Andrew Yates quits immediately as accounting firm admits its speak-up culture fell short on client data misuse allegations
KPMG Australia chief executive Andrew Yates has resigned with immediate effect after the firm acknowledged its repeated failure to properly investigate a whistleblower's allegations that client documents were being inappropriately shared internally.
Yates, who joined KPMG in 1990 and had led the firm as chief executive since 2021, stood down on 29 May 2026 alongside Julian McPherson, KPMG Australia's managing partner of audit and assurance. McPherson will step down from his leadership role and resign from the firm following an orderly handover of client responsibilities. Partner Stan Stavros has been appointed interim chief executive.
The departures follow a finding by legal firm Allens – appointed by KPMG's board to review the firm's prior investigations – that those investigations "fell short of the rigour required" to properly assess the whistleblower's claims. KPMG chair Martin Sheppard confirmed the board accepted Yates' resignation immediately.
"I have been committed to a speak-up culture in our firm, it is clear that in this case we have let ourselves down and I take accountability," Yates said in a statement released by the firm.
McPherson added: "Matters have arisen for which I am responsible, and I take accountability."
What went wrong with the investigations
The whistleblower's initial allegations – centred on the inappropriate internal sharing of confidential client information – were not substantiated by an internal investigation. An external legal review of that internal investigation also supported its findings. KPMG has since acknowledged, however, that the initial probe "was not conducted with the necessary rigour".
Dissatisfied with both outcomes, the whistleblower escalated their concerns to independent members of the KPMG Australia board and to others. That escalation triggered the appointment of Allens to conduct a third, expanded review – one that remains ongoing as at 29 May 2026, with new evidence and an expanded scope challenging the conclusions of the earlier investigations.
KPMG is one of the four largest professional services firms globally, alongside Deloitte, Ernst & Young, and PricewaterhouseCoopers. The handling of whistleblower disclosures within large organisations – including the obligations of employers to protect those who raise concerns – is a growing area of focus for HR leaders and people and culture professionals across Australia. For HR professionals navigating speak-up culture and psychological safety frameworks, this case underscores the risk of investigation processes that lack independence and rigour.
KPMG Australia has moved to engage Principia Advisory, described as a leading ethical organisational culture specialist, to conduct a separate review of the firm's policies and processes for supporting employees to raise concerns. Crucially, Sheppard committed to publishing the findings of the Principia review publicly.
"We are reinforcing and strengthening the controls that protect client confidentiality, and we will set out for our clients the specific steps we are taking to keep their information protected," Sheppard said.
"That's why we are not asking anyone to take our word for it, and we are inviting scrutiny and challenge on our remedial actions."
The firm also apologised directly to the whistleblower, to affected clients, and to its own people. "We apologise unreservedly to the whistleblower," Sheppard said. "We commit to learning from this process to ensure we create an environment where it is safe and easy to surface concerns that will be acted upon."
What this means for HR and people leaders
For HR executives and workplace culture professionals, the KPMG case is a pointed reminder of the legal and reputational consequences of inadequate whistleblower frameworks. Australia's Corporations Act 2001 and the Treasury Laws Amendment (Enhancing Whistleblower Protections) Act 2019 impose significant obligations on eligible companies to protect whistleblowers and investigate disclosures thoroughly.
The case also raises broader questions about accountability culture at the executive level – particularly whether HR and people leaders have sufficient independence and authority to challenge investigation processes that may be driven by business continuity concerns rather than the integrity of the process.
KPMG's decision to publicly commit to publishing the Principia review's findings is notable. Voluntary transparency of this kind is increasingly seen by governance experts and HR professionals focused on organisational trust as a meaningful signal of cultural intent – though the proof will be in the implementation.
Allens' investigation into the substance of the original whistleblower allegations continues.
