§ 72 HDSIGConfidential Reporting of Violations(1)The controller shall enable the confidential reporting of violations of data protection provisions occurring within his or her area of responsibility.