(1) Each controller must implement effective mechanisms to encourage the reporting of an infringement of this Part.
(2) The mechanisms implemented under subsection (1) must provide that an infringement may be reported to any of the following persons -
(a) the controller;
(3) The mechanisms implemented under subsection (1) must include -
(a) raising awareness of the protections provided by Part 4A of the Employment Rights Act 1996 and Part 5A of the Employment Rights (Northern Ireland) Order 1996 (S.I. 1996/1919 (N.I. 16)), and
(b) such other protections for a person who reports an infringement of this Part as the controller considers appropriate.
(4) A person who reports an infringement of this Part does not breach -
(a) an obligation of confidence owed by the person, or
(b) any other restriction on the disclosure of information (however imposed).
(5) Subsection (4) does not apply if or to the extent that the report includes a disclosure which is prohibited by any
…