Editorial
Blog
EU Directive The 5 conditions of whistleblowing: when a disclosure is actually protected (2026)
The five legal conditions a disclosure must meet to be a protected whistleblowing report under EU Directive 2019/1937: personal scope, material scope, reasonable grounds, work-related context, and proper channel.
Read article →
Financial services FCA whistleblowing: what regulated firms must do under SYSC 18 (2026)
The FCA's whistleblowing rules in SYSC 18, who they bind, the whistleblowers' champion role, and how the regime maps to a compliant internal channel in 2026.
Read article →
EU Directive EU Directive 2019/1937: the complete 2026 guide to whistleblower protection in the EU
What EU Directive 2019/1937 actually requires, who must comply, what the fines look like in 2026, and the compliance mistakes that draw enforcement attention.
Read article →Loi Sapin 2 expliquée : tout ce que les entreprises françaises doivent savoir en 2026
Guide complet de la Loi Sapin 2 et de la Loi Waserman 2022 : qui est concerné, obligations, sanctions, canal interne, lanceur d'alerte. Mis à jour pour 2026.
Read article →
Definition What is whistleblowing? Definition, types, and protections (2026)
A precise 2026 definition of whistleblowing, the three reporting routes, who is legally protected, and what protection actually means under EU and US law.
Read article →
Whistleblower protection Whistleblower protection laws: EU, UK, and US compared (2026)
The full 2026 picture of whistleblower protection laws across the EU, UK, and US: who is protected, what counts as retaliation, the burden of proof, and the damages available.
Read article →
Policy Whistleblowing policy: what it must include in 2026 (with template)
What an EU-compliant whistleblowing policy actually has to contain in 2026: mandatory sections, common pitfalls, and a free downloadable template.
Read article →HinSchG enforcement after two years: what BfJ inspections actually look at in 2026
Two years into HinSchG enforcement, the Bundesamt für Justiz has settled into a pattern. What inspectors ask for first, the deficiencies they cite most often, and the fines they actually impose.
Read article →How to run a whistleblower investigation: a 12-step playbook for EU compliance officers
A practical, EU-Directive-compliant playbook for running a whistleblower investigation from intake to closure. Covers triage, interview protocols, evidence chain, and the three-month feedback deadline.
Read article →Retaliation under EU Directive 2019/1937: the 27 prohibited acts and how courts interpret them
Article 19 of the EU Whistleblowing Directive lists 14 explicit examples of retaliation. National courts have extended the list. A practical catalogue of 27 retaliatory acts with case law from 2023-2026.
Read article →DPIA for a whistleblower channel: a worked example using GDPR Article 35
A complete worked Data Protection Impact Assessment for an internal whistleblower channel under EU Directive 2019/1937, with the eight Article 35 elements filled in and the residual risks named.
Read article →ANAC enforcement of D.Lgs. 24/2023: what Italian inspections look like in 2026
Two years after Italy transposed the EU Whistleblower Directive, ANAC has settled into a clear inspection pattern. The deficiencies cited most often, the fines actually imposed, and how to prepare.
Read article →Anatomy of a working whistleblower policy: the 11 sections that actually matter
Most whistleblower policies are theatre. This guide breaks down the 11 sections that turn a policy from compliance theatre into a tool regulators recognize — with the EU Directive article each one satisfies.
Read article →EU Whistleblower Directive five years on: what 2019/1937 has actually delivered
Five years after adoption and three years after the transposition deadline, what has Directive 2019/1937 actually changed across the EU? An evidence-based review of reports filed, sanctions imposed, and where the regime is still patchy.
Read article →Works councils and whistleblower channels: codetermination across DE/AT/NL
BetrVG §87, ArbVG §96, and the Dutch WOR all give works councils a say in the design of a whistleblower channel. What needs negotiating, what doesn't, and how to avoid a deployment freeze.
Read article →AI in whistleblower triage: what the EU AI Act actually requires
Most whistleblower platforms now offer AI assistance for triage, summarisation, and category suggestion. Which uses fall under the EU AI Act's high-risk classification, and which don't.
Read article →Group privilege: can a multinational run one whistleblower channel across all entities?
EU member states disagree on whether a parent company can operate a single channel for multiple subsidiaries. A practical guide to the diverging positions and the configurations that survive.
Read article →GDPR Article 17 vs EU Directive Article 18: who wins when a reporter asks for deletion?
A reporter asks to delete their report. The Whistleblower Directive says retain. GDPR says erase. Three resolution patterns from national DPAs and what to write in the procedure.
Read article →ISO 37001 software: a buyer's guide for anti-bribery management systems
ISO 37001 certification requires a working speak-up channel, due-diligence tooling, and an evidence trail auditors can read. A practical guide to picking software that gets you certified — and keeps you certified.
Read article →Why a shared [email protected] mailbox doesn't comply with EU Directive 2019/1937
A shared compliance mailbox is the cheapest possible channel. It is also the most commonly cited deficiency in regulator inspections. Eight reasons why it fails the Directive.
Read article →Loi Sapin 2 vs HinSchG: how the French and German regimes actually differ in practice
The two largest EU economies transposed Directive 2019/1937 with different emphasis. A side-by-side comparison of scope, deadlines, sanctions, anonymity, and enforcement style.
Read article →Spain's Ley 2/2023 in practice: what AAI enforcement has looked like through 2026
Spain transposed Directive 2019/1937 with the steepest fines in the EU. Two years in, what does the Autoridad Independiente de Protección del Informante actually do, and what fines have been imposed?
Read article →Anonymous whistleblowing across the EU: country-by-country rules in 2026
EU Directive 2019/1937 leaves anonymous reporting to member-state discretion. Which countries accept it, which require it, and which restrict it. A reference table updated for 2026.
Read article →CSRD reporting: how whistleblower channels feed ESRS S1 and G1 disclosures
The Corporate Sustainability Reporting Directive's ESRS standards require quantitative disclosure of complaints handling and anti-corruption controls. A practical guide to which channel metrics belong in which disclosure.
Read article →Speak-up-Kultur aufbauen: warum das HinSchG allein nicht reicht
Ein Hinweisgebersystem ist nur das Werkzeug. Ohne Speak-up-Kultur bleibt es leer. Dieser Leitfaden zeigt, woran sich Unternehmen mit funktionierender Meldekultur erkennen lassen — und wie man dorthin kommt.
Read article →Anonymous whistleblowing across the EU: where it's allowed, where it's required, where it's still a grey area (2026)
Country-by-country status of anonymous whistleblower reporting under EU Directive 2019/1937 and its national transpositions. Updated May 2026.
Read article →Theory meets implementation
14-day free trial. EU-hosted. No credit card. Cancel anytime.