National Consumer Credit Protection Act 2009

Subject to subsection (2), ASIC may give an auditor who prepares an audit report required under the Commonwealth credit legislation a written notice requiring the auditor:

to give specified information; or

to produce specified books;

Failure to comply with a requirement made under this subsection is an offence (see section 290).

The power in subsection (1) may only be exercised:

for the purposes of ascertaining compliance with audit requirements under the Commonwealth credit legislation; or

in relation to an alleged or suspected contravention of audit requirements under the Commonwealth credit legislation; or

in relation to an alleged or suspected contravention of a law of the Commonwealth, or of a law of a referring State or a Territory, being a contravention that:

concerns the management, conduct or affairs of a licensee, credit representative or other person who engages, or has engaged, in a credit activity; or

involves fraud or dishonesty and relates to a credit activity engaged in by a person, or a credit contract, mortgage, guarantee or consumer lease; or

is of a provision of Part 3‑2CA (about mandatory comprehensive credit reporting); or

for the purposes of an investigation under Part 6‑1 relating to a contravention referred to in paragraph (b) or (c).

Without limiting subsection (1), a notice under that subsection may specify information or books that relate to any or all of the following:

the policies relating to audit that the auditor has adopted or proposes to adopt, or the procedures relating to audit that the auditor has put in place or proposes to put in place;

audits the auditor has conducted or proposes to conduct or in which the auditor has participated or proposes to participate;

any other matter pertaining to audit that is prescribed by the regulations for the purposes of this paragraph.

Without limiting subsection (1), a notice under that subsection may require the auditor to give information or produce books even if doing so would involve a breach of an obligation of confidentiality that the auditor owes an audited person.

ASIC may, by written notice to an auditor who has received a notice under subsection (1), extend the period within which the auditor must give the information or produce the books to which the notice under that subsection relates.