Blog
Guides, checklists, and comparisons to help you comply with EU whistleblower protection laws.
Switzerland has no whistleblower law. Swiss companies still need a whistleblowing channel
Switzerland never adopted a whistleblower protection statute, and in 2024 Parliament declined to try again. Swiss case law, corporate criminal liability and EU subsidiaries make an internal whistleblowing channel necessary anyway. What a Swiss channel has to get right.
· Yuliia Zahoruiko
Whistleblower or leaker? Under EU law, the route decides
OpenAI's dismissal of three safety researchers revived an old question for AI companies. Since 2 August 2026, Article 87 of the AI Act gives the EU's answer: Directive 2019/1937 applies, and the route a report takes decides whether the reporter is protected.
· Yaroslav Shmarov
How whistleblowers actually get identified
In the published enforcement cases, the threat to the reporter came from inside: a CEO, a general counsel, a hospital firewall. What Barclays, Halliburton and an Italian hospital show about confidentiality.
· Yaroslav Shmarov
Eight questions for your whistleblowing vendor, taken from enforcement cases
Regulators and courts have already ruled on how whistleblowing channels fail. Each decision below becomes one procurement question, with the primary source linked.
· Yaroslav Shmarov
Do you need ISO 27001 for a whistleblowing tool?
EU Directive 2019/1937 does not require ISO 27001. Here is what the law actually requires of a whistleblowing channel, and how to evaluate security without it.
· Yaroslav Shmarov
Whistleblowing report or grievance? How to tell the difference
A whistleblowing concern and an HR grievance follow different legal routes under EU Directive 2019/1937. This guide explains how a case handler tells them apart, the grey areas that trip people up, and why misclassifying a report is a compliance risk.
· Yaroslav Shmarov
EU Whistleblower Directive: statistics and enforcement data (2026)
A sourced reference of statistics on EU Directive 2019/1937 — how many organizations it covers, the €38.9 million in fines the Court of Justice has already issued, transposition status across all 27 member states, and the evidence on why whistleblowing channels reduce fraud and litigation risk.
· Yaroslav Shmarov
Whistleblower reports do not belong inside an LLM
Seven whistleblower platforms sold into the EU now process report content through large language models. Six of them won't tell you whose. EthicsPortal does neither. Screenshots and sources inside.
· Yaroslav Shmarov
Top whistleblower software for EU Directive 2019/1937 compliance
A ranked comparison of whistleblower platforms that meet the requirements of EU Directive 2019/1937. Evaluated on Article 8–16 coverage, pricing, EU hosting, and setup speed.
· Yaroslav Shmarov
Best whistleblower software in 2026: an honest comparison
16 EU whistleblower platforms compared: pricing from €29/month flat to €5,000+/year enterprise, EU hosting, and who each tool is best for.
· Yaroslav Shmarov
What to look for in whistleblower compliance software
What a whistleblower reporting tool actually needs to do under EU Directive 2019/1937 — and what features matter vs. what's just marketing.
· Yaroslav Shmarov
If employees have to ask where the whistleblowing channel is, you don't have one
EU law requires employers to inform workers about their whistleblowing channel. But if finding it requires asking someone, the channel is already compromised.
· Yaroslav Shmarov
GDPR and whistleblower reporting: what you need to know
How GDPR applies to whistleblower reports. Legal basis for processing, anonymous vs. pseudonymous data, retention periods, and the right to erasure.
· Yaroslav Shmarov
Who must comply with the EU Whistleblower Directive?
Which companies need a whistleblowing channel under EU Directive 2019/1937? The 50-employee threshold, the regulated-sector entities it does not apply to, who counts as a worker, deadlines, and what "comply" actually means in practice.
· Yaroslav Shmarov
Free whistleblower policy template for EU Directive 2019/1937
A ready-to-use whistleblower policy template that meets EU Directive 2019/1937 requirements. Copy, adapt, and implement in your organization.
· Yaroslav Shmarov
Anonymous vs. confidential whistleblower reporting: what's the difference?
Understand the difference between anonymous and confidential whistleblower reporting, what the EU Directive requires, and how to support both.
· Yaroslav Shmarov
How to deploy a whistleblowing channel
A step-by-step guide to deploying a compliant internal reporting channel without adopting a broad enterprise GRC suite.
· Yaroslav Shmarov
EU whistleblower directive compliance checklist for companies
A practical 12-step checklist to comply with EU Directive 2019/1937 and national transposition laws, with article references, tips, and implementation guidance.
· Yaroslav Shmarov
EU Directive 2019/1937 on whistleblower protection adopted
The European Parliament and the Council formally adopt Directive (EU) 2019/1937, establishing EU-wide protection for persons who report breaches of Union law.
· Yaroslav Shmarov