Whistleblower law in Belgium #
Belgium implemented Directive (EU) 2019/1937 through the Act of 28 November 2022 for the private sector, alongside parallel public-sector and regional arrangements. For private companies, the main business trigger remains 50 workers, but Belgium’s structure is more fragmented than in unitary systems.
Applicable law #
Who must establish an internal channel #
Private legal entities with at least 50 workers must establish an internal reporting channel. Belgium also has public-sector and regional whistleblowing frameworks, so public bodies should check the regime that applies to their level of government. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
Penalties #
- No internal channel: a level-4 offence under the Social Penal Code (art. 133/1). A company faces a criminal fine of €24,000 to €576,000 (art. 101/1) or an administrative fine of €2,400 to €28,000 (art. 101). An employer, agent or representative who is an individual faces six months to three years in prison, a criminal fine of €4,800 to €56,000, or both. Every fine is raised by 2.5 décimes, or 25% (Act of 5 March 1952, art. 1; Social Penal Code, art. 102). Source: Social Penal Code
- Obstruction, retaliation, abusive proceedings or breach of confidentiality: six months to three years in prison and/or a fine of €4,800 to €48,000. The Act sets €600 to €6,000, which art. 78 of the Criminal Code multiplies by eight. Source: Act of 28 November 2022, art. 33
- Where a sector authority can impose its own sanctions, the Social Penal Code route does not apply (art. 33 §1).
Amounts as in force since 1 September 2026, when the new Criminal Code took effect.
External reporting authority #
Belgium does not operate with one single whistleblowing authority for every case. The Federal Ombudsman is a key federal external route, while sectoral and regional channels can also be relevant depending on the entity and the subject matter of the report.
Data protection authority #
For complaints about unlawful processing of whistleblower data, the relevant authority is the Belgian Data Protection Authority.
Key compliance points #
- Belgium’s whistleblowing framework is legally fragmented across private-sector, federal public-sector and regional layers, so organisations should be explicit about which regime they are following.
- The Federal Ombudsman explicitly accepts direct whistleblower reports and retaliation complaints.
- Internal policies should make clear which external authority is appropriate for the organisation’s sector and constitutional level.
Official sources #
- Act of 28 November 2022 — official private-sector law text
- Federal Ombudsman — contact and whistleblower reporting
- Federal Ombudsman — guide for whistleblowers
- Federal Ombudsman — direct external reporting is possible
- Belgian Data Protection Authority — citizen complaints