2.

Member States shall ensure that the competent authorities: establish independent and autonomous external reporting channels, for receiving and handling information on breaches; promptly, and in any event within seven days of receipt of the report, acknowledge that receipt unless the reporting person explicitly requested otherwise or the competent authority reasonably believes that acknowledging receipt of the report would jeopardise the protection of the reporting person's identity; diligently follow up on the reports; provide feedback to the reporting person within a reasonable timeframe not exceeding three months, or six months in duly justified cases; communicate to the reporting person the final outcome of investigations triggered by the report, in accordance with procedures provided for under national law; transmit in due time the information contained in the report to competent institutions, bodies, offices or agencies of the Union, as appropriate, for further investigation, where provided for under Union or national law.

← art_11__para_1__text_1 · All articles · art_11__para_2__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-11 · Text as adopted (Official Journal); later amendments are not incorporated in this text.