A person who makes a public disclosure shall qualify for protection under this Directive if any of the following
conditions is fulfilled:
- The person first reported internally and externally, or directly externally but no appropriate action was taken in response to the report within the timeframe.
- The person has reasonable grounds to believe that the breach may constitute an imminent or manifest danger to the public interest.
- The person has reasonable grounds to believe that in the case of external reporting, there is a risk of retaliation or there is a low prospect of the breach being effectively addressed, due to the particular circumstances of the case.
Article 15 of the Directive