External authorities, support and institutional returns

1. Regulatory Concept & Core Standards

In this video we will work through a concrete decision: distinguish advisers, investigators and institutional recipients. The aim is to explain the criterion used and apply it to a workplace situation. We will start with the concept, move to the procedure and finish with a case to solve. External recipients depend on the breach field. Advice, receipt and investigation can differ. Since March 2026 KNAB is the contact point with statutory functions. Exercises send no real reports and do not make one authority every subject’s investigator.

Competence derives from statutory supervisory or other tasks. The contact point advises, refers and performs section 8 functions. An institutional return may differ from an individual report in recipient and grounds.

Apply the following rule: Reports can go to competent authorities or through the contact point and specified organisations. Since 1 March 2026 KNAB is the contact point. It advises, refers, supervises compliance and examines cases where no competent institution can be determined. It does not replace every sector authority’s powers. Internal reporting is encouraged only under section 5(4); public disclosure has separate section 4 conditions.

2. Practical Implementation & Procedure

Identify subject and verify official role and route. Determine reporting, advice or mandatory-return purpose. Do not prescribe one unsupported universal destination. Check current contacts before sending. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Everything is routed to a generic advice page. Review separates the subject authority, submission route and advice service. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does an advice contact prove investigative competence? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Powers follow the legal role. Check the contact for the matter and procedure.

One mistake to avoid is: confusing advice with official external examination.

Now apply the national rule to a second decision. The team treats KNAB as the only investigator for every sector. What needs clarification?

KNAB has performed contact-point functions since March 2026, but the competent institution examines the particular breach. The contact point helps identify it and also examines statutory cases where competence cannot be determined. Check the current official route. A private software provider does not become a competent public authority.