(1) As used in this section:

1. (a) "Entity" means:

   1. (i) a government organization; or
   2. (ii) a receiving organization.

2. (b) "Government organization" means:

   1. (i) a state branch, department, or agency; or
   2. (ii) a political subdivision, including a county, municipality, special district, special service district, school district, interlocal entity as defined in Section 11-13-103, or any other local government unit.
3. (c) "Receiving organization" means an organization that receives public funds that is not a government organization.

(6) Under the direction of the legislative auditor general, the Office of the Legislative Auditor General shall:

1. (a) conduct comprehensive and special purpose audits, examinations, investigations, or reviews of entity funds, functions, and accounts;
2. (b) prepare and submit a written report on each audit, examination, investigation, or review to the Audit Subcommittee created in Section 36-12-8 and make the report available to all members of the Legislature within 75 days after the audit, examination, investigation, or review is completed;
3. (c) monitor, conduct a risk assessment of, or audit any efficiency evaluations that the legislative auditor general determines necessary, in accordance with Title 63J, Chapter 1, Part 9, Government Performance Reporting and Efficiency Process, and legislative rule;

4. (d) create, manage, and report to the Audit Subcommittee a list of high risk programs and operations that:

   1. (i) threaten public funds or programs;
   2. (ii) are vulnerable to inefficiency, waste, fraud, abuse, or mismanagement; or
   3. (iii) require transformation;
5. (e) monitor and report to the Audit Subcommittee the health of a government organization's internal audit functions;
6. (f) make recommendations to increase the independence and value added of internal audit functions throughout the state;
7. (g) implement a process to track, monitor, and report whether the subject of an audit has implemented recommendations made in the audit report;
8. (h) establish, train, and maintain individuals within the office to conduct investigations and represent themselves as lawful investigators on behalf of the office;
9. (i) establish policies, procedures, methods, and standards of audit work and investigations for the office and staff;
10. (j) prepare and submit each audit and investigative report independent of any influence external of the office, including the content of the report, the conclusions reached in the report, and the manner of disclosing the legislative auditor general's findings;
11. (k) prepare and submit the annual budget request for the office; and
12. (l) perform other duties as prescribed by the Legislature.

(7) In conducting an audit, examination, investigation, or review of an entity, the Office of the Legislative Auditor General may include a determination of any or all of the following:

1. (a) the honesty and integrity of any of the entity's fiscal affairs;
2. (b) the accuracy and reliability of the entity's internal control systems and specific financial statements and reports;
3. (c) whether or not the entity's financial controls are adequate and effective to properly record and safeguard the entity's acquisition, custody, use, and accounting of public funds;
4. (d) whether the entity's administrators have complied with legislative intent;
5. (e) whether the entity's operations have been conducted in an efficient, effective, and cost efficient manner;
6. (f) whether the entity's programs have been effective in accomplishing intended objectives; and
7. (g) whether the entity's management control and information systems are adequate and effective.

(8)

1. (a) If requested by the Office of the Legislative Auditor General, each entity that the legislative auditor general is authorized to audit under Utah Constitution, Article VI, Section 33, or this section shall, notwithstanding any other provision of law except as provided in Subsection (8)(b), provide the office with access to information, materials, or resources the office determines are necessary to conduct an audit, examination, investigation, or review, including:

   1. (i) the following in the possession or custody of the entity in the format identified by the office:

      1. (A) a record, document, and report; and
      2. (B) films, tapes, recordings, and electronically stored information;
   2. (ii) entity personnel; and
   3. (iii) each official or unofficial recording of formal or informal meetings or conversations to which the entity has access.
2. (b) To the extent compliance would violate federal law, the requirements of Subsection (8)(a) do not apply.

(9)

1. (a) In carrying out the duties provided for in this section and under Utah Constitution, Article VI, Section 33, the legislative auditor general may issue a subpoena to access information, materials, or resources in accordance with Chapter 14, Legislative Subpoena Powers.
2. (b) The legislative auditor general may issue a subpoena, as described in Subsection (9)(a), to a financial institution or any other entity to obtain information as part of an investigation of fraud, waste, or abuse, including any suspected malfeasance, misfeasance, or nonfeasance involving public funds.

(10) To preserve the professional integrity and independence of the office:

1. (a) no legislator or public official may urge the appointment of any person to the office; and
2. (b) the legislative auditor general may not be appointed to serve on any board, authority, commission, or other agency of the state during the legislative auditor general's term as legislative auditor general.

(11)

1. (a) The following records in the custody or control of the legislative auditor general are protected records under Title 63G, Chapter 2, Government Records Access and Management Act:

   1. (i) records and audit work papers that would disclose information relating to allegations of personal misconduct, gross mismanagement, or illegal activity of a past or present governmental employee if the information or allegation cannot be corroborated by the legislative auditor general through other documents or evidence, and the records relating to the allegation are not relied upon by the legislative auditor general in preparing a final audit report;

   2. (ii) records and audit workpapers that would disclose the identity of a person who, during the course of a legislative audit, communicated the existence of:

      1. (A) unethical behavior;
      2. (B) waste of public funds, property, or personnel; or
      3. (C) a violation or suspected violation of a United States, Utah state, or political subdivision law, rule, ordinance, or regulation, if the person disclosed on the condition that the identity of the person be protected;
   3. (iii) before an audit is completed and the final audit report is released, records or drafts circulated to a person who is not an employee or head of an entity for review, response, or information;

   4. (iv) records that would disclose:

      1. (A) an outline;
      2. (B) all or part of an audit survey, audit risk assessment plan, or audit program; or
      3. (C) other procedural documents necessary to fulfill the duties of the office; and
   5. (v) requests for audits, if disclosure would risk circumvention of an audit.
2. (b) The provisions of Subsection (11)(a) do not prohibit the disclosure of records or information to a government prosecutor or peace officer if those records or information relate to a violation of the law by an entity or entity employee.

3. (c) A record, as defined in Section 63G-2-103, created by the Office of the Legislative Auditor General in a closed meeting held in accordance with Section 52-4-205:

   1. (i) is a protected record, as defined in Section 63G-2-103;

   2. (ii) to the extent the record contains information:

      1. (A) described in Section 63G-2-302, is a private record; or
      2. (B) described in Section 63G-2-304, is a controlled record; and
   3. (iii) may not be reclassified by the office.
4. (d) The provisions of this section do not limit the authority otherwise given to the legislative auditor general to maintain the private, controlled, or protected record status of a shared record in the legislative auditor general's possession or classify a document as public, private, controlled, or protected under Title 63G, Chapter 2, Government Records Access and Management Act.

(12) The legislative auditor general shall:

1. (a) be available to the Legislature and to the Legislature's committees for consultation on matters relevant to areas of the legislative auditor general's professional competence;
2. (b) conduct special audits as requested by the Audit Subcommittee;
3. (c) report immediately to the Audit Subcommittee any apparent violation of penal statutes disclosed by the audit of an entity and furnish to the Audit Subcommittee all information relative to the apparent violation;
4. (d) report immediately to the Audit Subcommittee any apparent instances of malfeasance or nonfeasance by an entity officer or employee disclosed by the audit of an entity; and
5. (e) make any recommendations to the Audit Subcommittee with respect to the alteration or improvement of the accounting system used by an entity.

(13) If the legislative auditor general conducts an audit of an entity that has previously been audited and finds that the entity has not implemented a recommendation made by the legislative auditor general in a previous audit, the legislative auditor general shall, upon release of the audit:

1. (a) report immediately to the Audit Subcommittee that the entity has not implemented that recommendation; and
2. (b) shall report, as soon as possible, that the entity has not implemented that recommendation to an appropriate legislative committee designated by the Audit Subcommittee.

(14) Before each annual general session, the legislative auditor general shall:

1. (a) prepare an annual report that:

   1. (i) summarizes the audits, examinations, investigations, and reviews conducted by the office since the last annual report; and
   2. (ii) evaluate and report the degree to which an entity that has been the subject of an audit has implemented the audit recommendations;
2. (b) include in the report any items and recommendations that the legislative auditor general believes the Legislature should consider in the annual general session; and
3. (c) deliver the report to the Legislature and to the appropriate committees of the Legislature.

(15)

1. (a) If the chief officer of an entity has actual knowledge or reasonable cause to believe that there is misappropriation of the entity's public funds or assets, or another entity officer has actual knowledge or reasonable cause to believe that the chief officer is misappropriating the entity's public funds or assets, the chief officer or, alternatively, the other entity officer, shall immediately notify, in writing:

   1. (i) the Office of the Legislative Auditor General;
   2. (ii) the attorney general, county attorney, or district attorney; and

   3. (iii)

      1. (A) for a state government organization, the chief executive officer;
      2. (B) for a political subdivision government organization, the legislative body or governing board; or
      3. (C) for a receiving organization, the governing board or chief executive officer unless the chief executive officer is believed to be misappropriating the funds or assets, in which case the next highest officer of the receiving organization.
2. (b) As described in Subsection (15)(a), the entity chief officer or, if applicable, another entity officer, is subject to the protections of Title 67, Chapter 21, Utah Protection of Public Employees Act.
3. (c) If the Office of the Legislative Auditor General receives a notification under Subsection (15)(a) or other information of misappropriation of public funds or assets of an entity, the office shall inform the Audit Subcommittee.
4. (d) The attorney general, county attorney, or district attorney shall notify, in writing, the Office of the Legislative Auditor General whether the attorney general, county attorney, or district attorney pursued criminal or civil sanctions in the matter.

(16)

1. (a) An actor commits interference with a legislative audit if the actor uses force, violence, intimidation, or engages in any other unlawful act with a purpose to interfere with:

   1. (i) a legislative audit, examination, investigation, or review of an entity conducted by the Office of the Legislative Auditor General; or

   2. (ii) the Office of the Legislative Auditor General's decisions relating to:

      1. (A) the content of the office's report;
      2. (B) the conclusions reached in the office's report; or
      3. (C) the manner of disclosing the results and findings of the office.
2. (b) A violation of Subsection (16)(a) is a class B misdemeanor.

(17)

1. (a) Beginning July 1, 2020, the Office of the Legislative Auditor General may require any current employee, or any applicant for employment, to submit to a fingerprint-based local, regional, and criminal history background check as an ongoing condition of employment.
2. (b) An employee or applicant for employment shall provide a completed fingerprint card to the office upon request.
3. (c) The Office of the Legislative Auditor General shall require that an individual required to submit to a background check under this Subsection (17) also provide a signed waiver on a form provided by the office that meets the requirements of Subsection 53-10-108(4).

4. (d) For a noncriminal justice background search and registration in accordance with Subsection 53-10-108(13), the office shall submit to the Bureau of Criminal Identification:

   1. (i) the employee's or applicant's personal identifying information and fingerprints for a criminal history search of applicable local, regional, and national databases; and
   2. (ii) a request for all information received as a result of the local, regional, and nationwide background check.