If, during the course of an audit, an auditor determines that criminal activity may be involved, then investigative records shall be confidential until the audit is complete and shall be provided to the university president or chancellor, the community/junior college president or agency director and shall be forwarded to the Attorney General to determine if a criminal prosecution shall proceed.