Skip to content
Security incident? Call: +48 732 059 711
Cydefen
pl en
Whistleblower Protection

Whistleblower systems — culture of ethics and integrity

Mandatory for organizations with 50+ employees. We build reporting channels (internal and external), investigation procedures, and anti-retaliation policies. Employees safely report violations.

For whom?

  • Organizations with 50+ employees (mandatory)
  • Regulated sectors (finance, energy, healthcare)
  • Corporations and corporate groups with compliance requirements
  • Organizations promoting business ethics and integrity
  • Enterprises preparing for labor inspections or GDPO audits
What you receive

Implementation outcomes

Whistleblower protection policy

Document defining right to report violations, confidentiality guarantees, protection from retaliation, investigation procedures.

Internal reporting channels

Designated reporting recipient (e.g., compliance officer), handling procedures, registry of reports, escalation paths.

External reporting channels

List of institutions where employees can report directly (public interest organization, inspectorates, prosecutors). Information about rights.

Investigation procedures

Process: receipt, fact-finding, investigation, documentation, corrective actions, feedback to reporter.

Anti-retaliation policy

Protection against bad-faith reports (harassment, discrimination, retaliation). Whistleblower monitoring and psychosocial support.

Training and communication

Leadership and staff training on reporting rights, channels, protection. Awareness campaign in organization.

How we work

Implementation in 5 phases

  1. 01

    Diagnosis and readiness assessment

    Analyze current reporting procedures, organizational culture, interviews with HR and leadership.

  2. 02

    System design

    Define channels (internal/external), investigation procedures, anti-retaliation policy, scope of protection.

  3. 03

    Channel deployment

    Establish reporting recipient, configure system (email, online form, hotline), documentation procedures.

  4. 04

    Training and communication

    Leadership and staff training on reporting rights and channels. Organizational awareness campaign.

  5. 05

    Monitoring and improvement

    Weekly report monitoring, annual procedure reviews, trend analysis, policy updates.

FAQ

Common questions

Does whistleblower protection apply to small companies?
Mandatory for 50+ employees. Smaller firms can implement voluntarily — builds employee trust.
What constitutes a violation under the directive?
Violations: EU/national law breach, unethical conduct, corruption, fraud, public safety or health threats.
Can whistleblowers be prosecuted?
The directive protects against retaliation — but they must act in good faith. Malicious reports can have consequences.
Do we need to keep whistleblower identity confidential?
Yes — to the extent possible. Unless necessary to protect someone or conduct investigation.
What if no one reports violations?
Either no problems exist, or staff don't trust the channels. We recommend awareness campaigns so the system is known.

Implement whistleblower protection

30-minute call — we assess readiness and propose an implementation plan tailored to your culture.

Schedule consultation Back to implementations