Summary

  • Federal agencies must not enter new KPMG contracts under market approaches closing before 1 March 2027; the agreed pause runs through 28 February, with exceptions for approved changes to existing contracts and products already in use.
  • The independent review found no Commonwealth-wide assurance that all supplier notifications and code breaches are identified and managed, and Finance cannot produce a comprehensive report of suppliers found non-compliant.

A government can put one supplier on a calendar. It is harder to keep a complete record of every supplier problem spread across thousands of contracts. Australia’s Department of Finance has set an end date for KPMG’s new federal work and delivery dates for its reform plan. The same review says the Commonwealth cannot provide a comprehensive account of suppliers found to have breached its own code of conduct.

The independent review of KPMG Australia was published on 2 November 2026 after a process that began with allegations raised in the Senate on 24 March. Dr Ian Watt was appointed reviewer on 24 June and delivered the report to the Finance Secretary on 14 October. The report found that KPMG failed to respond appropriately to concerns raised by a whistleblower. It described fragmented handling, unclear ownership and warning signs that were not brought together for timely scrutiny. The report focuses on KPMG’s leadership, culture and handling of the disclosure.

Finance’s new procurement note turns that finding into a supplier-specific agreement. KPMG will temporarily cease new contract engagements with Australian Government entities covered by the Commonwealth Procurement Rules until 28 February 2027. Officials must not sign new contracts for market approaches closing before 1 March. The restriction includes new work through whole-of-government panel arrangements and a new third-party contract that appoints KPMG as a subcontractor. Entities outside the Rules are recommended to follow a consistent approach, but the note does not give them the same mandatory instruction.

The pause does not cancel existing work. Finance now lists two exceptions: variations to current contracts, including extension options approved by an entity’s accountable authority; and ongoing licensing or sale of KPMG proprietary products already in use by government entities. Finance notes that several departments use KPMG’s models for financial reporting. The policy stops new engagements while preserving those existing arrangements; it is not a direction to turn off every service or licence.

The company has two immediate reform milestones. KPMG agreed to provide an implementation plan by 15 November 2026 for Finance’s consideration and its first quarterly progress report by 29 January 2027. Finance will monitor implementation for up to three years. If the first report shows insufficient progress, Finance will seek KPMG’s agreement to extend the pause. It may also reinstate restrictions in full or part later if reforms materially stall or new information warrants action.

Those dates make one case legible. The wider supplier system is less so. The independent review says Commonwealth procurement is devolved across more than 80,000 decisions. Its 2025–26 totals show 87,112 contracts and amendments awarded to 13,835 unique businesses, worth A$117.2 billion. Consultancy services accounted for 3,594 contracts worth A$781.4 million. Each contracting entity holds its own supplier records and manages its own response.

There are already rules for supplier conduct. Notification of Significant Events clauses, introduced into standard contract tools on 19 May 2023, require suppliers to notify the relevant Commonwealth entity immediately when specified serious matters arise. The Commonwealth Supplier Code of Conduct took effect on 1 July 2024 and sets wider expectations for suppliers working under contracts covered by the procurement rules. The reviewer did not apply the Code retrospectively to the earlier events under examination; it assessed the present framework.

A supplier’s contractual notification duty is not the same as a confidential route for a third party. The review found suppliers unsure about what counts as significant, how much detail to report, when to report and how legal constraints affect the duty. It also found no consistent Commonwealth approach that clearly tells an outside person where to raise a concern about supplier conduct. Depending on the issue, a contracting entity, Finance, a regulator, the National Anti-Corruption Commission or the Commonwealth Ombudsman may be involved. Some smaller agencies may lack the capacity or independence to investigate a disclosure.

That gap affects what the government can later say. The review found no Commonwealth-wide assurance mechanism to confirm that potential significant notifications and Code non-compliance are all identified and managed. Because cases sit with individual entities, Finance cannot provide a comprehensive report of suppliers found non-compliant with the Code. The reviewer warned that, without greater coordination, suppliers behaving unethically could continue to win Commonwealth contracts.

Eight recommendations followed. Six are administrative and sit with KPMG, Finance or both; two suggest broader changes to the Procurement Framework that require further government consideration. Finance accepted monitoring of the reform plan, coordination with states and territories and a consistent process for future supplier no-bid agreements. The government will consider stronger sanctions, clearer supplier notification guidance, better routes for third-party reports, support for agency investigations and information-sharing across departments. The review’s clearest system recommendations are not yet adopted policy.

The distinction matters. KPMG’s pause has a defined scope, two near-term reporting dates and a possible extension if progress falls short. The broader regime has no common first stop for third-party concerns and no complete way to count confirmed Code breaches. The implementation plan and first quarterly report were still future as of 2 November. They will show whether KPMG’s reforms have a measurable standard; a government-wide reporting and record system will show whether the lesson travelled beyond one firm.

A supplier-integrity framework does not need to turn every allegation into an automatic exclusion. It does need a route that preserves a report, assigns an investigator, gives the supplier a chance to respond, records the decision and tells the next purchasing agency what it may rely on. The current record cannot show that chain across the Commonwealth. Canberra knows when KPMG’s pause is due to end. It still cannot show a full list of the suppliers found in breach.

Sources