§ 200.512 Report submission.

(a) General. (1) The audit must be completed and the data collection form described in paragraph (b) of this section and reporting package described in paragraph (c) of this section must be submitted within the earlier of 30 calendar days after receipt of the auditor's report(s), or nine months after the end of the audit period. If the due date falls on a Saturday, Sunday, or Federal holiday, the reporting package is due the next business day.

(2) Unless restricted by Federal statutes or regulations, the auditee must make copies available for public inspection. Auditees and auditors must ensure that their respective parts of the reporting package do not include protected personally identifiable information.

(b) Data collection. The FAC is the repository of record for subpart F of this part reporting packages and the data collection form. All Federal agencies, pass-through entities and others interested in a reporting package and data collection form must obtain it by accessing the FAC.

(1) The auditee must submit required data elements described in Appendix X to Part 200, which state whether the audit was completed in accordance with this part and provides information about the auditee, its Federal programs, and the results of the audit. The data must include information available from the audit required by this part that is necessary for Federal agencies to use the audit to ensure integrity for Federal programs. The data elements and format must be approved by OMB, available from the FAC, and include collections of information from the reporting package described in paragraph (c) of this section. A senior level representative of the auditee (e.g., state controller, director of finance, chief executive officer, or chief financial officer) must sign a statement to be included as part of the data collection that says that the auditee complied with the requirements of this part, the data were prepared in accordance with this part (and the instructions accompanying the form), the reporting package does not include protected personally identifiable information, the information included in its entirety is accurate and complete, and that the FAC is authorized to make the reporting package and the form publicly available on a website.