Whistleblower law in France #
France implemented Directive (EU) 2019/1937 through Loi n° 2022-401 du 21 mars 2022 (“Loi Waserman”), with the October 2022 decree setting the practical framework for internal and external reporting procedures. For most employers, the central threshold remains 50 employees.
Applicable law #
Who must establish an internal channel #
Private employers with 50 or more employees must establish an internal reporting procedure. The French public-service guidance also notes that public employers with at least 50 agents are in scope, and that some entities with fewer than 250 workers may pool the collection and processing arrangement.
External reporting authority #
France does not rely on one universal whistleblowing authority. The Défenseur des droits helps orient and protect whistleblowers, while competent sectoral authorities may receive external reports in their own remit.
Data protection authority #
For concerns about unlawful processing of personal data or confidentiality failures in the reporting process, the relevant authority is the CNIL .
Key compliance points #
- France no longer requires whistleblowers to report internally before using an external channel.
- The procedure must keep the identity of the reporting person, the person concerned, and named third parties confidential.
- French official guidance points to acknowledgment within 7 working days and feedback within 3 months as the standard operating timeline.
Official sources #
- Loi Waserman — official text
- Service Public — lancer une alerte
- Défenseur des droits — orienter et protéger les lanceurs d’alerte
- CNIL — adresser une alerte
Deploy your reporting channel →
Last updated: