GST departmental audit

My client has received a notice for GST departmental audit for the FY 19-20. However they are asking data for previous years too. I wanted to know whether the department is valid on asking such previous data or is ultra vires. If they cannot then what law can we state them.