The data on the persons whistleblowers and the persons for whom there is suspicion or knowledge that they have performed, perform or will perform punishable, unethical or other unlawful or inadmissible activity that violates or endangers the public interest are processed in order to meet an obligation specified in the Law on Whistleblower Protection and the general legal acts of the National Bank of the Republic of North Macedonia. The protected reporting conveys reasonable suspicion in order to obtain information about suspicions or knowledge that a punishable, unethical or other unlawful or inadmissible activity has been performed, is being performed or is likely to be performed by an employee or a member of the Council of the National Bank that violates or endangers the public interest.

The National Bank processes the following categories of personal data: 

- name and surname;

- e-mail; 

- other data that can reveal the identity of the whistle-blower, that they, on their own initiative, submit to the report (if the whistleblower is anonymous, no personal data are processed); and

- name and surname for the employee or the member of the Council of the National Bank and other data and information (on suspicions or knowledge that a punishable, unethical or other unlawful or inadmissible activity has been performed, is being performed or is likely to be performed by these persons). 

For more detailed explanations for the protected reporting, please see:

- Law on Whistleblower Protection;

- Regulation on protected internal reporting in the National Bank of the Republic of North Macedonia;

- Instructions for protected internal reporting in the National Bank of the Republic of North Macedonia. 

The data are kept for ten years.