What is the EU Whistleblowing Directive?
Breaking down the EU Whistleblowing Directive and what you need to do about it
The EU Whistleblowing Directive in short
The EU Whistleblowing Directive is an official instruction to member nations that prohibits retaliation against whistleblowers and must be enforced through national laws. The directive draws from best practices based on a broad definition of the whistleblower, and a range of policies in several areas intended for the private and public sectors. It fills the gaps created by a fragmented system with inconsistent protection across the EU by requiring member states to adopt minimum standards. Nations are expected to adjust their law to meet these standards.
The purpose of the EU Whistleblowing Directive is to enhance the enforcement of union law and policies in specific areas affecting employees, shareholders, management, and administrative bodies. It applies not only to employees, but also to volunteers, trainees, contractors, subcontractors and supplies, former employees, and individuals who disclose reaches during the recruitment process. A threshold must be met in order for the whistleblower to receive complete protection against harassment. The person must have reasonable grounds to believe the information they report is true and that the information on breaches falls within the directive’s scope. The directive prohibits retaliation such as including dismissal, demotion, poor evaluations, and suspensions. It also offers advice and psychological support to people who disclose information and experience retaliation as a result.
“Effective whistleblower protection has at least two main components: what happens to the whistleblower after he/she blows the whistle and what measures are taken to address the wrongdoing reported by the whistleblower.” – Assistant Professor of European Law, Vigjilenca Abazi
The history of the Whistleblowing Directive
In the 2000s, whistleblowing procedures began to appear in Europe. Each country was facing different challenges such as data privacy laws and restrictions on making anonymous reports. After the global financial crisis in 2008, there was a strong need to work together and ensure new laws would be put in place to protect consumers from harmful banking practices. Since 2009, the European Parliament had repeatedly called for a law that would protect whistleblowers from reprisal when they disclose wrongdoing.
Between 2015 and 2020, public opinion began to shift, and new laws and directives were introduced in the Netherlands (2016), Lithuania (2017), Ireland (2018), France (2018), Italy (2018), Slovakia (2019), and Germany and Spain began to allow anonymous reporting. After a series of high-profile leaks like the Panama Papers, the Swiss Leaks, and the LuxLeaks, a more serious effort was made by the European Commission to consult the public and develop a stronger whistleblowing law. On October 23rd, 2019, the European Union adopted the directive on the protection of persons who report breaches of union law (also known as the protection of whistleblowers law). The EU Whistleblower Directive reflects decades of gradual change in Europe urged by advocates and boosted by increasing public awareness and pressure to act.
What companies should know
Whistleblowers can report through a 3-tiered model
There are three channels available to whistleblowers for reporting wrongdoings: internal, external, and public. Internal reporting refers to the workplace and requires companies and public institutions to establish a process or provide a third-party option such as a whistleblowing system for employees to report wrongdoings. The report can be submitted in writing, orally, in an in-person meeting, or by voice messaging system. External reporting refers to reports made to law enforcement agencies, judicial authorities, ombudsmen, and authorities that provide administrative oversight such as anticorruption or regulatory bodies. Article 11(2)(b) of the directive gives companies the option not to formally acknowledge the report if protecting the identity of the person is not possible. Public reporting refers to reports made to the media. If whistleblowers choose to use a public channel, they must first have made attempts to report the incident through internal and external channels to qualify for protection.

The importance of establishing an effective internal reporting channel
Companies are obligated to designate a person or department to acknowledge receiving the report within one week and follow up on disclosures in less than three months. They must establish an internal reporting channel and procedures for receiving whistleblowing reports and ensure follow-up reports. Anonymous reports should be allowed and the necessary steps to protect the identities of the reporter and the parties mentioned must be made. Reports should not be accessible to non-authorized staff. A reporting system should be developed to process incoming reports from employees and other individuals, and staff should be made aware of any anti-retaliation rules.
Corporate ethics and compliance rely on a good governance model, putting controls in place to combat fraud and corruption, and developing an organisational culture with a good speak-up system. This can help you identify and address problems early, spend less time trying to fix problems, stimulate the sharing of ideas and knowledge, and improve creativity among employees. It can also reduce your risk of receiving fines and having to deal with costly litigation.
We offer a solution for all such problems with multiple plans to choose from. Feel free to book a consultation with one of our experts or to learn more about NorthWhistle and how we can help.
Top 10 FAQ
EU directive 2019/1937
Most member nations already have laws that address whistleblowing and protect the person who discloses information. However, these laws often differ from each other in terms of effectiveness, creating challenges for dealing with international businesses and making sure nations continue to work together efficiently. The purpose of the directive is to protect and enable whistleblowers from all EU nations to raise concerns anonymously without the fear of retaliation.
Embark on a new beginning
Join us on our mission to change whistleblowing. Keep whistleblowers safe, empower individuals to uphold what is right, and create a safe space where speaking up is easy.
