an auditor fails to comply with a certification agreement or to conduct audits in accordance with the PREA Auditor Handbook, audit methodology, and instrument approved by the PREA Management Office, the Office may take remedial or disciplinary action, as appropriate, including decertifying the auditor in accordance with subparagraph (B). (B) Auditor decertification (i) In general The PREA Management Office may suspend an auditor’s certification during an evaluation of an auditor’s performance under subparagraph (A)(iii). The PREA Management Office shall promptly publish the names of auditors who have been decertified, and the reason for decertification. Auditors who have been decertified or are on suspension may not participate in audits described in subsection (a), including as an agent of a certified auditor. (ii) Notification In the case that an auditor is decertified, the PREA Management Office shall inform each facility or agency at which the auditor performed an audit during the relevant 3-year audit cycle, and may recommend that the agency repeat any affected audits, if appropriate. (C) Audit assignments The PREA Management Office shall establish a system, to be administered by the Office, for assigning certified auditors to Federal, State, and local facilities. (D) Disclosure of documentation The Director of the Bureau of Prisons shall comply with each request for documentation necessary to conduct an audit under subsection (a), which is made by a certified auditor in accordance with the provisions of the certification agreement described in subparagraph (A)(ii). The Director of the Bureau of Prisons may require an auditor to sign a confidentiality agreement or other agreement designed to address the auditor’s use of personally identifiable information, except that such an agreement may not limit an auditor’s ability to provide all such documentation to the Department of Justice, as required under section 115.401(j) of title 28, Code of Federal Regulations. .