The EU Whistleblower Directive (2019/1937), explained

Who needs an internal channel?

National law determines which organisations need an internal reporting channel. The EU directive generally covers private entities with 50 or more workers, with sector-specific rules and public-sector provisions. Check the applicable national law and implementation dates.

Confidentiality and anonymity

Confidentiality and anonymity differ. The EU directive protects identity; national law determines duties to accept anonymous reports. A voice, attachments and report details can identify a reporter.

Receiving and following up reports

Internal channels generally require acknowledgement within seven days and feedback within three months, subject to applicable legal exceptions. The organisation remains responsible for follow-up.

Audio add-on – coming soon. Audio recording and audio-file uploads are unavailable. Written reporting and in-person meeting requests are included. The organisation arranges its oral reporting route and requested meetings under applicable law.

The organisation’s responsibilities

Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.

Appoint an impartial person or department responsible for follow-up. Provide information about reporting to competent external authorities; internal reporting is not a mandatory first step. Document oral reports under applicable law, seek consent before recording and allow the reporter to check the record.