-
Board oversight and the all reasonable steps duty: why compliance is the floor, not the ceiling
Read full story: Board oversight and the all reasonable steps duty: why compliance is the floor, not the ceilingThere is a version of this conversation that most organisations are having. It goes something like this: October 2026 is coming; we need to demonstrate we are taking all reasonable steps to prevent sexual harassment in our organisations. Let us make sure our training is in place, our reporting channels are working, and our investigation…
Search our resources library
-
What are the data retention policies for whistleblowing systems?
Data retention in whistleblowing systems presents a complex challenge: organisations must retain records long enough to investigate concerns thoroughly, demonstrate compliance with regulatory requirements, and preserve evidence for potential legal proceedings, yet they must also comply with the General Data Protection Regulation (GDPR)‘s principle of storage limitation, which requires that personal data be kept only…
-
What are the compliance requirements for whistleblowing in financial services?
Financial services organisations face some of the most stringent whistleblowing requirements of any sector. Beyond baseline obligations under the EU Whistleblowing Directive (applicable to EU operations) and UK PIDA legislation, firms regulated by the Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) must meet sector-specific standards reflecting the systemic risks financial misconduct creates. Recent…
-
How do whistleblowing systems help meet anti-corruption requirements?
Whistleblowing systems form a critical component of anti-bribery and anti-corruption (ABC) programmes, serving both as a detection mechanism for existing misconduct and as a deterrent to future wrongdoing. For organisations operating across Europe, whistleblowing arrangements must satisfy multiple overlapping requirements: the EU Whistleblowing Directive, national anti-corruption legislation, international standards such as ISO 37001, and sector-specific…
-
How do whistleblowing solutions support public sector requirements?
Public sector organisations across the European Union face unique obligations under the EU Whistleblowing Directive (Directive 2019/1937). Unlike private sector entities, which must comply based on employee headcount, public bodies are required to establish internal reporting channels regardless of size. For municipalities, the threshold is set at 10,000 or more inhabitants. Understanding how whistleblowing solutions…
-
How do organisations manage whistleblower retaliation risk?
Retaliation risk represents one of the most significant threats to effective whistleblowing programmes. When employees fear adverse consequences for speaking up, they either remain silent about serious misconduct or report externally to regulators, media, or lawyers – bypassing internal channels and denying organisations the opportunity to address concerns before they escalate. The EU Whistleblowing Directive…
-
How can whistleblowing services help reduce workplace liability?
Workplace liability takes many forms: employment tribunal claims from aggrieved staff, regulatory fines for compliance failures, civil claims from harmed third parties, criminal prosecution under corporate offence provisions, and reputational damage that affects market value and stakeholder trust. Effective whistleblowing services reduce exposure across all these categories by enabling early detection of misconduct, demonstrating appropriate…