The Regulator may require audits of one or more aspects of a person's compliance with this Act to be carried out.

An audit team leader or a person assisting an audit team leader must not use or disclose protected audit information unless the use or disclosure is:

  (a)   authorised by a provision of this Part; or

  (b)   authorised or required by a law of the Commonwealth or a prescribed law of a State or Territory.

An audit team leader or person assisting an audit team leader may use or disclose audit information in certain circumstances.