POPI Act Contravension

I am currently insured with Auto and General but did a quotation with OUTsurance in response to a TV and SMS promotion where, if they cannot beat what Auto General is charging me, they will pay me R500 or R1500.

OUTsurance could not beat my Auto General and they asked me to submit my policy schedule.

My question is: As I'm not an OUTsurance Client and was merely responding to a promotion, which mandate (or under which policy) is Auto General allowed to give a 3rd party my private personal information, since this issue was not a vehicle incident claim?

I understand that generally, insurance companies liase with each other to verify information provided by a claimant. But since I'm not an OUTsurance Client and this was not a vehicle incident claim, why do they give 3rd partied private personal information?

I will be escalating this to the Insurance Ombudsman and a government parastatal dealing for contravensions of the POPI Act.