Cal. GOV § 8547.7

(a) If, after investigating an allegation, the California State Auditor finds that a state agency or employee may have engaged or participated in an improper governmental activity, the California State Auditor shall prepare an investigative report and send a copy of the report to the head of the agency involved and to the head of any other agency that has direct oversight over that involved agency. The investigative report may include the California State Auditor’s recommended actions to prevent the continuation or recurrence of the activity. If appropriate, the California State Auditor shall report this information to the Attorney General, the policy committees of the Senate and Assembly having jurisdiction over the subject involved, the Assembly and Senate budget committees, the Joint Legislative Audit Committee, and to any other authority that the California State Auditor determines appropriate. Subject to the limitations of Section 8547.5, the California State Auditor may provide to the involved agency any evidence gathered during the investigation that, in the judgment of the California State Auditor, is necessary to support any of the recommendations. Within 60 days of receiving the California State Auditor’s investigative report, the involved agency shall report to the California State Auditor any actions that it has taken or that it intends to take to implement the recommendations. The agency shall file subsequent reports on a monthly basis until final action has been taken.

(b) The California State Auditor shall not have any enforcement power. In any case in which the California State Auditor finds that a state agency or employee may have engaged in an improper governmental activity, the California State Auditor may provide the finding, and any evidence supporting the finding, subject to the limitations of Section 8547.5, to a criminal law enforcement agency, an administrative law enforcement agency, or a licensing agency that has authority to investigate the matter.

(c) The California State Auditor shall keep confidential every investigation, including, but not limited to, all investigative files and work product, except that the California State Auditor, whenever the California State Auditor determines it necessary to serve the interests of the state, and subject to the limitations of Section 8547.5, may issue a public report of an investigation that has substantiated an improper governmental activity, keeping confidential the identity of the employee or employees involved. In addition, subject to the limitations of Section 8547.5, the California State Auditor may release any findings or evidence supporting any findings resulting from an investigation conducted pursuant to this article whenever the California State Auditor determines it necessary to serve the interests of the state.

(d) This section does not limit any authority conferred upon the Attorney General or any other department or agency of government to investigate any matter.