(76)Member States should ensure that competent authorities have in place adequate protection procedures for the processing of reports and for the protection of the personal data of the persons referred to in the report. Such procedures should ensure that the identity of every reporting person, person concerned, and third persons referred to in the report, for example witnesses or colleagues, is protected at all stages of the procedure.