After the license: the AICPA Code, membership, firm permits and peer review

What changes once you are licensed: the AICPA Code’s principles and rules, membership versus license, CPA firm permits, and peer review enrollment for attest firms.

4 min read · CORAA Team
Lesson 12 of 12 · 0 of 12 complete
In this lesson you will
  • Identify the six principles and the main rules of the AICPA Code of Professional Conduct
  • Distinguish obligations that come from the license from those that come from AICPA membership
  • Describe the UAA firm permit and ownership requirements
  • Determine peer review enrollment and due dates for a firm’s first engagement

License and membership are different things

The state board issues the license under its accountancy law. The AICPA is a voluntary membership body. Its Code of Professional Conduct binds AICPA members; the board's rules bind licensees. Most practitioners are subject to both, and the obligations overlap but are not identical. AICPA members, for example, carry the 120-hour per three-year membership CPE requirement in addition to the board's CPE rule.

The AICPA Code: principles and rules

The Code opens with six principles in ET 0.300: Responsibilities (0.300.020), The Public Interest (0.300.030), Integrity (0.300.040), Objectivity and Independence (0.300.050), Due Care (0.300.060) and Scope and Nature of Services (0.300.070). Part 1 applies to members in public practice, Part 2 to members in business and Part 3 to other members.

Core Part 1 rules:

  • Integrity and Objectivity (1.100.001): be objective, free of conflicts of interest, and do not knowingly misrepresent facts or subordinate judgment to others.
  • Independence (1.200.001): a member in public practice shall be independent as required by standards of bodies designated by Council.
  • General Standards (1.300.001): professional competence, due care, planning and supervision, sufficient relevant data.
  • Compliance With Standards (1.310.001): comply with standards promulgated by bodies designated by Council.
  • Accounting Principles (1.320.001), Acts Discreditable (1.400.001), Contingent Fees (1.510.001), Commissions and Referral Fees (1.520.001), Advertising and Other Forms of Solicitation (1.600.001), Confidential Client Information (1.700.001) and Form of Organization and Name (1.800.001).

The Code overview maps every section, and the nonattest services guide covers the independence questions new practitioners hit first.

Firm permits

UAA Ninth Edition Section 7(a)(1) requires a permit for a firm with an office in the state that performs attest services or uses the title "CPA" or "CPA firm," and for an out-of-state firm performing attest services in the state unless it meets Section 7(a)(1)(C). Section 7(c)(1) requires that a simple majority of the firm's ownership, in financial interests and voting rights, belong to holders of a CPA certificate licensed in some state. Section 6(a) adds that a certificate holder may provide attest services only in a CPA firm holding a permit.

Peer review

UAA Section 7(h) has the board require, as a condition of permit renewal, peer review no more often than once every three years. The AICPA Peer Review Program, as its Questions and Answers describe it, sets the program rules:

  • Who enrolls: AICPA members in public accounting must practice in an enrolled firm if the firm's services fall in the scope of the AICPA practice-monitoring standards and it issues reports purporting to follow AICPA professional standards.
  • Preparation-only firms: for AICPA membership purposes, a firm that only prepares financial statements under AR-C 70 is not required to enroll. Some boards require enrollment anyway.
  • When to enroll: by the report date of the initial engagement. The initial review is ordinarily due 18 months from the date the firm enrolled or should have enrolled, whichever is earlier.
  • Later reviews: a subsequent review is ordinarily due three years and six months (42 months) from the year-end of the previous review.

The peer review guide and readiness checklist cover preparation.

Common missteps

  • Starting a compilation practice without enrolling in peer review.
  • Using "CPA firm" in a name before the firm holds a permit.
  • Assuming AICPA membership is required to hold a license, or the reverse.
Worked example

A new firm’s first permit and peer review dates

Mia Torres, CPA, and two partners form Harbor Lane CPAs, LLC. Ownership: Mia 40%, Carlos (CPA) 25%, Dana (not a CPA) 35%.

Permit: CPA ownership is 40% + 25% = 65%, above the simple majority Section 7(c)(1) requires. The firm will use "CPAs" in its name and perform reviews, so it needs a permit under 7(a)(1)(A) and (B) before it opens.

Engagements: in year 1 the firm does tax work and preparation engagements under AR-C 70 until it issues its first review report on March 15, 2026.

Enrollment: preparation-only work did not require enrollment. The review report is in scope, so the firm enrolls no later than its report date, March 15, 2026.

Initial due date: 18 months from the date the firm enrolled or should have enrolled: March 15, 2026 + 18 months = September 15, 2027.

Next review: with its administering entity, the firm sets a peer review year ending December 31, 2026. The next review is ordinarily due three years and six months after that year-end: December 31, 2026 + 42 months = June 30, 2030.

Conclusion: the firm needs a permit before opening, enrollment by March 15, 2026, its first review by September 15, 2027, and the next by June 30, 2030.

Self-check

Answer each question before you open the answer.

  1. Name the six principles of the AICPA Code.

    Show answer

    Responsibilities, The Public Interest, Integrity, Objectivity and Independence, Due Care, and Scope and Nature of Services (ET 0.300.020 to 0.300.070).

  2. Does a firm that performs only preparation engagements under AR-C 70 have to enroll in peer review?

    Show answer

    Not for AICPA membership purposes. The AICPA states that a firm that only performs AR-C 70 preparation engagements is not required to enroll; a board rule could still differ.

  3. What ownership does UAA Section 7(c)(1) require for a CPA firm permit?

    Show answer

    A simple majority of ownership, in financial interests and voting rights, held by CPA certificate holders licensed in some state.

  4. A firm issues its first audit report on June 1, 2026. When is its initial peer review due?

    Show answer

    Within 18 months of the date it enrolled or should have enrolled, so by December 1, 2027. It should have enrolled by its report date, June 1, 2026.

Sources

Back to the syllabus

Standards are paraphrased from the primary sources listed above; read the source before relying on a requirement. This lesson is training material, not professional advice. Report an error

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required