Whistleblower law in Austria #
Austria implemented Directive (EU) 2019/1937 through the HinweisgeberInnenschutzgesetz (HSchG), promulgated on 24 February 2023 and in force since 25 February 2023. The Austrian regime is more statute-bound than some broader national systems because the act ties protection and reporting channels to the material scope defined in the HSchG.
Applicable law #
Who must establish an internal channel #
Many private legal entities with at least 50 employees must establish an internal reporting channel. Public legal entities and certain specially regulated bodies are also covered under the act’s own rules. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
External reporting authority #
Austria uses several designated external reporting offices rather than one universal national authority. The Federal Bureau of Anti-Corruption (BAK) operates an official external reporting office under the HSchG and is the clearest federal reference point for general guidance.
Data protection authority #
For data-protection complaints relating to the handling of whistleblower reports, the relevant authority is the Austrian Data Protection Authority (DSB) .
Key compliance points #
- Austria’s whistleblower regime follows the material scope listed in the HSchG, so employers should not market a channel as covering everything unless their own internal policy clearly says so.
- The official BAK materials stress confidential handling, secure communication and the possibility of anonymous reporting through the external system.
- In practice, Austrian organisations should point reporters to the correct external office for the relevant subject matter rather than assuming one central state inbox.
Official sources #
- HSchG — official RIS text
- BAK — reporting offices under the HSchG
- BAK — newly established reporting offices
- BAK — HSchG FAQ
- DSB — complaint form