Last updated: 7 July 2026
The IELTS (International English Language Testing System) test is jointly owned by the British Council, IELTS Australia Pty Ltd and Cambridge English. This privacy notice explains how the British Council, as Data Controller of the IELTS tests administered by the British Council, will collect, use, share and retain the personal information you provide to us when you register for and take an IELTS test.
For the IELTS UKVI test, the British Council operates under a concession from the UK Home Office and acts as Data Processor. In this context, we will process your personal data on the documented instructions of the UK Home Office, which determines the purposes of the processing. We may exercise limited discretion in relation to the technical and organisational means used to carry out those instructions.
The British Council complies with the UK Data Protection Act 2018 incorporating the UK GDPR as retained version of the General Data Protection Regulation EU 2016/679, the Data (Use and Access) Act 2025, and data protection laws in other countries that meet internationally accepted standards.
1. What personal data we collect and why
1.1. For Registration
When you register for an IELTS test with British Council, we will ask you to provide the following information:
- Test administration and enquiries: To administer your IELTS test and handle enquiries, we require personal details including your name, date of birth, gender, contact details (postal/email), nationality and residence status, ID card or passport details and payment information. In addition, to enable analysis of test taker performance and validation of the test, we may require your education qualifications, employment history or occupation.
- Access arrangements and changes: We may ask you to provide medical evidence if you request access arrangements or supporting evidence if you need to re-schedule or cancel your test.
- Marketing preferences: Your preferences for receiving marketing communications, so that we can inform you of our services, including events and opportunities to participate in British Council projects and programmes.
1.2. For Identity verification
We implement robust identity verification checks, including biometric technology where applicable, to protect test integrity and prevent fraud and malpractice. We may use one of two biometric identity verification solutions, depending on the test centre and applicable local legal requirements. For this purpose, we may collect additional personal information to verify the identity of the person taking the test.
a) Facial comparison solution
- A scanned copy of an official identity document (e.g. passport or national ID document) as proof of your identity, to verify that it is authentic, valid and genuine.
- A photograph taken of you on the test day to check that you are a real, live person by ensuring it corresponds to you and is not a fake image or recording (liveness check).
We also check that you are the person shown on your identity document, by comparing the photo taken of you with the image on your identity document (likeness check). This verification uses software that analyses facial features in both images and therefore involves the processing of facial biometric data.
We use facial comparison technology incorporating artificial intelligence to perform these checks. If any inconsistencies are flagged, a trained human reviewer will intervene and make a final assessment. The software converts your images into a one-way biometric template which cannot be turned back into an image. This biometric template is encrypted and stored securely and will be retained for three years.
b) Fingerprint solution
Where permitted under applicable local legislation, we collect a finger scan from the test taker. This is turned into a biometric template (binary large object), which is one-way only and cannot be turned back into a fingerprint. The biometric data is stored securely for a period of 60 days after the test and is not disclosed to any entity,
1.3. For remote invigilation (proctoring)
If you take the online version of the IELTS test, your exam will be remotely supervised by an invigilator (proctor) to maintain test integrity while you complete the exam from your home or other location. Audio and video from your webcam and microphone, as well as recording of your computer screen, are captured throughout all parts of the test for this purpose.
Before the test begins, you will be asked to present an approved form of photographic identification. The remote proctor will match the facial image on the ID with the person in front of the camera for the test session. This is to ensure that the person taking the test is the same person who registered.
The remote proctor will take a photo of you at the start of the test. This will be used to confirm that the same person remains present for the entire duration of the test. You will also be asked to provide a 360° view of the room before the test begins to verify that no one else is present to assist you.
Your entire test session will be monitored in real time and recorded through your device. Audio and video of your face, voice and workspace will be captured from your device’s camera, microphone and screen.
The remote proctoring system uses artificial intelligence to analyse audio, video and screen activity from your device to detect suspicious or unusual behaviour that may indicate malpractice. The following behaviours will be flagged for further investigation: a) unexpected noise (intended to detect speech not originating from the test taker) or b) people entering or leaving the frame (their facial image will be compared with the image on the ID submitted at the start of the test). If any activity is identified as potentially suspicious, the report will be reviewed by a human proctor before any action is taken.
The recordings do not form part of the exam assessment and do not influence your score. They are used solely to prevent malpractice, investigate suspected fraud and verify the identity of the person taking the test.
These recordings are held securely for a period of 120 days, after which they are automatically deleted. They may be retained for longer if there are legal grounds to keep them, such as for ongoing investigations.
The IELTS Online remote Speaking test will be conducted using Zoom video conferencing platform. A digital recording will be made and stored as separate video and audio files. The video file will be retained for 3 months and the audio file for 3 years.
1.4. During and after the IELTS tests
We collect your photograph to include on your Test Report Form where we issue your test results. We record the IELTS Speaking test by audio and/or web-based video application to enable asynchronous scoring of your test.
When you take the IELTS UKVI test, we will use CCTV and video recording for monitoring, security, investigation of suspected malpractice and quality assurance purposes on test day, both before and during the test. Video footage is stored locally by your test centre for 60 days after your test and may be used for audit or investigation purposes. This retention period may be different in line with local legislation in certain jurisdictions.
2. Lawful bases
Our legal justifications, or lawful bases, for collecting and using your personal information for the above purposes as Data Controller are:
| Legal Basis | Explanation |
| All types of IELTS test (except UKVI) | |
| Contract | We process the data you provide during registration to any IELTS test (except UKVI) and while taking the test, as it is strictly necessary to deliver the service you have contracted from us under the IELTS test Terms and Conditions. This includes, but not limited to, registration to the IELTS test, examination administration and assessment. |
| Consent | With your freely given consent, we process your personal information for purposes that do not impact the provision of the service, such as for marketing purposes. You may withdraw your consent at any time. |
| Legitimate interest | We process some of your personal information under our legitimate interest: a) To prevent fraudulent activity and ensure test integrity, by implementing a process to verify identification of all IELTS test takers throughout their customer journey. b) To ensure quality assurance and validity of the test. |
| We also process some special category data (medical evidence and biometric data) under the following conditions: | |
| Explicit Consent | Where you provide medical information to support requests for special arrangements to be made in relation to your IELTS test. If you are taking any IELTS Test, (except UKVI), we process your biometric data for identity verification purposes only if you chose to provide your explicit consent, which you may withdraw at any time. If you do not consent, alternative verification methods will be available. If you are taking an IELTS online test, we process your biometric data for remote proctoring, if you chose to provide your explicit consent. If you do not consent, the alternative is to attend an IELTS test centre. |
| UKVI Tests | |
| Performance of a Public Task | If you are taking a UKVI test, required in some cases for UK immigration purposes, we process your personal data for registration, exam administration and assessment purposes on behalf of the UK Home Office. The Home Office has determined that this processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in it. |
| Substantial Public Interest | If you are taking a UKVI test, we process your biometric data for identity verification purposes on behalf of the UK Home Office. The UK Home Office has determined that this processing is necessary for reasons of substantial public interest to prevent fraud and ensure the integrity of tests required for UK visa applications. The processing is carried out in accordance with Schedule 1 Part 2 paragraph 10 of the Data Protection Act 2018 (preventing unlawful acts) and is subject to an appropriate policy document and technical and organisational safeguards. |
3. Retention
The specific retention periods applicable to each processing purpose are set out above. We may retain personal data for longer where there are legitimate grounds for doing so, for example to resolve disputes, support ongoing investigations into suspected malpractice, or prevent fraud. Retention periods may also vary to comply with applicable local legal requirements.
4. Sharing your data with others
We process your information securely and confidentially and only disclose it to other organisations where this is strictly necessary as explained below:
a) With the IELTS Partners:
We may share relevant information from your application or test with the IELTS Partners for purposes such as administering the test, reviewing test results, conducting statistical analysis and for fraud detection purposes.
Where we investigate suspected malpractice, we may share relevant information about individuals involved with the IELTS partners for fraud prevention and further investigation purposes. As a result of such investigations, Cambridge may withhold test results. Your personal information may also be disclosed to public authorities (including visa processing authorities), law enforcement agencies or regulatory authorities where required for verification purposes or to protect the integrity of the IELTS test. After the test, Cambridge may review anonymised test responses and their scores to validate the test format and for research, statistical analysis and examiner training purposes.
b) With Recognising Organisations:
Your Test Report Form containing your test results will be sent to those Recognising Organisations (educational institutions, governments (including visa processing authorities), professional bodies and commercial organisations that recognise IELTS scores) nominated by you in your IELTS registration, at your request, for the purpose of enabling them to verify your test results
c) With our suppliers:
We work with other organisations and suppliers to provide services on our behalf and may share some of your information with them under appropriate contractual instructions and safeguards. These include, but are not limited to, providers of our online registration and payment systems, computer-based and online testing platforms, online assessment services, electronic communications services, and identity verification services. Where we use another organisation, we make sure that your Personal Data is protected and remains in our control.
5. International Data Transfers
We may need to transfer your personal information to third parties located in countries other than the one where you have registered to take the test, including countries outside the European Economic Area (EEA) or the UK, for the purposes described above. Where we do so, we ensure that your personal information is adequately protected in accordance with applicable law. For example, we may use standard contractual clauses approved by relevant authorities and require the implementation of appropriate technical and organisational measures to ensure the security of personal data in these circumstances.
6. Your data protection rights
You have rights in relation to how we use your personal data. For example, your right to access the information we hold about you, to request that we correct any inaccuracies in that information, or to lodge a complaint with a data protection authority if you have concerns about how we have used your personal data. For more detailed information about your rights, please refer to the privacy section of our website, www.britishcouncil.org/privacy.
If you wish to exercise your data protection rights, you may contact us at igdisclosures@britishcouncil.org
7. IELTS Partners
The IELTS Partnership Privacy Policy provides more details on Privacy and Personal Data handling practices related to IELTS Testing https://ielts.org/legal/privacy-policy
You can also refer to the privacy policies of the other IELTS owners by following these links:
IELTS Australia Pty Ltd. https://www.idp.com/global/privacy-policy/
Cambridge Assessment English’s is found at: https://www.cambridgeenglish.org/footer/data-protection/
Website usage and other information collected on this website
By accessing and using this site you consent to the IELTS partners’ Privacy Policy without limitation or qualification. The IELTS partners’ Privacy Policy applies solely to information collected by us and may differ from the policies of other companies’ or organisations’ websites that you link to from this website. We recommend that you read the privacy policy of any other companies’ or organisations’ website that you link to from our website.
Re-marketing
3rd party vendor remarketing tracking cookies (like the Google Adwords tracking cookie) are used by the British Council.
Remarketing through the use remarketing tracking cookies or pixels enables us to show ads across the internet to you after you have visited our website.
We do not collect any identifiable information through the use of Google, Facebook or any other 3rd party remarketing system.
The third-party vendors, such as Google and Facebook, whose services we use, will place cookies on web browsers in order to serve ads based on past visits to our website. This allows us to make special offers and continue to market our services to those who have shown interest in our services.
If you do not wish to receive this type of advertising from us in the future you can opt through the links below.
You may opt-out of Google’s use of cookies by visiting the Ads Preferences Manager. Also, you can opt-out of other third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page.
The British Council also uses Google’s DoubleClick’s Remarketing Pixels. You may opt-out of DoubleClick’s remarketing pixels, your privacy policy can instead tell people to opt-out of DoubleClick’s use of cookies by visiting the DoubleClick opt-out page or the Network Advertising Initiative opt-out page.
The British Council also uses Google’s Dynamic Ad Serving. The Dynamic Ad Serving feature uses the Teracent cookie and you may opt-out of the Teracent cookie by visiting this opt-out page.
The British Council may from time to time utilise Facebook Advertising, Facebook Pixel Re-Marketing, and communications. We do this to understand and deliver ads and make them more relevant to you. Cookies also enable us to learn whether someone who saw an ad on Facebook later visited our website. The ultimate control of the dissemination of information gathered through Facebook Advertising, Facebook Pixel Re-Marketing, and communications resides entirely with Facebook. You can opt-out of Facebook’s use of cookies and Facebook Pixel Re-Marketing through settings on your Facebook Account.
Walk in visitors or customers of the British Council who leave their contact details with our staff may be remarketed to (online and offline) with information from the British Council. We do not share this information with third parties. If you do not want to receive such information through remarketing please contact us to remove your remarketing database.