Annex on the Protection of
Confidential Information
"Confidentiality Annex"

D. PROCEDURES IN CASE OF BREACHES OR ALLEGED BREACHES OF CONFIDENTIALITY

• 18. The Director-General shall establish necessary procedures to be followed in case of breaches or alleged breaches of confidentiality, taking into account recommendations to be considered and approved by the Conference pursuant to Article VIII, paragraph 21 (i).
• 19. The Director-General shall oversee the implementation of individual secrecy agreements. The Director-General shall promptly initiate an investigation if, in his judgement, there is sufficient indication that obligations concerning the protection of confidential information have been violated. The Director-General shall also promptly initiate an investigation if an allegation concerning a breach of confidentiality is made by a State Party.
• 20. The Director-General shall impose appropriate punitive and disciplinary measures on staff members who have violated their obligations to protect confidential information. In cases of serious breaches, the immunity from jurisdiction may be waived by the Director-General.
• 21. States Parties shall, to the extent possible, cooperate and support the Director-General in investigating any breach or alleged breach of confidentiality and in taking appropriate action in case a breach has been established.
• 22. The Organization shall not be held liable for any breach of confidentiality committed by members of the Technical Secretariat.
• 23. For breaches involving both a State Party and the Organization, a "Commission for the settlement of disputes related to confidentiality", set up as a subsidiary organ of the Conference, shall consider the case. This Commission shall be appointed by the Conference. Rules governing its composition and operating procedures shall be adopted by the Conference at its first session.