Whistleblowers

New regulations on the protection of whistleblowers impose an obligation on employers to implement procedures for transparent and secure channels for reporting observed violations of the law and to ensure protection for persons reporting such irregularities. These requirements stem from Polish law, an EU directive and good compliance practices, and their implementation is becoming an important element of corporate governance and legal risk management for every organisation.

We support entrepreneurs in the full implementation of whistleblower systems: from the analysis of obligations, through the selection of technological tools and preparation of documentation, to the training of persons responsible for handling reports. We help to ensure compliance with the GDPR, labour law, industry regulations and the expectations of entrepreneurs.

Comprehensive implementation of a whistleblower protection system

We help design and implement a reporting system from scratch – in accordance with legal requirements and the specific nature of the organisation. We support the selection of an appropriate reporting model, help define internal communication rules and follow-up procedures.

Implementation of reporting platforms

We support clients in the selection and integration of technological tools for receiving and recording whistleblowers’ reports – taking into account the protection of whistleblowers’ identities and compliance with the GDPR. We have worked with both commercially available solutions and implementations of internal reporting systems.

Preparation of complete documentation

We create comprehensive procedures for receiving and reviewing reports, internal regulations, personal data protection policies, and templates for communications and reporting forms – both for whistleblowers and personnel conducting investigations.

Training for employers and teams responsible for reporting

We conduct dedicated training courses and workshops on the use of the whistleblower system – both for management and for those responsible for receiving and analysing whistleblowers’ reports. We also provide support in the implementation of internal education and communication campaigns.

Handling of reports and internal proceedings

We support employers in handling actual reports – including those concerning violations of the law, but also mobbing, conflicts of interest, financial irregularities or violations of ethical principles. We advise on specific cases – from receiving information, through investigative activities (including support in conducting an internal investigation related to the report), to support in developing an appropriate response to a justified report. We prepare reports on the investigations conducted.

GDPR and data protection compliance

We help to ensure that reporting processes comply with personal data protection regulations, including in situations involving anonymous reports, multiple individuals, sensitive data, and protected or confidential information.
o Integration with compliance and ethics systems
We help integrate rules for reporting violations of the law into broader risk management, compliance and organisational ethics structures. We advise on the creation of consistent communication of ethical principles, codes of conduct and standards of ethics and integrity.