Recital 6

(6)Where personal data are processed in the context of procedures under Article 18(5) of Regulation (EU) No 1024/2013 from the moment the ECB notifies the NCA that it requires the NCA to open proceedings; in the context of procedures under Article 136 of Regulation (EU) No 468/2014 of the European Central Bank (ECB/2014/17) ⁴ from the moment the ECB notifies the NCA of its request; and where there is a legal basis for the processing of personal data different from Regulation (EU) No 1024/2013, each NCA should be a sole controller. For any processing of personal data in relation to reports of breaches of Union or national law relating to the prudential supervision of credit institutions submitted through the ECB’s or an NCA’s whistleblowing mechanism, the ECB or the NCA, respectively, should be a sole controller.