> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/tofr/articles/32.md).

# Article 32 — Reporting of breaches

*In force · Regulation (EU) 2023/1113, OJ L 150, 9.6.2023 · Checked against EUR-Lex on 19 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/eli/reg/2023/1113/oj/eng)

1. Member States shall establish effective mechanisms to encourage the reporting to competent authorities of breaches of this Regulation.

   Those mechanisms shall include at least those referred to in Article 61(2) of Directive (EU) 2015/849.
2. [Payment service providers](https://www.headlesslaw.com/definitions/tofr/payment-service-provider) and [crypto-asset service providers](https://www.headlesslaw.com/definitions/tofr/crypto-asset-service-provider), in cooperation with the competent authorities, shall establish appropriate internal procedures for their employees, or persons in a comparable position, to report breaches internally through a secure, independent, specific and anonymous channel, proportionate to the nature and size of the payment service provider or the crypto-asset service provider concerned.

***

[Chapter VI — Sanctions and monitoring](/tofr/chapters/vi.md) · [← Article 31](/tofr/articles/31.md) · [Article 33 →](/tofr/articles/33.md)