Recital 147

In order to detect potential infringements, competent authorities should have the necessary investigatory powers, and should establish effective and reliable mechanisms to encourage reporting of potential or actual infringements, including protection of employees reporting infringements within their own institution. Those mechanisms should be without prejudice to adequate safeguards for accused persons. Appropriate procedures should be established to ensure appropriate protection of an accused person, particularly with regard to the right to the protection of personal data of that person and procedures to ensure the right of the accused person of defence and to be heard before the adoption of a decision concerning him as well as the right to seek effective remedy before a court against a decision concerning him.