KPMG Australia’s whistleblower crisis has drawn two of the country’s largest law firms into an increasingly awkward parliamentary examination of corporate investigations, client privilege and the gap between an investigation’s description and its actual scope.
Documents released by the Parliamentary Joint Committee on Corporations and Financial Services have sharpened scrutiny of work performed for KPMG by Ashurst and Allens in connection with allegations that confidential client information was accessed and shared within KPMG’s audit business.
KPMG has acknowledged that its original internal investigation did not have the necessary rigour. It has also confirmed that conduct matters raised by the whistleblower included the inappropriate internal sharing of client information—matters that earlier investigations had not substantiated.
For Ashurst and Allens, the key question is what KPMG instructed them to do.
Ashurst: Advice, Not an Investigation
Ashurst’s role has attracted particular attention because KPMG’s earlier public description of the firm’s involvement sat uncomfortably with Ashurst’s evidence to Parliament.
In its 29 May statement, KPMG said that, following its internal investigation, it had appointed an external legal firm to review that work, saying that the external review supported the internal investigation’s conclusions.
But at the committee’s June hearing, Ashurst made an important distinction. Partner Jane Harvey said the firm had “never [been] engaged to conduct an investigation” for KPMG. Ashurst instead described its work as discrete legal advice, rather than an investigation into the whistleblower’s substantive allegations.
An external law firm advising on employment, whistleblower or investigative-process issues is not necessarily conducting an independent inquiry into whether the alleged conduct occurred. The distinction matters particularly where a company later relies on the involvement of external lawyers to support an assertion that allegations were thoroughly investigated and found wanting.
The committee’s published material has also raised a question about the factual foundation for Ashurst’s advice. Reporting on the released documents indicates Ashurst was told the whistleblower had supplied only “high-level information” about the allegations, advising that the material then available was insufficient for the disclosures to qualify for statutory whistleblower protection.
The advice from Ashurst and its conclusions depend on the instructions, information and documents supplied by the client.
Allens and Project Magenta
KPMG later appointed Allens through a board subcommittee led by the deputy chair and including three independent directors. KPMG described that mandate in May as a “further external legal investigation”, then said Allens was continuing to test the conclusions reached in earlier investigations with new evidence and an expanded scope.
The committee’s recent document release has turned attention to an earlier Allens report, reportedly completed in December 2025. Contemporary reporting says the report found a series of allegations unsubstantiated or insufficiently supported, but its methodology was limited, relying substantially on interviews with senior KPMG personnel and did not conduct a comprehensive search of employee emails or electronic records.
But the episode illustrates a recurring corporate-investigations problem. “External” identifies the investigator; it does not itself establish that an inquiry was unrestricted, forensic or independent of parameters set by the client.
The questions that matter are more mundane—and more revealing:
- Who drafted the terms of reference?
- What allegations were within scope?
- What documents were collected and searched?
- Which witnesses were interviewed?
- What information did the law firm receive?
- How was the final advice or report later represented by the client?
Privilege Meets Parliament
Legal professional privilege became the central legal issue at the June hearing.
Ashurst and Allens told the committee that privilege over their advice belonged to KPMG, not the firms. Ashurst global chief executive Paul Jenkins said the firm faced competing obligations: assisting the committee while observing its professional obligation to maintain its client’s privilege. Allens adopted the same essential position.
.Scrutiny of Allens’ earlier work, meanwhile, shows how quickly a law firm’s instructions can become the subject of the inquiry itself.
The parliamentary position is different, and the committee pressed KPMG to authorise the release of the material and later received documents concerning the firms’ work, which it published on public-interest grounds.
For the lawyers, this produced an uncomfortable but familiar collision with professional duties to the client on one side and a parliamentary committee seeking access to material central to its inquiry on the other.
The Lesson for BigLaw Investigators
Engaging a heavyweight firm can bring legal expertise, investigative discipline and, where available, the protection of privilege. But it cannot convert advice engagement into a full factual inquiry or allow a company to describe limited legal work as proof that serious allegations have b een independently disproved.
Ashurst’s evidence has made that point sharply: the firm drew a clear line between the advice it gave and an investigation it says it was never retained to conduct
The fact is, the engagement letter may be the most consequential document in the room—particularly once Parliament asks to see it.
