Article 10d Protection of persons who report potential infringements and protection of their personal data

The Commission shall develop, make accessible and maintain a confidential online external reporting channel for receiving reports, within the meaning of Directive (EU) 2019/1937 of the European Parliament and of the Council ( 4 ), on potential infringements of this Directive and shall relay such reports to the Member States concerned.

Member States shall ensure that national competent authorities receiving reports of violations of this Directive, submitted through the channel referred to in paragraph 1, investigate, act upon where appropriate, provide feedback in a timely manner, and follow-up on those reports in accordance with Directive (EU) 2019/1937.

The Commission may, pursuant to Article 25(1), points (c) and (h), of Regulation (EU) 2018/1725 of the European Parliament and of the Council ( 5 ) and in line with Article 25(2) thereof, restrict the application of Articles 4, 14 to 22, 35 and 36 of that Regulation for the data subjects who are the object of or mentioned in the report submitted through the channel referred to in paragraph 1 of this Article and who are not the data subjects submitting that report. That restriction may apply only for the duration necessary for the investigation of the report referred to in paragraph 2 of this Article by the competent Member State authorities.