(1) Audit working papers and investigation reports must not be transferred to a third country competent authority unless the third country competent authority is an approved third country competent authority and the transfers are made in accordance with -
(a) section 1253DA (transfer by Secretary of State),
(b) section 1253DB (transfer by statutory auditor with approval of Secretary of State), or
(c) section 1253DC (transfer by statutory auditor for purposes of investigation of auditor).
(2) [deleted]
(3) Nothing in the sections referred to in subsection (1) authorises the making of a disclosure in contravention of the data protection legislation.