As the December 2021 deadline for transposition of Directive 2019/1937 of the European Parliament and Council dated 23 October 2019 on the “protection of persons who report breaches of EU law” (“the Directive”) looms large, organizations with a physical presence in the European EU (“EU”), as well as those that operate in the internal market, should leverage the proverbial calm before the storm to benchmark their internal reporting processes and procedures to the Directive’s stringent requirements.

Among other things, the Directive imposes rigid new requirements on covered organizations in both the public and private sectors, including but not limited to: an accelerated timeframe for receiving and acknowledging an initial whistleblower complaint; a strict requirement to conduct ‘diligent’ follow up with respect to such reports; expanded legal protection against retaliation in any number of employment contexts; and penalties that range in severity from negligible to significant.

How ready is your organization to respond to the directive?  We’ve created our latest white paper to be a comprehensive guide–it covers everything you need to know regarding key elements of the directive, but, more importantly, outlines what you should be thinking about and preparing to implement within your compliance program to meet these new requirements.

• Scope of the Directive
• Reporting Persons Defined
• Establishment of Internal Reporting Mechanisms
• Requirements for Internal Reporting and Diligent Follow-up
• External Reporting to Competent Authorities
• Protected Public Disclosures
• Application of EU Data Protection Principles to the Directive
• Prohibitions Against Retaliation and Legal Protections
• Penalties for Violation of the Directive
• Practical Implications

Download the whitepaper here.