Do you need a whistleblowing channel? The 50-employee test and your first deadlines

Many organisations are unsure whether the EU Whistleblower Directive actually applies to them. The test is simpler than the legal text makes it look.

The 50-employee test

50 or more employees means you must operate a confidential internal reporting channel — private sector or public sector, the threshold is the same. Below 50, the requirement generally does not apply, with one significant exception: organisations in regulated sectors such as financial services or aviation safety are covered regardless of headcount. Some Member States have also enacted lower thresholds, so your national transposition can be stricter than the directive’s baseline.

A 30-second checklist

• Do you have 50 or more employees? If yes, you are in scope.
• Are you in a regulated sector (finance, aviation safety, and similar)? If yes, you are in scope regardless of size.
• Does the Member State you operate in set a lower threshold? Check your national transposition.
• Are you a group of companies? Each entity’s obligations need to be assessed individually.

If it applies, what you must have

• A confidential internal reporting channel that guarantees anonymity
• Acknowledgement to the reporter within 7 days
• Feedback on follow-up within 3 months
• Protection against retaliation for reporters and those who help them
• GDPR-compliant, case-scoped documentation
• An external reporting route to the competent national authority

The deadlines have already passed

This is not something to plan for — it is already overdue. The directive came into force on 17 December 2021. The obligation was extended to organisations with 50 to 249 employees on 17 December 2023. If you are in that band and still lack a channel, you are past the deadline, not approaching one.

Getting compliant quickly

A compliant channel does not require a procurement project. Whistlechannel is self-serve, available in all 24 official EU languages, and can be live in minutes — with the 7-day acknowledgement and 3-month feedback timelines tracked automatically.