A person (the information holder ) may disclose information to another person (the recipient ) if:
(a) the information was obtained or generated by the information holder in the course of performing an Auditor - General function; and
(b) the information is provided to the recipient to assist the information holder in conducting an audit under Division 2 or 2A, or a performance audit under an arrangement entered into under Division 3.