Article 23
The ECB shall ensure that effective mechanisms are put in place for reporting of breaches by credit institutions, financial holding companies or mixed financial holding companies or competent authorities in the participating Member States of the legal acts referred to in Article 4(3), including specific procedures for the receipt of reports of breaches and their follow-up. Such procedures shall be consistent with relevant Union legislation and shall ensure that the following principles are applied: appropriate protection for persons who report breaches, protection of personal data, and appropriate protection for the accused person.