A practical look at the obligations introduced by Directive 2019/1937 and how to build channels that meet them.
The EU Whistleblower Directive set a common minimum standard for reporting channels and protections across the Union. For organisations with operations in Europe, the practical obligations are significant.
Three things to get right
- Secure internal channels that acknowledge reports within seven days and provide feedback within three months.
- Confidentiality by design, restricting access to the identity of the discloser.
- A clear anti-retaliation stance, supported by training and governance.
National transpositions often go beyond the minimum, so a channel that can be configured per jurisdiction is invaluable.