The cost of non-compliance with the EU Whistleblower Directive

Directive (EU) 2019/1937 is an obligation, not a recommendation. Non-compliance carries two kinds of cost: the penalties you can look up, and the risk that stays invisible until something goes wrong.

National penalties vary — and reach into seven figures

Each Member State sets its own sanctions. In several countries those include fines of up to €1 million, and management can face personal liability. The exact exposure depends on where you operate, but “we haven’t got around to it yet” is not a defence anywhere in the EU.

The reversed burden of proof

The directive shifts the burden of proof in retaliation cases. If a reporter suffers a detriment — dismissal, demotion, a withdrawn promotion — following a report, the employer must demonstrate the detriment was unrelated to it. Without a documented, timestamped record of how the report was received and handled, that argument is very difficult to make.

The cost that never appears on an invoice

A reporting channel is an early-warning system. Without one, problems do not disappear — they surface later and elsewhere: through an external authority, in the press, or in litigation. By the time that happens, they are far more expensive to resolve. The organisations that benefit most from a channel are the ones that hear about a problem first, internally, while they still have options.

Compliance is the cheap option

Against that exposure, a compliant channel is modest insurance. Whistlechannel starts at 99 SEK per month, is self-serve, and can be live in minutes — a small, fixed cost set against a risk measured in six and seven figures.