1. The competent authorities shall establish effective mechanisms to enable reporting of actual or potential infringements of Articles 4 and 15 to other competent authorities.

2. The mechanisms referred to in paragraph 1 shall include at least:

(a) specific procedures for the receipt of reports of infringements of Article 4 or 15 and their follow-up, including the establishment of secure communication channels for such reports;

(b) appropriate protection for persons working under a contract of employment who report infringements of Article 4 or 15 or who are accused of infringing those articles against retaliation, discrimination and other types of unfair treatment;

(c) protection of personal data both of the person who reports the infringement of Article 4 or 15 and of the person who allegedly committed the infringement, including protection in relation to preserving the confidentiality of their identity, at all stages of the procedure without prejudice to disclosure of information being required by national law in the context of investigations or subsequent judicial proceedings.

3. Counterparties shall have in place appropriate internal procedures for their employees to report infringements of Articles 4 and 15.