Minnesota Statutes Data Practices (Ch. 13-13C) § 13.392. Internal auditing data

Subdivision 1.Confidential data or protected nonpublic data. Data, notes, and preliminary drafts of reports created, collected, and maintained by the internal audit offices of government entities, or persons performing audits for government entities, and relating to an audit or investigation are confidential data on individuals or protected nonpublic data until the final report has been published or the audit or investigation is no longer being pursued actively, except that the data shall be disclosed as required to comply with section 6.67 or 609.456. This section does not limit in any way:

Subd. 2. Private data on individuals.Data on an individual supplying information for an audit or investigation, that could reasonably be used to determine the individual's identity, are private data on individuals if the information supplied was needed for an audit or investigation and would not have been provided to the internal audit office or person performing audits without an assurance to the individual that the individual's identity would remain private.