1. The code of conduct shall require a contributor to establish documented internal procedures that provide for its staff to report any suspicious input data to the contributor's compliance function, if any, and to the contributor's senior management.

2. The code of conduct shall specify the conditions under which a contributor must report suspicious input data to the administrator, and shall specify the process and means of communication to be used by the contributor in order to contact the administrator.