Article 28 4.

Member States may require employers engaged in activities that are regulated for financial services purposes to have in place appropriate procedures for their employees to report actual or potential infringements internally through a specific, independent and autonomous channel.