# Blog
> Guides, checklists, and comparisons to help you comply with EU whistleblower protection laws.

Source: https://ethicsportal.eu/blog/
Updated: 2026-08-24

---

## Pages in this section
- [Do you need ISO 27001 for a whistleblowing tool?](https://ethicsportal.eu/blog/do-you-need-iso-27001-whistleblowing-tool/): EU Directive 2019/1937 does not require ISO 27001. Here is what the law actually requires of a reporting channel, and how to evaluate security without it.
- [EU Whistleblower Directive: statistics and enforcement data (2026)](https://ethicsportal.eu/blog/eu-whistleblower-directive-statistics/): A sourced reference of statistics on EU Directive 2019/1937 — how many organizations it covers, the €38.9 million in fines the Court of Justice has already issued, transposition status across all 27 member states, and the evidence on why internal reporting channels reduce fraud and litigation risk.
- [Whistleblowing report or grievance? How to tell the difference](https://ethicsportal.eu/blog/whistleblowing-vs-grievance/): A whistleblowing concern and an HR grievance follow different legal routes under EU Directive 2019/1937. This guide explains how a case handler tells them apart, the grey areas that trip people up, and why misclassifying a report is a compliance risk.
- [Whistleblower reports do not belong inside an LLM](https://ethicsportal.eu/blog/whistleblower-reports-do-not-belong-inside-an-llm/): Seven whistleblower platforms sold into the EU now process report content through large language models. Six of them won't tell you whose. EthicsPortal does neither. Screenshots and sources inside.
- [Best whistleblower software in 2026: an honest comparison](https://ethicsportal.eu/blog/best-whistleblower-software/): 16 EU whistleblower platforms compared: pricing from €29/month flat to €5,000+/year enterprise, EU hosting, and who each tool is best for.
- [Top whistleblower software for EU Directive 2019/1937 compliance](https://ethicsportal.eu/blog/top-whistleblower-software-eu-directive-2019-1937/): A ranked comparison of whistleblower platforms that meet the requirements of EU Directive 2019/1937. Evaluated on Article 8–16 coverage, pricing, EU hosting, and setup speed.
- [What to look for in whistleblower compliance software](https://ethicsportal.eu/blog/what-to-look-for-in-whistleblower-compliance-software/): What a whistleblower reporting tool actually needs to do under EU Directive 2019/1937 — and what features matter vs. what's just marketing.
- [If employees have to ask where the whistleblowing channel is, you don't have one](https://ethicsportal.eu/blog/if-employees-have-to-ask-you-dont-have-a-channel/): EU law requires employers to inform workers about their reporting channel. But if finding it requires asking someone, the channel is already compromised.
- [GDPR and whistleblower reporting: what you need to know](https://ethicsportal.eu/blog/gdpr-and-whistleblower-reporting/): How GDPR applies to whistleblower reports. Legal basis for processing, anonymous vs. pseudonymous data, retention periods, and the right to erasure.
- [Free whistleblower policy template for EU Directive 2019/1937](https://ethicsportal.eu/blog/whistleblower-policy-template/): A ready-to-use whistleblower policy template that meets EU Directive 2019/1937 requirements. Copy, adapt, and implement in your organization.
- [Who must comply with the EU Whistleblower Directive?](https://ethicsportal.eu/blog/who-must-comply-eu-whistleblower-directive/): Which companies need a whistleblowing channel under EU Directive 2019/1937? The 50-employee threshold, who counts as a worker, deadlines, and what "comply" actually means in practice.
- [Anonymous vs. confidential whistleblower reporting: what's the difference?](https://ethicsportal.eu/blog/anonymous-vs-confidential-reporting/): Understand the difference between anonymous and confidential whistleblower reporting, what the EU Directive requires, and how to support both.
- [How to deploy an internal reporting channel](https://ethicsportal.eu/blog/how-to-implement-whistleblower-channel/): A step-by-step guide to deploying a compliant internal reporting channel without adopting a broad enterprise GRC suite.
- [EU whistleblower directive compliance checklist for companies](https://ethicsportal.eu/blog/compliance-checklist/): A practical 12-step checklist to comply with EU Directive 2019/1937 and national transposition laws, with article references, tips, and implementation guidance.
- [EU Directive 2019/1937 on whistleblower protection adopted](https://ethicsportal.eu/blog/eu-whistleblower-directive-2019-1937-adopted/): The European Parliament and the Council formally adopt Directive (EU) 2019/1937, establishing EU-wide protection for persons who report breaches of Union law.