> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/amla/articles/90.md).

# Article 90 — Reporting of breaches and protection of reporting persons

*In force · Consolidated version of 10 November 2025 · Checked against EUR-Lex on 8 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110)

1. The Authority shall have in place dedicated reporting channels for receiving and handling information provided by persons reporting actual or potential breaches of:

   **(a)** [Regulation (EU) 2024/1624](https://www.headlesslaw.com/amlr), insofar as the requirements applicable to credit institutions and financial institutions are concerned;

   **(b)** [Regulation (EU) 2023/1113](https://www.headlesslaw.com/tofr);

   **(c)** [Directive (EU) 2024/1640](https://www.headlesslaw.com/amld6), insofar as the requirements applicable to supervisory authorities, self-regulatory bodies in the exercise of supervisory functions and FIUs are concerned.
2. The persons reporting through those channels and the persons concerned shall enjoy the protection of Directive (EU) 2019/1937, where applicable.
3. Following the submission of reports pursuant to [Article 60(4)](https://www.headlesslaw.com/amld6/articles/60) of Directive (EU) 2024/1640 by supervisory authorities in the non-financial sector, the Authority shall be able to request additional information from those supervisory authorities on how they followed up on the reports received. Those supervisory authorities shall promptly provide the requested information but shall not disclose information that may lead to the identification of the reporting person.

***

[Chapter V — Staff and cooperation](/amla/chapters/v.md) · [← Article 89](/amla/articles/89.md) · [Article 91 →](/amla/articles/91.md)