§ 66 DSG NRWConfidential reporting of data protection violations(1)The controller shall enable confidential reports of violations of data protection provisions occurring within its area of responsibility to be submitted to it.