{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-06-19","gaps":[],"covered":["AMLA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/amla/articles/90","url":"https://www.headlesslaw.com/amla/articles/90","title":"Article 90 — Reporting of breaches and protection of reporting persons","family":"l1_generated","work_id":"amla","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":"2025-07-01","application":{"state":"applicable","next":null,"dates":[{"at":"2025-07-01","note":"Article 108"}]},"version_label":"Consolidated version of 10 November 2025","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110","valid_from":"2025-11-10","valid_until":null,"revision":1,"content_id":"e0ac3bfafbce2a2a","change_date":null,"nearest_versions":["2024-06-19","2025-11-10"],"first_text_date":"2024-05-31","correction_applies":false,"versions":["2024-06-19","2025-11-10"],"version_url":"https://www.headlesslaw.com/amla/articles/90/versions/2025-11-10","revision_url":"https://www.headlesslaw.com/amla/articles/90/versions/2025-11-10/rev/e0ac3bfafbce2a2a","versions_url":"https://www.headlesslaw.com/amla/articles/90/versions","relations_url":"https://www.headlesslaw.com/amla/articles/90/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110","check":{"result":"matched","checked_at":"2026-11-09","against":"EUR-Lex"},"repo_path":null,"body_sha256":"2715a8f9859b2aedb15ff01f7e6ed139ef2d1cd30a8d11b9611e13db0a407410","markdown_sha256":"13a4e0b115c0bdaa685240110d733d33def171f0d7ac13a783db97741861a5ff"},"units":[{"locator":"amla/art/90","kind":"article","status":"in_force","label":null,"heading":"Reporting of breaches and protection of reporting persons","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"amla/art/90/para/1","kind":"paragraph","status":"in_force","label":"1.","heading":null,"text":"The Authority shall have in place dedicated reporting channels for receiving and handling information provided by persons reporting actual or potential breaches of:","marks":[],"revision":1,"text_hash":"dcafb92931e4c863bf33826eb4ab23914238532d7ef5f71cee38744d3a375f87","reason":null},{"locator":"amla/art/90/para/1/pt/a","kind":"point","status":"in_force","label":"(a)","heading":null,"text":"Regulation (EU) 2024/1624, insofar as the requirements applicable to credit institutions and financial institutions are concerned;","marks":[],"revision":1,"text_hash":"bff7a02cb06b927ee2b2cbad68f770f474b8f1bd1659078010dfc4ebc900a607","reason":null},{"locator":"amla/art/90/para/1/pt/b","kind":"point","status":"in_force","label":"(b)","heading":null,"text":"Regulation (EU) 2023/1113;","marks":[],"revision":1,"text_hash":"8884178d4726b75606398333fd75d9498bb84e357e0324a7acd02c7729531458","reason":null},{"locator":"amla/art/90/para/1/pt/c","kind":"point","status":"in_force","label":"(c)","heading":null,"text":"Directive (EU) 2024/1640, insofar as the requirements applicable to supervisory authorities, self-regulatory bodies in the exercise of supervisory functions and FIUs are concerned.","marks":[],"revision":1,"text_hash":"8acc909a24595d0d73602b1a0dda077a17004d188d7846849162df75bf9ffd5e","reason":null},{"locator":"amla/art/90/para/2","kind":"paragraph","status":"in_force","label":"2.","heading":null,"text":"The persons reporting through those channels and the persons concerned shall enjoy the protection of Directive (EU) 2019/1937, where applicable.","marks":[],"revision":1,"text_hash":"7659d1c399346aa3ce287eb5e05308da079db8f842e48bef5a4b77ef996a6379","reason":null},{"locator":"amla/art/90/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"Following the submission of reports pursuant to Article 60(4) of Directive (EU) 2024/1640 by supervisory authorities in the non-financial sector, the Authority shall be able to request additional information from those supervisory authorities on how they followed up on the reports received. Those supervisory authorities shall promptly provide the requested information but shall not disclose information that may lead to the identification of the reporting person.","marks":[],"revision":1,"text_hash":"2c41b8eac7e8e63245db18093823745d0720e63c5cec077a4f9b19b47fe87437","reason":null}],"markdown":"*In force · Consolidated version of 10 November 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110)*\n\n1. <a id=\"p-1\"></a>The Authority shall have in place dedicated reporting channels for receiving and handling information provided by persons reporting actual or potential breaches of:\n\n    <a id=\"p-1-a\"></a>**(a)** [Regulation (EU) 2024/1624](https://www.headlesslaw.com/amlr), insofar as the requirements applicable to credit institutions and financial institutions are concerned;\n\n    <a id=\"p-1-b\"></a>**(b)** [Regulation (EU) 2023/1113](https://www.headlesslaw.com/tofr);\n\n    <a id=\"p-1-c\"></a>**(c)** [Directive (EU) 2024/1640](https://www.headlesslaw.com/amld6), insofar as the requirements applicable to supervisory authorities, self-regulatory bodies in the exercise of supervisory functions and FIUs are concerned.\n2. <a id=\"p-2\"></a>The persons reporting through those channels and the persons concerned shall enjoy the protection of Directive (EU) 2019/1937, where applicable.\n3. <a id=\"p-3\"></a>Following the submission of reports pursuant to [Article 60(4)](https://www.headlesslaw.com/amld6/articles/60) of Directive (EU) 2024/1640 by supervisory authorities in the non-financial sector, the Authority shall be able to request additional information from those supervisory authorities on how they followed up on the reports received. Those supervisory authorities shall promptly provide the requested information but shall not disclose information that may lead to the identification of the reporting person.\n\n***\n\n[Chapter V — Staff and cooperation](../chapters/v.md) · [← Article 89](89.md) · [Article 91 →](91.md)\n"}