Resource Category: Regulatory compliance

Fraud costs organisations billions annually, yet traditional detection methods – financial controls, audit procedures, data analytics – identify only a fraction of fraudulent activity. According to the Association of Certified Fraud Examiners, organisations lose an estimated 5% of revenue to fraud each year, with the typical fraud scheme lasting 12 months before detection. Whistleblowing hotlines…

The EU Whistleblowing Directive (Directive 2019/1937) imposes mandatory obligations on organisations operating across the European Union, yet implementation remains complex due to fragmented transposition across 27 Member States, each with varying requirements, timelines, and enforcement approaches. Compliance officers face the challenge of building arrangements that satisfy not only the Directive’s minimum standards but also national…

The United Kingdom’s whistleblowing framework, governed primarily by the Public Interest Disclosure Act 1998 (PIDA), does not mandate that organisations establish whistleblowing channels or procedures. Unlike the EU Whistleblowing Directive, which requires internal reporting channels for organisations with 50 or more employees, UK law focuses on protecting workers after they have made protected disclosures rather…

Retaliation against whistleblowers represents both a legal violation and a fundamental failure of governance. When individuals who report misconduct suffer adverse consequences – dismissal, demotion, harassment, isolation, or subtler forms of disadvantage – organisations face direct liability through employment claims whilst simultaneously destroying the trust necessary for effective speak-up culture. The EU Whistleblowing Directive recognises…