WHISTLEBLOWING WHITE PAPER
We've thought of everything: Implementing the whistleblower policy in Germany and Austria with a SaaS solution
The Whistleblower Protection Act
With the European Whistleblower Directive (EU) 2019/1937, the EU is sending a clear message against corruption and misconduct in companies. Individuals who, whether as employees or third parties, gain deep insight into an organization’s structures and processes and thereby become aware of misconduct often face a difficult decision: Should they report the misconduct and risk being disadvantaged themselves, or should they keep a low profile? The situation becomes particularly problematic when individuals from the higher echelons of the organization are involved in the misconduct and the whistleblower is subordinate to these individuals in the management hierarchy. It is precisely this issue that the Whistleblower Directive addresses, ensuring a higher standard of compliance within companies. These companies now need the right tools and solutions to implement the directive quickly, easily, and cost-effectively.
Challenges for Businesses
In welchem Umfang und in welcher Geschwindigkeit Sie das Gesetz umsetzen müssen, hängt von der Größe und Art ihres Unternehmens ab. Sowohl private Unternehmen, als auch der öffentliche Sektor sind betroffen.
In Deutschland als auch in Österreich, sollen Unternehmen ihre internen Hinweisgebersysteme so gestalten, dass Mitarbeiter:innen vorzugsweise auf die interne Stelle zurückgreifen.
Für die interne Meldestelle gelten folgende Vorgaben:
- die Identität der hinweisgebenden Person muss vertraulich behandelt werden
- die Meldungsabgabe muss mündlich, schriftlich und teilweise persönlich möglich sein
- Meldungen MÜSSEN anonym möglich sein
- Der Eingang einer Meldung muss innerhalb von 7 Tagen bestätigt werden
- innerhalb von 3 Monaten muss die hinweisgebende Person über die Maßnahmen informiert werden, die in Folge der Meldung unternommen wurden
- Alle Prozesse müssen sicher und DSGVO-konform sein
What you need to pay special attention to
Our personal advice to you: Don’t wait too long for the Whistleblower Protection Act to take effect. Whether your organization is an SME, a public institution, or a larger company: If you are affected, you should take early steps to implement an effective and resource-efficient whistleblower system in your company. The financial damage and potential reputational loss are at least twice as high for companies without a reporting channel.
Note: Many companies are unaware that whistleblower protection is also required by other legislation:
Since January 1, 2023, companies in Germany have been required to comply with another law: the Supply Chain Due Diligence Act (LkSG). It requires companies based in Germany with more than 3,000 employees to maintain a suitable procedure through which any violations of human rights or environmental obligations can be reported. Starting January 1, 2024, this obligation will also apply to companies with 1,000 or more employees.
