Resource Category: Governance

Implementing whistleblowing software introduces a distinct set of data privacy implications and challenges that compliance officers must address before a single report is received. Unlike most workplace systems, whistleblowing platforms process data that is simultaneously highly sensitive, involves multiple parties with competing rights, and may contain special category information – all under intense regulatory scrutiny.…

The General Data Protection Regulation (GDPR) and UK GDPR impose strict obligations on how this data is collected, stored, accessed and eventually deleted. When an employee reports suspected fraud, harassment or regulatory breaches, the personal data involved is among the most sensitive an organisation will process. Names, allegations, witness details and sometimes health or financial…

Whistleblowing programmes generate some of the most sensitive personal data an organisation will ever handle. Reports may contain names of alleged wrongdoers, details of witnesses, health information, financial records and evidence of criminal conduct. Under the General Data Protection Regulation (GDPR) and the UK GDPR, every stage of that data’s lifecycle – collection, storage, investigation…