Reporting of breaches and protection of reporting persons
Article 60
1. Directive (EU) 2019/1937 shall apply to the reporting of breaches of Regulations (EU) 2024/1624 and (EU) 2023/1113 and of this Directive, and to the protection of persons reporting such breaches and of the persons concerned by those reports. 2. Supervisory authorities shall be the authorities competent to establish external reporting channels and to follow-up on reports insofar as requirements applicable to obliged entities are concerned, in accordance with Directive (EU) 2019/1937. 3. The public authorities overseeing self-regulatory bodies referred to in Article 52 shall be the authorities competent to establish external reporting channels and to follow up on reports by self-regulatory bodies and their staff insofar as requirements applicable to self-regulatory bodies in the exercise of supervisory functions are concerned. 4. Member States shall ensure that supervisory authorities in the non-financial sector report the following, on an annual basis, to AMLA: (a) the number of reports received pursuant to paragraph 1 and information on the share of reports that have been or are in the process of being followed-up, including whether they have been closed or are still open, and of the reports that have been dismissed; (b) the types of irregularities reported; (c) where reports have been followed-up, a description of the actions taken by the supervisor and, for reports that are still open, the actions which the supervisor intends to take; (d) where reports have been dismissed, the reasons for dismissing them. Annual reports as referred to in the first subparagraph shall not contain any information on the identity or occupation of the reporting persons, or any other information that could lead to their identification.