(1) The Bank may, by notice in writing, require an auditor of a regulated financial service provider, or an affiliate of the auditor, to provide the Bank with a copy of any record or information provided or obtained by the auditor or affiliate in connection with an audit of the financial service provider's accounts that is in the possession of the auditor or affiliate.

(2) The auditor or affiliate shall comply with such a request within such period as is specified in the request, or within such extended period as the Bank may allow.

(3) If the Bank so directs, the auditor or affiliate shall not, without the consent of the Bank, disclose to the financial service provider concerned, or any person concerned in the management of, or employed by, that service provider -

(a) the fact that the auditor or affiliate has received a request under subsection (1), or

(b) any information that might lead that service provider, or any such person, to suspect that the auditor or affiliate has received such a request.