Guide to the new EU Whistleblowing Directive

On 7 October 2019, the European Council adopted the EU Directive on the protection of persons who report breaches of Union law (the “Directive”). The purpose of the Directive is to lay down common minimum standards across the EU for the protection of people reporting a breach.

Laws on whistleblowing are currently handled by individual EU Member States, resulting in major differences in legislation across countries. The European Commission note that currently only ten of its member countries – France, Hungary, Ireland, Italy, Lithuania, Malta, the Netherlands, Slovakia, Sweden and the UK – have a comprehensive law protecting whistleblowers.

VinciWorks has created a comprehensive whistleblowing guide that elaborates on the objectives, regulatory scope and practical consequences of the Directive.

What’s in the guide?

  • Who can be a reporting person and who is protected?
  • Which time period can a report relate to?
  • What are the conditions of protection for reporting persons?
  • What are the methods and requirements for internal and external reporting?
  • What is the duty of confidentiality for internal and external reporting?
  • What support should be available for reporting persons?

Download guide

Whistleblowing reporting and training solution

Screenshot of whistleblowing course

VinciWorks’ whistleblowing solution includes both a whistleblowing course that covers current UK whistleblowing legislation and a centralised reporting portal. Our whistleblowing portal is designed to capture all breaches, complaints and issues in one secure framework to mitigate organisational risk in real time. Our course, Whistleblowing: Understand Your Rights provides a comprehensive overview of whistleblower rights within the UK. The course contains real-life scenarios where whistleblowing has helped prevent disaster and examples where whistleblowing could have helped prevent disasters.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”

Picture of James

James

VinciWorks CEO, VInciWorks

Spending time looking for your parcel around the neighbourhood is a thing of the past. That’s a promise.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.