(1) Documents, communications, data, reports or other information expressly required to be collected, developed, maintained or reported to a regulatory agency under the Insurance Code or other state or federal law;
(2) Information obtained by observation or monitoring by any regulatory agency; or
(3) Information obtained from a source other than the insurance compliance audit. [2001 c.329 §7]