How to meet the EU Whistleblowing Directive requirements?

FAQ

What is the EU Whistleblowing Directive?

The EU Whistleblowing Directive was introduced in 2019 and aims to standardize the amount of protection whistleblowers receive in member states, by stipulating a range of requirements.

Are whistleblowers protected?

Yes. According to the EU Whistleblowing Directive, whistleblowers who report breaches must be protected and they should not face any retaliation. Other employees and stakeholders should also be educated about whistleblowing practices, according to the Directive.

Who is a whistleblower according to the EU Whistleblowing Directive?

According to the Directive, anyone with a ‘work-based relationship’ with an organization who reports misconduct and other forms of wrongdoing is considered a whistleblower and protected by it. This means standard employees, unpaid workers, freelancers, sub-contractors, suppliers and more.

Which organizations are required to comply with the Directive?

The EU Whistleblowing Directive is for all organizations with more than 50 people. Under its stipulations, they must provide an internal whistleblowing channel, educate employees and other stakeholders about whistleblowing, protect whistleblowers who submit reports and prevent them from retaliation. The Directive was adopted on October 23 2019 and came into force on December 16 2019. Organizations with 50-249 workers have until December 17 to implement an internal reporting channel.

Can an organization have an external assignee with access to FaceUp?

Yes, it can. You can categorize access by authorized persons not only according to your organizational structure but also according to the categories of the individual initiatives. You can provide access to your colleagues, but also to an authorized external person. If you don't have such a person, we are happy to provide you with someone from our vetted partners. This external party can manage notification channels for multiple clients through their own administration area.

What types of breaches can be reported under the EU Directive?

Issues covered by the EU Whistleblowing Directive include money laundering, poor data protection, transport safety, corruption, food and product safety, environmental protection, public health and others. In practice, employees can use such reporting channels to resolve any issue which they feel is inappropriate or unfair.

What if an organization does not comply with the EU Whistleblowing Directive?

The EU Whistleblowing Directive will impose sanctions on those who attempt to prevent whistleblowing, stand in the way of whistleblowers, or reveal their identity.

How does FaceUp protect whistleblowers?

The FaceUp whistleblowing platform is anonymous for whistleblowers, so there is no chance of their identity being revealed. All whistleblowing data is encrypted and cannot be accessed by anyone besides the designated assignees within your organization.

What are the key requirements for organizations under the Directive?

Organizations must establish secure internal reporting channels, protect whistleblowers from retaliation, ensure proper follow-up on reports, and provide feedback to whistleblowers within specified timeframes.