The Regulator may, at a reasonable time and on reasonable notice, inspect the records of an authorised person for the purposes of assessing the authorised person’s compliance with the conditions of authorisation.

Nothing in this regulation requires an authorised person to produce, or authorises the Regulator to require an authorised person to produce, any document or thing that is an item subject to legal privilege (as defined in section 10 of the Police and Criminal Evidence Act 19843).