Professional solution for EU Whistleblowing Directive
72 hrs to go live with a default setup |
Unlimited users, reports, cases etc. |
Certified info-security and privacy management |
Must-do's to comply with EU Whistleblowing Directive
Multichannel
A reporter should be able to submit reports:
- In writing via an online system;
- A mailbox or by post;
- Orally via a telephone hotline or answering machine system.
Companies are also obliged to offer a personal meeting should the whistleblower request it.
Trackability
Whistleblowers should have the ability to check the status of their reports.
The reporting person needs to be informed of the receipt of the report within 7 days and provided feedback no later than in 3 months.
There is no defined time limit within which the follow-up actions need to be completed.
Responsibility
Companies must determine the “most suitable” person to receive and follow up on reports internally.
This could be a:
- Compliance officer;
- Head of HR;
- Legal counsel;
- Chief Financial Officer (CFO);
- Executive board member or management;
- Companies can also outsource the processing of reports.
Confidentiality and data safety
Companies must ensure that the identity of the whistleblower is kept confidential regardless of which reporting channel is used.
The hotline should follow the principles of the General Data Protection Regulation (GDPR).
All the involved should be guaranteed protection from data leak: reporting person, concerned person, and third people mentioned in the report. Only authorized persons can have access to gathered information.
7
|
days to acknowledge the receipt of the report and inform the whistleblower
|
|
|
|
|
3
|
months timeframe for an investigation and informing a reporting person about the outcome
|
|
|
|
|
6
|
months timeframe extension is possible where necessary due to the specific circumstances
|
7
|
days to acknowledge the receipt of the report and inform the whistleblower
|
|
|
|
|
3
|
months timeframe for an investigation and informing a reporting person about the outcome
|
|
|
|
|
6
|
months timeframe extension is possible where necessary due to the specific circumstances
|
15 key introductions of EU WB Directive
Obligation to have a whistleblowing channel for EU organizations and its subsidiaries (anywhere) of any ownership type regardless of the industry with a headcount over 250 since 31/12/2021, and over 50 since 17/12/2023
|
|
|
|
Obligation to provide a choice to whistleblowers between internal and external channels.
The channels can be organized by a third party. |
||
|
|
|
|
|
||
Protection of whistleblowers in case of public disclosure | The response staff should be professionally trained | |||||
The internal channel should be available to the company’s workers and may expand to other people | Roles should be clearly defined. Each report should have a single responsible person | |||||
The reporting channels should be “friendly” and support continuous communication. Optional for anonymous whistleblowers. | Records should be safeguarded and stored | |||||
Most of the breaches of public interest to be covered as channels topics | Rights of alleged wrongdoers to be informed and heard | |||||
Obligation to acknowledge receipt, report on progress, receive/give feedback | Relief from NDAs and criminal offenses for secret disclosure if the information is legally obtained | |||||
The legal protection of whistleblowers should not depend on motives, employment, legal status, nationality, or other factors. | Protection from retaliation — both for the whistleblower and related persons | |||||
Right of whistleblowers to be wrong (shifted burden of proof) |
Obligation to have a whistleblowing channel for EU organizations and its subsidiaries (anywhere) of any ownership type regardless of the industry with a headcount of over 250 since 31/12/2021, and over 50 since 17/12/2023
|
||
Obligation to provide a choice to whistleblowers between internal and external channels. The channels can be organized by a third party. |
||
The internal channel should be available to the company’s workers and may expand to other people | ||
The reporting channels should be “friendly” and support continuous communication. Optional for anonymous whistleblowers. | ||
Most of the breaches of public interest to be covered as channels topics | ||
Obligation to acknowledge receipt, report on progress, receive/give feedback | ||
The legal protection of whistleblowers should not depend on motives, employment, legal status, nationality, or other factors. | ||
Right of whistleblowers to be wrong (shifted burden of proof) | ||
Protection of whistleblowers in case of public disclosure
|
||
The response staff should be professionally trained | ||
Roles should be clearly defined. Each report should have a single responsible person | ||
Records should be safeguarded and stored | ||
Rights of alleged wrongdoers to be informed and heard | ||
Relief from NDAs and criminal offenses for secret disclosure if the information is legally obtained | ||
Protection from retaliation — both for the whistleblower and related persons |
Start from 89 EUR per month
Our online platform is 100% compliant with the Directive and goes much beyond it
|
|
|
Unlimited |
|
60+ |
Reports, users, employees, cases |
|
Intake languages and features of machine or manual translations |
|
|
|
10+ |
|
72 hrs |
Dedicated intake channels |
|
To go live with the default settings |
|
|
|
GDPR aware |
|
Secure |
At policy, entity, and platform levels. Our Privacy Information Management System is certified under ISO 27701 |
|
Data stored within the EU in certified data centers. |
|
|
|
|
Turnkey solution |
|
Framework friendly |
|
Our experience and our numerous client's expertise are embedded into the platform with a ready-made business process |
|
Compliant with other laws and frameworks: FCPA, UKBA, SAPIN II, PIDA, ISO 37001, ISO 37002, ESG |
|
Comply with the EU Directive in three steps
|
Choose your plan |
Select the features suitable for your company’s needs |
|
Test and adjust |
Customize the platform and get to know the features |
|
Promote and use |
Spread awareness among your employees and start resolving the cases |
Recent blog posts
EU Whistleblowing Directive — what's in for betting and gambling industries?
EU Whistleblowing Directive — The most comprehensive protection for whistleblowers?
EU Whistleblowing Directive — how to prepare your business?
New whistleblowing regulation in the EU requires not only the public sector but private business owners (and partners) to communicate with and protect whistleblowers. What is the guide for new regulation?
EU Whistleblowing Directive — what's in for betting and gambling industries?
The outsider of the whistleblowing campaign is slowly turning its attention to the market - that's for the betting and gambling industries. Any special requirements and risks for your company?
EU Whistleblowing Directive — 2021 Progress Report
The deadline to implement the EU Whistleblowing Directive is coming soon - each EU country has to introduce its whistleblowing law in 2022. What is the progress, and who is an outsider?
EU Whistleblowing Directive — The most comprehensive protection for whistleblowers?
There are always two kinds of people: those who don't pay taxes and those who keep silent about it. A new EU Directive is aimed to fix both issues and has announced stringent measures to complete it. We prepared a long-awaited important long read about benefits - will you notice some pitfalls?
EU Whistleblowing Directive — how to prepare your business?
New whistleblowing regulation in the EU requires not only the public sector but private business owners (and partners) to communicate with and protect whistleblowers. What is the guide for new regulation?