Editorial
Blog
EU Directive 2019/1937 Whistleblowing examples: 10 cases that shaped EU law (2026)
Ten real whistleblowing cases that shaped EU and UK compliance law, from LuxLeaks to Wirecard. What each one teaches compliance teams about internal channel design, retaliation, and the EU Whistleblower Directive.
Read article →
UK Ofsted whistleblowing: how education staff report concerns in 2026
How Ofsted's whistleblowing route works for teachers, TAs, and MAT staff in 2026. What Ofsted can act on, PIDA protection, confidentiality, and how a compliant internal channel keeps concerns inside the trust for as long as possible.
Read article →
UK HMRC whistleblowing: how to report tax fraud in 2026
How HMRC handles whistleblower reports of tax fraud, evasion, and avoidance in 2026. Confidentiality, protection under PIDA, the new reward regime, and where an internal channel fits.
Read article →
UK Freedom to Speak Up Guardian: what the role actually does (2026)
The Freedom to Speak Up Guardian in 2026: statutory basis under the Health and Care Act 2022, what the National Guardian's Office requires, where the Guardian sits inside an NHS trust or CQC-registered provider, the metrics inspectors look at, and the failure modes that cost a well-led rating.
Read article →
UK Whistleblowing in health and social care: the UK framework that actually works (2026)
Whistleblowing in UK health and social care under PIDA, the Employment Rights Act, Care Act 2014, and CQC fundamental standards. The Freedom to Speak Up regime, the boundary between safeguarding and whistleblowing, and the failure modes the Francis, Cygnet, and Cawston Park inquiries exposed.
Read article →
EU Directive Whistleblowing procedure: the EU Directive 2019/1937 process, end to end (2026)
A practical end-to-end whistleblowing procedure for EU employers under Directive 2019/1937: intake, the 7-day acknowledgement, triage, investigation, 3-month feedback, closure, retention. Article numbers and deadlines included.
Read article →
EU Directive The 5 conditions of whistleblowing: when a disclosure is actually protected (2026)
The five legal conditions a disclosure must meet to be a protected whistleblowing report under EU Directive 2019/1937: personal scope, material scope, reasonable grounds, work-related context, and proper channel.
Read article →
Financial services FCA whistleblowing: what regulated firms must do under SYSC 18 (2026)
The FCA's whistleblowing rules in SYSC 18, who they bind, the whistleblowers' champion role, and how the regime maps to a compliant internal channel in 2026.
Read article →
EU Directive EU Directive 2019/1937: the complete 2026 guide to whistleblower protection in the EU
What EU Directive 2019/1937 actually requires, who must comply, what the fines look like in 2026, and the compliance mistakes that draw enforcement attention.
Read article →Loi Sapin 2 expliquée : tout ce que les entreprises françaises doivent savoir en 2026
Guide complet de la Loi Sapin 2 et de la Loi Waserman 2022 : qui est concerné, obligations, sanctions, canal interne, lanceur d'alerte. Mis à jour pour 2026.
Read article →
Definition What is whistleblowing? Definition, types, and protections (2026)
A precise 2026 definition of whistleblowing, the three reporting routes, who is legally protected, and what protection actually means under EU and US law.
Read article →
Whistleblower protection Whistleblower protection laws: EU, UK, and US compared (2026)
The full 2026 picture of whistleblower protection laws across the EU, UK, and US: who is protected, what counts as retaliation, the burden of proof, and the damages available.
Read article →
Policy Whistleblowing policy: what it must include in 2026 (with template)
What an EU-compliant whistleblowing policy actually has to contain in 2026: mandatory sections, common pitfalls, and a free downloadable template.
Read article →HinSchG enforcement after two years: what BfJ inspections actually look at in 2026
Two years into HinSchG enforcement, the Bundesamt für Justiz has settled into a pattern. What inspectors ask for first, the deficiencies they cite most often, and the fines they actually impose.
Read article →How to run a whistleblower investigation: a 12-step playbook for EU compliance officers
A practical, EU-Directive-compliant playbook for running a whistleblower investigation from intake to closure. Covers triage, interview protocols, evidence chain, and the three-month feedback deadline.
Read article →Retaliation under EU Directive 2019/1937: the 27 prohibited acts and how courts interpret them
Article 19 of the EU Whistleblowing Directive lists 14 explicit examples of retaliation. National courts have extended the list. A practical catalogue of 27 retaliatory acts with case law from 2023-2026.
Read article →DPIA for a whistleblower channel: a worked example using GDPR Article 35
A complete worked Data Protection Impact Assessment for an internal whistleblower channel under EU Directive 2019/1937, with the eight Article 35 elements filled in and the residual risks named.
Read article →ANAC enforcement of D.Lgs. 24/2023: what Italian inspections look like in 2026
Two years after Italy transposed the EU Whistleblower Directive, ANAC has settled into a clear inspection pattern. The deficiencies cited most often, the fines actually imposed, and how to prepare.
Read article →Anatomy of a working whistleblower policy: the 11 sections that actually matter
Most whistleblower policies are theatre. This guide breaks down the 11 sections that turn a policy from compliance theatre into a tool regulators recognize — with the EU Directive article each one satisfies.
Read article →EU Whistleblower Directive five years on: what 2019/1937 has actually delivered
Five years after adoption and three years after the transposition deadline, what has Directive 2019/1937 actually changed across the EU? An evidence-based review of reports filed, sanctions imposed, and where the regime is still patchy.
Read article →Works councils and whistleblower channels: codetermination across DE/AT/NL
BetrVG §87, ArbVG §96, and the Dutch WOR all give works councils a say in the design of a whistleblower channel. What needs negotiating, what doesn't, and how to avoid a deployment freeze.
Read article →AI in whistleblower triage: what the EU AI Act actually requires
Most whistleblower platforms now offer AI assistance for triage, summarisation, and category suggestion. Which uses fall under the EU AI Act's high-risk classification, and which don't.
Read article →Group privilege: can a multinational run one whistleblower channel across all entities?
EU member states disagree on whether a parent company can operate a single channel for multiple subsidiaries. A practical guide to the diverging positions and the configurations that survive.
Read article →GDPR Article 17 vs EU Directive Article 18: who wins when a reporter asks for deletion?
A reporter asks to delete their report. The Whistleblower Directive says retain. GDPR says erase. Three resolution patterns from national DPAs and what to write in the procedure.
Read article →ISO 37001 software: a buyer's guide for anti-bribery management systems
ISO 37001 certification requires a working speak-up channel, due-diligence tooling, and an evidence trail auditors can read. A practical guide to picking software that gets you certified — and keeps you certified.
Read article →Why a shared [email protected] mailbox doesn't comply with EU Directive 2019/1937
A shared compliance mailbox is the cheapest possible channel. It is also the most commonly cited deficiency in regulator inspections. Eight reasons why it fails the Directive.
Read article →Loi Sapin 2 vs HinSchG: how the French and German regimes actually differ in practice
The two largest EU economies transposed Directive 2019/1937 with different emphasis. A side-by-side comparison of scope, deadlines, sanctions, anonymity, and enforcement style.
Read article →Spain's Ley 2/2023 in practice: what AAI enforcement has looked like through 2026
Spain transposed Directive 2019/1937 with the steepest fines in the EU. Two years in, what does the Autoridad Independiente de Protección del Informante actually do, and what fines have been imposed?
Read article →Anonymous whistleblowing across the EU: country-by-country rules in 2026
EU Directive 2019/1937 leaves anonymous reporting to member-state discretion. Which countries accept it, which require it, and which restrict it. A reference table updated for 2026.
Read article →CSRD reporting: how whistleblower channels feed ESRS S1 and G1 disclosures
The Corporate Sustainability Reporting Directive's ESRS standards require quantitative disclosure of complaints handling and anti-corruption controls. A practical guide to which channel metrics belong in which disclosure.
Read article →Speak-up-Kultur aufbauen: warum das HinSchG allein nicht reicht
Ein Hinweisgebersystem ist nur das Werkzeug. Ohne Speak-up-Kultur bleibt es leer. Dieser Leitfaden zeigt, woran sich Unternehmen mit funktionierender Meldekultur erkennen lassen — und wie man dorthin kommt.
Read article →Anonymous whistleblowing across the EU: where it's allowed, where it's required, where it's still a grey area (2026)
Country-by-country status of anonymous whistleblower reporting under EU Directive 2019/1937 and its national transpositions. Updated May 2026.
Read article →Theory meets implementation
14-day free trial. EU-hosted. No credit card. Cancel anytime.