Acts Discreditable Rule: AICPA Conduct, Sanctions, and License Risk

The Acts Discreditable Rule is a broad ethics standard in the AICPA Code of Professional Conduct, codified as Rule 1.400.001, that prohibits any AICPA member from committing an act that damages the accounting profession’s reputation.¹ It binds every member, whether you work in public practice, private industry, government, or education, and it reaches personal conduct, not just technical accounting work. Violating it can cost you your AICPA membership and, through parallel state action, your license to practice.

What the Rule Says

The operative text is one sentence: a member “shall not commit an act discreditable to the profession.” The vagueness is deliberate. Other parts of the Code handle specific duties like independence and integrity; this rule is the catch-all that captures everything else that could erode public confidence in the CPA designation. A felony fraud conviction unrelated to any client engagement would still violate it.¹

To make the rule workable, the AICPA’s Professional Ethics Executive Committee (PEEC) has issued mandatory interpretations describing specific conduct that counts. Those interpretations are not advisory. If your conduct falls within one, the presumption is that you violated the rule.

Conduct That Counts as a Discreditable Act

Withholding Client Records

Client-provided records such as bank statements, invoices, and source documents must be returned promptly when the client asks, with 45 days as the outside deadline absent unusual circumstances.¹ You can charge a reasonable retrieval and copying fee, but you cannot hold originals hostage over unpaid bills. Your own work product related to an unpaid engagement is a different question, and may sometimes be withheld, but the client’s originals go back regardless.²

Discrimination and Harassment

A final determination by a court or administrative agency that you violated federal, state, or local anti-discrimination laws, including sexual or workplace harassment statutes, is treated as a discreditable act. The determination has to be final and beyond appeal before the rule is triggered.¹

Falsifying Financial Records

Making materially false or misleading entries in an entity’s financial records violates the rule. So does permitting someone else to make them when you have authority to correct the entries. The interpretation exists partly because CPAs in employee roles sometimes face pressure from management; going along with it is not a defense.¹

Failing to File or Pay Taxes

CPAs are held to the rules they advise clients on. Failing to file your personal federal, state, or local returns on time, or failing to remit payroll and other taxes collected on others’ behalf, can be treated as discreditable.³ It applies to your firm’s returns too if you have the authority to file. The Code uses “may be considered” language here, which allows some room for context, but there is no explicit carve-out for good-faith disputes with a tax authority.¹

Misusing Confidential Employer Information

Confidential information you learn through employment or volunteer work cannot be disclosed or used without proper authority. The exception is a legal or professional obligation to disclose, such as reporting suspected fraud to an appropriate authority. The duty survives after you leave the job.¹

Misleading Advertising and CPA Exam Fraud

False or misleading promotional claims about your qualifications, experience, or specialties are discreditable, whether on a website or in describing what your firm can deliver.¹ Separately, soliciting, sharing, or disclosing CPA Exam questions or answers is treated as its own discreditable act.⁴

Misusing the CPA Credential

Every state sets its own rules on who may use the CPA designation and how. Continuing to hold yourself out as a CPA after your license is suspended, revoked, or expired is a false and misleading use of the credential. The Code is explicit that failing to follow any jurisdiction’s rules on use of the credential violates the Acts Discreditable Rule.¹ This is one of the easier violations to commit by accident, especially if you are licensed in multiple states and let a renewal slip.

How a Complaint Gets Investigated

Enforcement runs through the AICPA’s Professional Ethics Division. Because most CPAs belong to both the AICPA and a state CPA society, the two sides coordinate through the Joint Ethics Enforcement Program (JEEP), so a single investigation can address both the AICPA code and a state society’s code at once.⁵⁶

Anyone can file an ethics complaint.⁷ The division performs an initial review, decides whether a full investigation is warranted, and keeps the process confidential while it runs. The member generally has about 30 days to respond to the initial inquiry, and ignoring that inquiry can turn into a separate bylaws violation for failure to cooperate.

What the Sanctions Look Like

Sanctions scale with the severity of the conduct.

A letter of required corrective action is the lightest outcome. The member may be told to take specific continuing education or submit future work for pre-issuance review. These letters are not published.⁸
An admonishment is a public reprimand issued by the Joint Trial Board, and publication is mandatory.⁸
Suspension can last up to two years. Expulsion permanently removes the CPA from AICPA membership. Both are published publicly.⁸

Not every matter reaches a hearing. The Ethics Division sometimes offers a settlement agreement under which the member accepts terms such as corrective education or practice restrictions and the division closes the investigation.⁹ Accepting a settlement waives the right to a hearing under the AICPA bylaws, and it is a practical option when the facts are not seriously disputed and the conduct does not warrant removal from membership.

Automatic Loss of Membership Without a Hearing

Some events trigger consequences on their own, outside the complaint process. Under AICPA Bylaws Section 7.3, membership can be suspended or terminated without a hearing in specified situations, which typically include criminal convictions and disciplinary orders from government agencies or state boards. The reasoning is practical: if a court or regulator has already made the finding, the AICPA does not re-litigate it. A CPA convicted of a financial crime can lose AICPA membership on this automatic track while a state board proceeding runs in parallel.

Why Your State License Is Also at Risk

AICPA membership is voluntary. A state-issued CPA license is not. The two systems share information. When the AICPA sanctions you for an Acts Discreditable violation, it reports the outcome to the relevant state board of accountancy, and that report often triggers a separate state-level review that can suspend or revoke your license under state law.

It runs the other direction too. If a state board suspends or revokes your license as discipline, the AICPA will automatically suspend or terminate your membership so its records track your legal standing to practice.⁶ A single violation can therefore cost you both your membership and your license through two independent processes, and losing either one makes continuing to work as a CPA extremely difficult.

1
AICPA. Code of Professional Conduct
2
University of Mississippi eGrove. Revised Records Requests Interpretation Under the Acts Discreditable Rule
3
AICPA & CIMA. General Industry Questions for Members in Business
4
AICPA. Uniform CPA Examination Conduct and Non-Disclosure Agreement
5
AICPA & CIMA. Ethics Enforcement
6
NASBA. AICPA/State Board of Accountancy Cooperative Enforcement
7
AICPA & CIMA. How to File an AICPA Ethics Complaint
8
AICPA & CIMA. Definitions of Ethics Sanctions/Disposition
9
NASBA. NASBA Quarterly Enforcement Report 2025 Q1