Glossary
Anonymous Reporting
A report submitted without revealing the reporter's identity to the organisation. EU Directive 2019/1937 Article 6(2) leaves the obligation to accept anonymous reports to member-state discretion, and most EU countries (Germany, France, Italy, Spain, the Netherlands) permit it. Anonymous reports that lead to a finding of breach trigger the same protections as named reports.
Full definition
EU Directive 2019/1937 leaves the obligation to accept anonymous reports to each member state's discretion (Article 6(2)). In practice, most EU countries (Germany, France, Italy, Spain, the Netherlands, Sweden) permit anonymous reporting. Anonymous reports that are followed up and lead to a finding of breach trigger the same protections as named reports. Technically, anonymous reporting requires that the channel does not capture email, IP, cookies, or any unique identifier. Confidly's reporter UI uses a server-issued case code plus a reporter-only 6-digit secret to enable anonymous follow-up.
Related terms
- Confidentiality The legal obligation to protect the identity of a whistleblower and any third party named in a report. EU Directive 2019/1937 Article 16 prohibits disclosure beyond authorised staff and persists after the case closes. Disclosure is permitted only with the reporter's consent or where required by national law in criminal or judicial proceedings.
- Case Code A unique identifier issued by a reporting channel that lets a whistleblower follow up on their report. The code is typically 8 to 10 characters and is paired with a reporter-only secret (a 6-digit PIN in Confidly) that authenticates the reporter on return. Together they require no email, password, or account.
- Internal Reporting Channel A confidential mechanism inside an organisation through which employees and other workers can report breaches. EU Directive 2019/1937 Article 8 requires every legal entity with 50 or more employees to operate one, accept reports in writing, orally, or through a physical meeting, acknowledge within 7 days, and provide substantive feedback within 3 months.