The EU Whistleblowing Directive obliges companies to create a whistleblowing channel for suspected wrongdoing. The aim is to ensure that a whistleblower who identifies a breach of EU legislation in the course of his or her work can report it without being subject to negative action.
The definition of what constitutes a breach of EU legislation is broad and includes, for example, corruption, fraud, money laundering, environmental and data protection breaches.
The Whistleblowing Directive requires that a report must be received within seven days and a decision must be issued within three months.
Directive on the protection of persons who report breaches of Union law: 2019/1937. You can read more about the Whistleblower Directive on the Parliament’s website (finnish only).