Glossary
Case Handler
The trained individual inside an organisation who triages, investigates, and resolves whistleblower reports. Under EU Directive 2019/1937 Article 9 the case handler must acknowledge receipt within 7 days, maintain confidentiality, log every action, and deliver substantive feedback within 3 months. Case handlers must be free of conflicts of interest and trained in trauma-informed interviewing.
Full definition
The case handler is the day-to-day operator of the internal reporting channel. Responsibilities under EU Directive 2019/1937 Article 9: (a) acknowledge receipt within 7 days, (b) communicate with the reporter through the secure channel, (c) conduct or commission a fair investigation, (d) maintain confidentiality, (e) document every action in an audit log, (f) deliver substantive feedback to the reporter within 3 months. Case handlers must be free of conflicts of interest and trained in trauma-informed interviewing and data protection.
Related terms
- Designated Person The individual or department formally responsible for handling whistleblower reports inside an organisation. EU Directive 2019/1937 Article 8(5) requires the designated person to be impartial and trained. The role can be the compliance officer, DPO, an external ombudsperson, or a dedicated investigator, and may be outsourced, though legal responsibility stays with the organisation.
- Audit Log An append-only record of every action taken on a whistleblower case, used to demonstrate compliance to regulators. Existing entries cannot be modified or deleted, only new entries added. Auditors at competent authorities such as Germany's Bundesamt für Justiz typically request the audit log first when inspecting a channel for EU Directive 2019/1937 Article 18 compliance.
- Internal Reporting Channel A confidential mechanism inside an organisation through which employees and other workers can report breaches. EU Directive 2019/1937 Article 8 requires every legal entity with 50 or more employees to operate one, accept reports in writing, orally, or through a physical meeting, acknowledge within 7 days, and provide substantive feedback within 3 months.