CCO reporting obligation