Article 61 2.

specific procedures for the receipt of reports on breaches and their follow-up;

appropriate protection for employees or persons in a comparable position, of obliged entities who report breaches committed within the obliged entity;

appropriate protection for the accused person;

protection of personal data concerning both the person who reports the breaches and the natural person who is allegedly responsible for a breach, in compliance with the principles laid down in Directive 95/46/EC;

clear rules that ensure that confidentiality is guaranteed in all cases in relation to the person who reports the breaches committed within the obliged entity, unless disclosure is required by national law in the context of further investigations or subsequent judicial proceedings.