The self-critical analysis privilege set forth in this chapter does not extend to:

1. Documents, communications, data, reports, or other information expressly required to be collected, developed, maintained, or reported to a regulatory agency pursuant to this title, or other federal or state law;

2. Information obtained by observation or monitoring by any regulatory agency; or

3. Information obtained from a source independent of the compliance audit.