Cap. 281 Art. 20BReporting of breaches.

(1) The Board shall establish effective mechanisms that encourage reporting of breaches of this Act, the regulations made under it and Directives or of the Audit Regulation to the Board.

(2) The mechanisms referred to in sub-article (1) shall include at least:

(a) specific procedures for the receipt of reports of breaches and their follow-up;

(b) protection of personal data concerning both the person who reports the suspected or actual breach and the person who is suspected of committing, or who has allegedly committed that breach, in compliance with the principles laid down in the Data Protection Act;

(c) appropriate procedures to ensure the right of the accused person to a defence and to be heard before the adoption of a decision concerning him or her, and the right to seek an effective remedy before a tribunal against any decision or measure concerning him or her.

(3) Audit firms shall establish appropriate procedures for their employees to report potential or actual breaches of this Act, the regulations made under it and Directives or of the Audit Regulation internally through a specific channel.