Directive (EU) 2019/1937
Whistleblower Directive
EU whistleblower protection requires private-sector employers with 50+ workers (and public bodies) to establish secure reporting channels, acknowledge reports, and protect reporters from retaliation.
Am I affected?
Do you have 50 or more employees in the EU?
Yes - internal channel required in most member states.
Are you in financial services, transport, or other sectors with lower thresholds?
Sector rules may apply below 50 employees.
Do you already have a speak-up or ethics hotline?
Must meet confidentiality, acknowledgement, and follow-up standards.
Fines & sanctions
| Jurisdiction | Maximum | Notes |
|---|---|---|
| EU (varies) | Member-state sanctions | For failure to establish channels or retaliation. |
| Reputational | Trust / litigation risk | Retaliation claims and regulatory scrutiny. |
Key requirements
- Confidential internal reporting channel (written and oral).
- Acknowledge receipt within 7 days where feasible.
- Provide feedback on follow-up within 3 months.
- Protect reporter identity and prohibit retaliation.
- Document procedures and train designated handlers.
- Option for external reporting to competent authorities.
Deadlines
- Member-state transpositionDec 2023 (phased)
- Ongoing case handlingContinuous
Documents
Our services
EUCRAB offers audit, compliance, and full-service packages tailored to your assessment results.
View service packages