Denial of access to the reports of the compliance officer and an external advisor of a municipal company

Data protection regulations do not prevent the claimant from accessing information relating to legal entities or reports that do not contain personal information. Nor does it prevent access to the merely identifying information of the compliance officer and the external lawyers who wrote the reports. However, with respect to the information relating to the persons allegedly responsible, the reporting person and, where appropriate, witnesses, must be provided anonymously. And to the extent that effective anonymization is not possible, access must be facilitated through a summary of the actions taken, so that the physical persons affected are not identifiable.