Whistleblower law in the Netherlands #
The Netherlands implemented Directive (EU) 2019/1937 through the Wet bescherming klokkenluiders (Wbk), in force since 18 February 2023. The Dutch regime is institutionally visible because it sits alongside the Dutch Whistleblowers Authority and a dedicated government information site for employers.
Applicable law #
Who must establish an internal channel #
Employers with at least 50 workers must establish an internal reporting channel. This applies across the Dutch public and private sectors, subject to the statutory framework. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
External reporting authority #
The key official body is the Dutch Whistleblowers Authority . The government employer-facing site also points organisations to the authority as the core institutional reference point.
Data protection authority #
For GDPR complaints relating to whistleblower data handling, the relevant authority is the Autoriteit Persoonsgegevens (AP) .
Key compliance points #
- The Dutch government maintains a dedicated site explaining the act to employers, which makes the market relatively transparent on basic legal positioning.
- Internal procedures should clearly explain when workers can use the Dutch Whistleblowers Authority and when another competent authority is more appropriate.
- The AP expects complainants to first raise the matter with the organisation where possible before escalating a data-protection complaint.
Official sources #
- Wet bescherming klokkenluiders — official text
- Government site — contact / service page
- Dutch Whistleblowers Authority
- Autoriteit Persoonsgegevens — submitting a complaint