Article 37 3

3.   The ECB shall not reveal the identity of a person who has made a protected report without first obtaining that person’s explicit consent, unless such disclosure is required by a court order in the context of further investigations or subsequent judicial proceedings.