The correct option is:
3. SARS may obtain bank statement when auditing South African taxpayers.
SARS (South African Revenue Service) has the authority to access financial information, including bank statements, during tax audits to ensure compliance with tax laws. The other options do not accurately reflect the legal provisions under South African law regarding access to financial information.