Whistleblowing report or grievance? How to tell the difference #
Most reports that reach an internal channel are easy to categorise. Some are not. An employee says a manager is bullying them — but the bullying is aimed at covering up falsified safety records. A finance clerk complains about their workload — and mentions, in passing, invoices that do not add up.
For the person receiving the report, the first decision is the most consequential one: is this a whistleblowing concern, or an ordinary grievance? The two follow different routes and carry different legal duties. Getting it wrong is not a filing error: under EU Directive 2019/1937 , a whistleblowing report triggers obligations a grievance does not — statutory deadlines, strict confidentiality, and protection from retaliation. Fail to recognise the report for what it is, and you fail to meet them.
This guide is written for the designated case handler who has to make that call.
The core distinction #
A grievance is a personal complaint about the reporter’s own employment — pay, workload, a manager, a missed promotion. The person wants redress for themselves.
A whistleblowing concern is information about wrongdoing that affects others — fraud, safety risks, environmental breaches, data-protection failures, corruption. The person is acting as a witness, not a claimant. They want the wrongdoing stopped.
| Grievance | Whistleblowing concern |
|---|---|
| A personal concern | Others or the public interest are affected |
| Seeks redress for the individual | The reporter is a witness to wrongdoing |
| Open, transparent process | Information-sharing may be limited to protect confidentiality |
| Investigation establishes the facts | May begin from suspicion alone |
| Full feedback to the individual | Feedback as far as confidentiality allows |
| Internal appeal usually available | External reporting routes (a regulator) also available |
The shorthand: a grievance is “this happened to me”; a whistleblowing concern is “this is happening, and it’s wrong.”
Why the classification matters legally #
The Directive attaches a specific set of obligations to a whistleblowing report that do not apply to a grievance:
- Deadlines. You must acknowledge a whistleblowing report within seven days and provide feedback within three months (Article 9 ). A grievance follows your ordinary HR timetable.
- Confidentiality. The reporter’s identity must be kept confidential and may not be disclosed without their consent, except where EU or national law requires it (Article 16 ). A standard grievance process is usually open. For how that plays out in practice, see anonymous vs confidential reporting .
- Anti-retaliation. A whistleblower is protected against dismissal, demotion, and other detriment (Article 19 ); and if they suffer a detriment after reporting, the burden falls on the employer to prove it was not retaliation (Article 21(5) ). Handle the same facts as a routine grievance and those safeguards may never be triggered.
This is why “we treated it as an HR matter” is not a safe default. If a report contains a genuine public-interest concern, handling it purely as a grievance can itself become the compliance failure. See penalties by country for what that exposure looks like across the 27 member states.
The grey areas #
The hard cases sit between the two categories. A few rules of thumb:
- Bullying or harassment that affects others. A single personal complaint is a grievance. But widespread bullying, or misconduct by a senior person that puts customers, patients, or colleagues at risk, is often better handled as whistleblowing.
- A grievance with a concern buried inside it. People frequently raise a public-interest concern only once it has affected them personally. Look past the personal framing to the underlying issue.
- When in doubt, treat it as whistleblowing. The protections are stronger and the deadlines are tighter. It is safer to apply the higher standard and step down than to under-protect a reporter and discover later that you should not have.
You do not have to resolve the ambiguity alone or instantly. Acknowledge the report, tell the reporter which process you intend to use, and explain that you may revisit that decision as the facts develop.
What a good case handler does on intake #
Whichever route applies, the handling discipline is the same:
- Acknowledge promptly and tell the reporter how you will treat the matter.
- Assume confidentiality. Never reveal the reporter’s identity without explicit consent; set out any legal limits in writing before you act on them.
- Do not ask the reporter to investigate. Coming forward is hard enough; turning the reporter into your investigator increases their exposure.
- Separate the message from the messenger. Whether the reporter has a personal axe to grind does not change whether the concern has substance. Act on the substance.
- Keep the reporter informed, and deliver feedback within three months — even if you can only confirm that the matter was investigated and acted on.
For the full operating procedure, our case handler manual — generated automatically for every EthicsPortal channel — walks designated handlers through intake, the triage decision above, confidentiality, escalation, and the statutory deadlines.
How EthicsPortal helps you get the routing right #
A purpose-built reporting channel makes the distinction operational rather than a judgment call made under pressure:
- Report categories prompt the reporter to frame the issue, so a public-interest concern is less likely to arrive disguised as a personal complaint.
- Secure two-way messaging lets you ask clarifying questions — even of an anonymous reporter — before you decide the route.
- Automatic deadline tracking holds the 7-day and 3-month clocks the moment a report is treated as whistleblowing, so the classification decision is enforced, not just recorded.
- A documented policy and case handler manual give your handlers a written basis for the call and an audit trail for the outcome.
Deploy a channel that handles this correctly #
EthicsPortal is EU whistleblower compliance infrastructure: secure intake, confidentiality controls under Article 16, deadline tracking under Article 9, and audit-ready records under Article 18 — €41.67/month billed annually. Deploy the channel, designate a handler, and give the people who speak up a process that protects them from the first day.
For the broader setup, see how to deploy an internal reporting channel and our free whistleblower policy template .
Last updated: