lawful basis |
|---|---|
| Operating the ATP and Instructor programs — applications, agreements, onboarding, ordering, support | Performance of a contract (Art. 6(1)(b)) |
| Certification integrity — exams, instructor review, quality assurance, registry publication | Legitimate interests (Art. 6(1)(f)) and contract |
| Invoicing, tax, and accounting | Legal obligation (Art. 6(1)(c)) |
| Analytics and marketing cookies, newsletters | Consent (Art. 6(1)(a)) — withdrawable at any time |
On your first visit we ask for consent before setting anything non-essential. Your choice is stored locally and can be changed any time via Cookie Settings.
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Site function, security, and recording your consent choice | Always active |
| Functional | Preferences such as language or region | Opt-in |
| Analytics | Aggregated usage statistics to improve the portal | Opt-in |
| Marketing | Campaign measurement and partner communications | Opt-in; disabled by a "Do Not Sell or Share" opt-out or a GPC signal |
This site loads typefaces from Google Fonts, which involves transmitting your IP address to Google when fonts load. See Google's privacy policy for details.
GAISB does not sell personal information, and does not share it for cross-context behavioral advertising. We disclose personal information only to service providers acting under contract for us (hosting, payment processing, exam delivery, e-signature, and email) and where required by law. Certification records are published to the Public Verification Registry as part of the credential itself: holder name, credential, status, and dates, so employers and regulators can verify authenticity.
We operate globally. Where personal data is transferred out of the EEA, UK, or Canada, we rely on appropriate safeguards, including Standard Contractual Clauses and processor commitments providing an essentially equivalent level of protection.
We keep personal data only as long as needed for the purposes above: application and contact records for the life of the relationship plus legal limitation periods; financial records per tax law; certification and registry records for the life of the credential (verification is the product of the credential itself); consent records for as long as your choice is in force.
You may request: access to your data; rectification; erasure; restriction of processing; data portability; and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. Write to privacy@gaisb.org; we respond within one month. You may also lodge a complaint with your supervisory authority.
Submit requests to privacy@gaisb.org with "California Privacy Request" in the subject. You may use an authorized agent; we will verify identity before acting. We respond within 45 days (extendable once by 45 days with notice).
We handle personal information in accordance with PIPEDA's ten fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use and retention, accuracy, safeguards, openness, individual access, and challenging compliance. You may request access to and correction of your personal information, and withdraw consent subject to legal or contractual restrictions, by writing to privacy@gaisb.org. If unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
We apply administrative, technical, and organizational safeguards appropriate to the sensitivity of the data: encryption in transit, access controls, least-privilege administration, and processor due diligence. Instructor review videos are accessible only to GAISB faculty for evaluation purposes.
Our services are directed to professionals and organizations. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us data, contact privacy@gaisb.org and we will delete it.
We will post any material change to this policy here with a new effective date, and where required, seek renewed consent. Questions, requests, or complaints: privacy@gaisb.org.