S.L. 476.4 Art. 12Protection procedures for personal data and reports received.

(1) The competent authority shall ensure that the records of every report of infringement received are stored in a confidential and secure system and access to the data stored in such system shall be available only to staff members of the competent authority for whom access to that data is necessary to perform their professional duties.

(2) The competent authority shall not disclose to any person, either directly or indirectly, the identity of the reporting person or reported person or any other references to circumstances that would allow the identity of the reporting person or reported person to be deduced, unless such transmission is in accordance with the confidentiality regime referred to in regulation 8(1)(d).

(3) The competent authority shall put in place adequate procedures for the transmission of data of the reporting person and reported person inside and outside of the competent authority.