Cap. 632 чл. 25Reporting of breaches.        Cap. 586.

(1) The competent authority shall establish effective mechanisms that encourage reporting of breaches of this Act, or of the regulations or directives made under it.

(2) The mechanisms referred to in sub-article (1) shall include at least:

(a) specific procedures for the receipt of reports of breaches and their follow-up;

(b) protection of personal data concerning both the person who reports the suspected or actual breach and the person who is suspected of committing, or who has allegedly committed that breach, in compliance with the principles laid down in the Data Protection Act and Regulation (EU) 2016/679

of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); and

(c) appropriate procedures to ensure the right of the accused person to a defence and to be heard before the adoption of a decision concerning him, and the right to seek an effective remedy before a tribunal against any decision or measure concerning him.

(3) Registered firms shall establish appropriate procedures for their employees to report potential or actual breaches of this Act, or of the regulations or directives made under it through a specific channel or channels.