France has progressively strengthened its whistleblowing framework through Sapin II and the landmark Loi Waserman, imposing stricter obligations on organisations to establish secure, confidential reporting channels.
France has emerged as one of Europe's most rigorous jurisdictions for whistleblower protection, building a robust legal architecture through two landmark pieces of legislation: the Sapin II law of 2016 and the Loi Waserman of 2022. Together, these laws impose clear, enforceable obligations on companies operating in France to provide secure internal reporting mechanisms — and the consequences of non-compliance are becoming increasingly difficult to ignore.
The Foundation: What Sapin II Established
Enacted in December 2016, the Sapin II law — formally known as the Loi relative à la transparence, à la lutte contre la corruption et à la modernisation de la vie économique — introduced France's first comprehensive whistleblower protection framework at a national level. The law established a broad definition of a whistleblower as any individual who discloses, in a disinterested and good-faith manner, information about a crime, serious threat to the public interest, or violation of law or international commitment.
Crucially, Sapin II required companies employing more than fifty people to establish internal reporting procedures. Those procedures had to ensure the confidentiality of the whistleblower's identity and the information disclosed, while also protecting the individual from retaliation. Employers found to have retaliated against a whistleblower — through dismissal, demotion, or any other adverse measure — faced both civil and criminal liability.
At the time, the law was considered progressive by European standards. However, gaps remained, particularly around the scope of protected disclosures, the hierarchy of reporting channels, and the level of support afforded to whistleblowers during what could be prolonged and costly processes.
The Loi Waserman: Transposing the EU Directive and Going Further
The passage of the EU Whistleblowing Directive in 2019 required all Member States to transpose its provisions into national law by December 2021. France responded with the Loi Waserman, which entered into force in April 2022 and represented a significant expansion and refinement of the existing framework.
The Loi Waserman introduced several important changes that organisations must understand and act upon:
- Broadened definition of whistleblowers: The new law widened the category of protected individuals to include facilitators — people who assist a whistleblower in making a report — as well as legal entities, such as civil society organisations, that support the disclosure process.
- Expanded scope of protected information: Whistleblowers are now protected when reporting threats or harm to the public interest, extending coverage beyond strictly criminal matters to include regulatory breaches, ethical misconduct, and risks to public health or the environment.
- Revised reporting hierarchy: A significant departure from Sapin II's sequential reporting requirement, the Loi Waserman allows whistleblowers to report internally or externally — to a competent authority — simultaneously rather than being obliged to exhaust internal channels first. This change acknowledges that internal channels are not always safe or effective.
- Strengthened confidentiality obligations: Companies must now ensure that the identity of the whistleblower, the individuals named in the disclosure, and the content of the report itself are all protected throughout the procedure. Any breach of confidentiality can expose an organisation to criminal sanctions.
- Enhanced protections against retaliation: The range of prohibited retaliatory measures was broadened, and the burden of proof was clarified. Where a whistleblower demonstrates a plausible link between their disclosure and an adverse measure, it falls to the employer to prove that the measure was justified by objective, unrelated grounds.
- Financial support for whistleblowers: The Défenseur des droits — France's independent ombudsman — was given an expanded role in supporting whistleblowers, including the ability to facilitate access to provisional financial assistance where a whistleblower faces genuine hardship as a result of their disclosure.
What This Means for Organisations Operating in France
For any organisation that meets the relevant thresholds — currently set at fifty or more employees — compliance with the Loi Waserman is not optional. Companies must maintain a formal internal reporting channel that meets defined procedural standards, including acknowledgement of receipt within seven days and substantive feedback to the whistleblower within three months. Failure to implement a compliant procedure can attract administrative and criminal penalties.
Beyond the legal minimum, organisations should recognise that the Loi Waserman signals a broader shift in regulatory culture. French authorities, including the Agence française anticorruption (AFA), have signalled an increasingly active approach to monitoring corporate compliance with anti-corruption and transparency obligations. A well-designed whistleblowing system is not merely a legal checkbox — it is a genuine risk management tool that can surface misconduct early, before it escalates into a regulatory or reputational crisis.
Organisations should also be aware that the external reporting pathway now runs parallel to internal channels. If employees do not trust internal procedures to be genuinely confidential and free from retaliation risk, they will bypass them entirely. Building a culture of trust around an internal channel is therefore both a legal and a strategic imperative.
Ensuring full compliance with France's evolving whistleblowing obligations requires a purpose-built, secure, and confidential reporting channel that meets the technical and procedural requirements of the Loi Waserman. Organisations that have not yet reviewed their existing arrangements — or that rely on informal or inadequate reporting mechanisms — should act without delay. A specialist whistleblowing platform provider can help you establish and maintain a compliant, trusted internal channel that protects your people, your organisation, and your obligations under French law.