What oversight gaps allow audit firms to misuse client data?

Question

Accepted Answer

Australian lawmakers questioned whether audit firms’ partnership structure leaves oversight gaps for misuse of client data
Australian lawmakers said oversight may be weaker when Big Four audit firms operate as partnerships rather than companies, because they are not supervised by the Australian Securities and Investments Commission (ASIC) with strict reporting requirements. In the KPMG case, allegations involve the alleged misuse of confidential company board papers from Lendlease to support bids for major audit tenders for Westpac and Dexus, alongside claims that a whistleblower was treated in ways that were not legally protected. KPMG has acknowledged mishandling of the whistleblower complaint and launched a fourth investigation after earlier ones did not substantiate wrongdoing.
Big Four partnership structure is outside ASIC supervision
Lawmakers highlighted that partnership-structured firms are not supervised by ASIC, which applies strict reporting requirements to companies. Instead, such firms are regulated by state-based laws, which was raised during parliamentary questioning as a potential reason oversight could be less direct than in a company structure. The issue was framed in terms of whether the partnership model is functioning effectively “in this circumstance,” with comparisons made to the earlier PwC tax leaks scandal.
Responsibility under partnerships was raised as a reason problems may be handled slowly
KPMG’s former Australia CEO Andrew Yates told parliament he felt reluctance to share the complaint with senior leadership, delaying it from being shared with 680 partners. A lawmaker argued that, under a company structure, there would be a clear executive responsible for such matters, while the partnership structure can lead to joint responsibility across partners. Yates said KPMG is “fallible” and did not view its leadership as “bad apples,” while also acknowledging “we didn’t get it right.”
Whistleblower allegations included repeated computer searches and lack of legal protections
A joint parliamentary committee heard that after the whistleblower complained to the firm, the whistleblower’s computer was repeatedly searched and the whistleblower was not given legal protections. Lawmakers linked these claims to the broader question of how firms handle sensitive information and whistleblower processes, describing personal and career harm tied to the treatment. Yates admitted KPMG did not make the whistleblower “feel comfortable,” reflecting on factors tied to his resignation.
KPMG’s investigations and admission were tied to the handling of the complaint
KPMG admitted it mishandled the whistleblower complaint and has launched a fourth investigation after previous investigations failed to substantiate wrongdoing. The hearing followed allegations that confidential Lendlease board papers were misused to support bids for audit tenders involving Westpac and Dexus. The matter also led to the resignation last month of KPMG’s Australian CEO Andrew Yates and its audit chief.

Reading history

Hide →

This history is cleared when the page is closed.

What oversight gaps allow audit firms to misuse client data?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

2

0

0

Share with friends