EU Whistleblower Directive (Directive 2019/1937)

Protects persons who report breaches of EU law through internal or external reporting channels.

22

Rules extracted

138

Obligations decomposed

6.3x

Avg obligations per rule

🇪🇺 European Union

Jurisdiction

About this regulation

The EU Whistleblower Directive establishes minimum standards for the protection of persons reporting breaches of Union law. It requires legal entities in the private and public sectors to set up internal reporting channels, designates external reporting to competent authorities, sets conditions for public disclosure, and prohibits retaliation against reporting persons. The directive covers breaches in areas including public procurement, financial services, product safety, transport safety, environmental protection, food safety, public health, consumer protection, privacy and data protection. Member States were required to transpose the directive by 17 December 2021 (for entities with 250+ workers) and by 17 December 2023 (for entities with 50-249 workers).

What AuditDSS covers

Source

1

Regulation

Extracted

22

Rules

Decomposed

138

Obligations

6.3x

Decomposition ratio

Each rule is decomposed into an average of 6.3 atomic obligations — the smallest testable units that can be independently violated.

Fully extracted & scored

All 138 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.

Risk scoring

Every obligation in EU Whistleblower Directive is scored across independent risk dimensions:

W

Obligation Weight

How critical within the regulatory framework

L

Violation Likelihood

How often breached in practice

E

Enforcement Evidence

Regulator enforcement history and penalties

C

Cascade Dependency

How many obligations depend on this one

Regulatory details

Full title
EU Whistleblower Directive (Directive 2019/1937)
Regulatory body
European Parliament and Council
Jurisdiction
🇪🇺 European Union
Document type
directive
Effective date
December 17, 2021
Issuing authority
European Parliament and Council of the European Union
Official source
View source document ↗

Who this applies to

private entities with 50+ workersall public sector entitiescompetent authoritiesreporting personsfacilitators

Key requirements

  • internal reporting channels
  • external reporting to competent authorities
  • public disclosure conditions
  • prohibition of retaliation
  • protection measures for whistleblowers
  • confidentiality of identity
  • support measures and legal aid
  • penalties for retaliation and hindering reporting

Frequently asked questions about EU Whistleblower Directive

What is EU Whistleblower Directive?

The EU Whistleblower Directive establishes minimum standards for the protection of persons reporting breaches of Union law. It requires legal entities in the private and public sectors to set up internal reporting channels, designates external reporting to competent authorities, sets conditions for public disclosure, and prohibits retaliation against reporting persons. The directive covers breaches in areas including public procurement, financial services, product safety, transport safety, environmental protection, food safety, public health, consumer protection, privacy and data protection. Member States were required to transpose the directive by 17 December 2021 (for entities with 250+ workers) and by 17 December 2023 (for entities with 50-249 workers).

Who does EU Whistleblower Directive apply to?

EU Whistleblower Directive applies to private entities with 50+ workers, all public sector entities, competent authorities, reporting persons, facilitators.

How many obligations does EU Whistleblower Directive contain?

AuditDSS has decomposed EU Whistleblower Directive into 138 atomic obligations from 22 rules. Each obligation is independently testable and risk-scored.

What are the key requirements of EU Whistleblower Directive?

The key requirements include: internal reporting channels, external reporting to competent authorities, public disclosure conditions, prohibition of retaliation, protection measures for whistleblowers, confidentiality of identity, support measures and legal aid, penalties for retaliation and hindering reporting.

How can I assess my EU Whistleblower Directive compliance?

Upload your compliance policy to AuditDSS. The platform maps your document against all 138 EU Whistleblower Directive obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

Which jurisdiction enforces EU Whistleblower Directive?

EU Whistleblower Directive is enforced in European Union by European Parliament and Council.

When did EU Whistleblower Directive come into effect?

EU Whistleblower Directive became effective on December 17, 2021.

What industry does EU Whistleblower Directive apply to?

EU Whistleblower Directive is primarily relevant to the Workplace Safety & WHS/OHS industry. AuditDSS covers 45 regulations in this industry sector.

Build a EU Whistleblower Directive compliance pack

Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for EU Whistleblower Directive — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.

Policy

High-level commitments and governance framework covering EU Whistleblower Directive requirements.

Procedures

Step-by-step operational procedures to implement each policy commitment.

Forms & checklists

Ready-to-use forms, registers, and checklists for day-to-day compliance operations.

Multi-regulation

Combine EU Whistleblower Directive with other regulations into a single unified compliance pack for your business.

Already have a policy? Assess it against EU Whistleblower Directive

1

Upload your document

Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.

2

AI maps against 138 obligations

Your document is scored against every obligation in EU Whistleblower Directive. Each claim is mapped to the obligation tree and evaluated for coverage.

3

Risk-scored gap report

Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.

Related regulations in Workplace Safety & WHS/OHS

Assess your EU Whistleblower Directive compliance

Upload your document and get a risk-scored gap analysis against 138 EU Whistleblower Directive obligations in under 5 minutes.