Why Your Standard Engagement Letter Is Not Enough
Most Australian accounting practices use a standard engagement letter template — either from CPA Australia, Chartered Accountants ANZ, or their own practice management system. These templates cover services, fees, professional obligations, and dispute resolution. What they do not cover is the use of an overseas subcontractor to perform preparation work.
This gap matters for three reasons. First, Privacy Act 1988 APP 8 creates a specific obligation when personal information is disclosed to overseas recipients. Second, your PI insurer may have specific requirements around subcontracting. Third, if a client later objects to the arrangement — or if something goes wrong — your engagement letter is your first line of defence. A standard template that makes no mention of offshore processing is silent on the key issue.
The fix is straightforward: add six specific clauses to your existing template. None of them require legal drafting expertise. Together, they create a clear, compliant record that protects you, informs the client, and satisfies the Privacy Act framework.
The Six Clauses Every Offshore Bookkeeping Engagement Letter Needs
| # | Clause | What it covers | Why it matters |
|---|---|---|---|
| 1 | Offshore disclosure (APP 8) | Names the overseas contractor country; confirms data-handling agreement is in place | Privacy Act compliance; prevents future disputes |
| 2 | Scope — preparation vs lodgement | Lists what is done offshore and what requires a registered Australian agent | Prevents client confusion about who lodges with the ATO |
| 3 | QA and responsibility | Confirms your firm reviews all work before delivery; your firm is accountable for quality | PI insurance alignment; reassures client |
| 4 | Confidentiality and data security | States that the overseas contractor is bound by an NDA and data-processing agreement | Addresses data security concern; documents your due diligence |
| 5 | Subcontractor terms | Confirms the overseas contractor is your subcontractor, not the client's counterparty | Maintains your firm as the single point of accountability |
| 6 | Price review mechanism | Annual CPI or fixed-percentage price adjustment trigger | Prevents margin erosion as costs increase over time |
Clause 1 — The APP 8 Offshore Disclosure
This is the most legally significant clause. Privacy Act 1988 APP 8 requires that before personal information is disclosed to an overseas recipient, you either ensure the recipient is contractually bound to privacy standards equivalent to the Australian Privacy Principles, or you obtain the individual's consent. The engagement letter is the mechanism for both.
This wording covers both the APP 8 contractual-protection pathway and the consent pathway. It also records the client's acknowledgment, which is valuable if the arrangement is ever questioned.
Clause 2 — Scope: Preparation vs Lodgement
Clients frequently confuse bookkeeping preparation with lodgement. Your engagement letter must draw this line explicitly, because the consequences of crossing it — lodging a BAS without a registered BAS agent — are serious.
Clause 3 — QA and Responsibility
This clause is important both for the client's confidence and for your PI insurer. It confirms that offshore preparation work passes through your review before delivery, and that your firm — not the Indian CA firm — is the entity the client holds accountable.
Clause 4 — Confidentiality and Data Security
Clause 5 — Subcontractor Relationship
Handling Existing Clients
For clients already engaged under a standard letter that makes no mention of offshore processing, issue an updated engagement letter or a variation addendum. A brief covering email frames it correctly:
"As part of our ongoing commitment to delivering high-quality bookkeeping services, we are updating our engagement terms to reflect our use of an ICAI-qualified Indian CA firm for bookkeeping preparation. This does not change the services you receive, the price you pay, or the team member you contact — it simply formalises the arrangement in our engagement documentation for compliance purposes. Please review and sign the attached updated engagement letter at your earliest convenience."
Most existing clients sign without comment. For clients who raise questions, the client objections guide provides specific response scripts for each concern type.
Do not delay updating existing clients' letters indefinitely. If you are already using an Indian CA firm and have not updated your engagement letters, you are currently processing personal information offshore without the required Privacy Act documentation. This is the higher-risk position — update letters as quickly as practically possible.
PI Insurance — What to Check
Before using an offshore subcontractor for the first time, notify your PI insurer. Most professional indemnity policies for accounting practices cover subcontracted work, but some have specific conditions around overseas subcontractors. Check:
- Whether your policy explicitly covers offshore subcontractors
- Whether the subcontractor must be named or whether a generic "overseas subcontractor" description is sufficient
- Whether there are jurisdictional exclusions that might apply to India
- Whether you are required to maintain a copy of the subcontractor's own PI policy
A 15-minute conversation with your insurer or broker answers these questions definitively. Most practices find that their existing policy covers offshore subcontracting with no adjustment required — but documenting that you checked is itself useful evidence of due diligence.
Written by Sharma Jyoti, CA (ICAI) — Founder, Sharma Jyoti and Co. We are an ICAI-registered Chartered Accountant firm providing outsourced bookkeeping and accounting services to Australian, US, UK and Canadian businesses. Learn more about our firm →