Do I legally have to tell my clients I am using an offshore bookkeeper?

Yes — you have a professional disclosure obligation under CPA Australia and CA ANZ ethical standards. You are not required to seek client permission, but you must disclose in your engagement letter that work may be performed by offshore team members under your supervision. The Privacy Act 1988 also requires you to inform clients if their personal data may be disclosed to overseas recipients. Failure to disclose creates professional conduct and privacy law risk.

Do I need to name the country — India — in my engagement letter?

Under the Privacy Act 1988, you should specify the country or at minimum note that the overseas recipient may be in India. The Privacy Act requires you to inform clients 'to the extent it is practicable' where overseas disclosure may occur. CPA Australia guidance does not require you to name the specific firm or the bookkeeper's name — the engagement letter disclosure of the offshore arrangement and the country is sufficient.

What if a client refuses to consent to offshore bookkeeping?

You are not seeking client consent — you are disclosing the arrangement. Clients do not have a veto over how you staff your practice. However, if a client strongly objects and you cannot accommodate their preference with in-house staff, you may need to consider whether the engagement is viable. In practice, fewer than 5% of clients object when the disclosure is framed correctly around supervision, quality, and your firm's professional responsibility for all work.

Can I just add offshore disclosure to new client engagement letters and not update existing ones?

You should update existing engagement letters when they are next due for renewal — typically annually. For existing clients where you are introducing offshore bookkeeping for the first time, send a written notice (email is sufficient) before the work begins. You do not need to pause the client relationship while waiting for a new signed engagement letter, but written notice of the change is required.

What happens if I do not disclose the offshore arrangement?

Professional conduct risk: CPA Australia and CA ANZ can investigate complaints about undisclosed subcontracting arrangements. Privacy Act risk: the Office of the Australian Information Commissioner can issue fines for undisclosed overseas data disclosure, with penalties up to A$50 million for serious or repeated breaches under the 2022 Privacy Act amendments. Reputational risk: if a client discovers the arrangement without prior disclosure, the trust damage is significantly worse than proactive disclosure would have been.

Telling Clients You Use Offshore Bookkeeping

What Your Professional Disclosure Obligation Actually Requires

Two separate obligations apply when you outsource bookkeeping to an offshore team. The first is your professional conduct obligation. CPA Australia's Code of Ethics and CA ANZ's Code of Ethics both require members to be transparent about how services are delivered. Where work is performed by a subcontractor — offshore or domestic — the client should be made aware that this is the case. This does not require client consent; it requires client awareness.

The second obligation is under the Privacy Act 1988. When you share a client's personal information (name, TFN, ABN, bank details, financial records) with an overseas recipient, the Privacy Act requires you to take reasonable steps to notify the individual that their information may be disclosed overseas, and the countries where the recipient is located. This applies whether the overseas recipient is a bookkeeping firm in India, a cloud server in the United States, or any other overseas service provider.

You must disclose: that work is performed by offshore team members, and that India is the country of the overseas recipient
You do not need to disclose: the specific firm name, the individual bookkeeper's name, or the pricing of the offshore arrangement
You do not need: a separate signed consent form — engagement letter disclosure is sufficient
Timing: disclosure must occur before client data is shared with the offshore team — not after

Engagement Letter Wording

The simplest and most professionally defensible approach is to add a standard offshore disclosure clause to your engagement letter template. The wording below satisfies both the professional conduct and Privacy Act obligations and has been used by Australian accounting practices in CPA Australia member compliance reviews.

"In performing the services described in this engagement letter, we may engage the services of qualified offshore bookkeeping professionals based in India, who work under the direct supervision of our practice. All work is reviewed and signed off by a senior member of our team before delivery to you. Your financial data is shared with our offshore team members under a strict confidentiality agreement. By proceeding with this engagement, you acknowledge that your information may be accessed by offshore team members in India for the purpose of completing the agreed services."

This clause works because it discloses the arrangement, identifies India as the country, establishes your supervisory responsibility, references the confidentiality agreement, and obtains acknowledgement. A client who signs an engagement letter containing this clause cannot later claim they were not informed.

For existing clients where you are introducing offshore bookkeeping for the first time, an email notification before the work begins is sufficient if your existing engagement letter does not contain the disclosure clause. The email should contain substantially the same wording and request a reply acknowledging receipt.

How to Frame the Conversation if a Client Asks

Most clients do not read engagement letters in detail. For those who do ask about the offshore arrangement, the framing that consistently works is built around three points: your firm's supervisory responsibility, the professional qualifications of the Indian team, and the practical benefit to the client.

What the Client Says	What to Say in Response
"I did not know you used offshore staff."	"It is disclosed in your engagement letter, and I am happy to walk you through how the arrangement works. Our Indian team are ICAI-qualified accountants — India's equivalent of CA ANZ — and all work is reviewed and signed off here before it reaches you."
"Is my data safe in India?"	"Yes — we have a confidentiality agreement and data processing agreement with the Indian firm. Your data is accessed only for the purpose of completing your bookkeeping and is not stored or shared beyond that. The same Privacy Act protections apply."
"I would prefer my books done locally."	"I understand. The work is completed under our supervision — the quality and accuracy that reaches you is our responsibility, regardless of where the processing is done. Our senior staff review every file before delivery to you."
"Why are you outsourcing to India?"	"It allows us to maintain competitive pricing for compliance work while ensuring the same quality standards. The alternative would be to increase our fees significantly to cover local junior staff costs, which are currently A$70,000–A$90,000 per year for a bookkeeper."
"Will this affect the service I receive?"	"No — your point of contact, turnaround times, and quality standards are unchanged. The Indian team works to the same file standards and review process as our in-house staff."

Clients Most Likely to Push Back

Not all client segments respond the same way to offshore disclosure. Being prepared for the segments most likely to raise concerns prevents the conversation from catching you off guard.

Government contractors and regulated industries — some government contracts and regulated industry agreements contain clauses about data sovereignty (data must remain in Australia). Review any client with a government contract before sharing their data offshore. If in doubt, treat that client's files as in-house only.
High-net-worth individuals with complex structures — clients with significant assets and complex family trust structures sometimes have a heightened sensitivity to privacy. The framing for these clients should emphasise the individual-level confidentiality agreement, not the cost efficiency argument.
Medical and allied health practices — health information is sensitive data under the Privacy Act. If your accounting client is a medical practice and their bookkeeping involves patient billing data, you have heightened obligations. Confirm with a privacy adviser before sharing this category of data with an offshore team.
Older business owners — some longer-tenured clients have a strong preference for local staff and may interpret offshoring as a change in the nature of the relationship. For these clients, leading with "nothing changes about who you deal with or the quality of what you receive" before explaining the back-office arrangement tends to reduce resistance.

What Happens if You Do Not Disclose

Non-disclosure of offshore outsourcing creates three categories of risk that are each serious in their own right.

Professional conduct risk. CPA Australia and CA ANZ can investigate complaints from clients about undisclosed subcontracting. A complaint finding against you can result in a reprimand, conditions on your practice, or in serious cases, suspension. The risk is not theoretical — professional bodies have investigated members for exactly this issue.

Privacy Act risk. The Office of the Australian Information Commissioner (OAIC) can investigate and issue fines for undisclosed overseas data disclosure. Under the 2022 Privacy Act amendments, penalties for serious or repeated privacy breaches can reach A$50 million for organisations. Individual practitioners can also face personal liability. The OAIC has become more active in enforcement since the 2022 amendments.

Reputational risk. If a client discovers the offshore arrangement independently — through a data incident, a conversation with another client, or by recognising the Indian firm's name on a document — the absence of prior disclosure makes the trust damage far worse. Proactive disclosure almost never results in client loss. Discovered non-disclosure frequently does. For related compliance guidance, see our App 8 and TPB compliance guide and the ATO compliance guide for offshore bookkeeping.

About This Article
Written by Sharma Jyoti, CA (ICAI) — Founder, Sharma Jyoti and Co. We are an ICAI-registered Chartered Accountant firm providing outsourced bookkeeping and accounting services to Australian, US, UK and Canadian businesses. Learn more about our firm →

Frequently Asked Questions

Yes — you have a professional disclosure obligation under CPA Australia and CA ANZ ethical standards, and a separate obligation under the Privacy Act 1988. Disclosure in your engagement letter is required before client data is shared with the offshore team. You do not need client permission — you need to inform.

Under the Privacy Act 1988 you should specify the country to the extent practicable. Naming India is sufficient — you do not need to name the specific firm or the individual bookkeeper. CPA Australia guidance does not require you to name the firm, only to disclose the offshore arrangement and the country.

You are disclosing, not seeking consent. Clients do not have a veto over how you staff your practice. In practice, fewer than 5% of clients object when the disclosure is framed around supervision and quality. If a client strongly objects and in-house capacity is unavailable, you may need to consider whether the engagement is viable.

Update existing letters at next renewal. For clients where you are introducing offshore bookkeeping for the first time before renewal, send a written email notice before the work begins. Written notice is required — verbal disclosure is not sufficient under the Privacy Act.

Professional conduct risk (CPA Australia or CA ANZ investigation), Privacy Act risk (OAIC can issue fines up to A$50 million for serious breaches under 2022 amendments), and reputational risk if a client discovers the arrangement without prior disclosure. Non-disclosure is significantly more damaging than proactive disclosure.

How to Tell Clients You Are Using an Offshore Bookkeeping Team