Guide to implementing an effective whistleblowing system
Due to the EU Whistleblowing Directive companies must introduce a system for receiving reports of violations. They have already recognised that a whistleblower system even helps them to Business success to increase. Now, as an entrepreneur, managing director, or executive, you face the challenge of establishing a whistleblower system within your company that your own employees and external business partners can actually use at any time and from any location. But what do you need to consider so that the Implementation a whistleblower system successful will be? This post will guide you through the correct implementation approach.
An effective and widely accepted whistleblower system should include the following components: * **Clear internal guidelines:** Comprehensive, easy-to-understand guidelines that specify what can be reported, who can report (e.g., employees, contractors, customers), how to report, and how the process proceeds after a report is filed. * **Secure and accessible reporting mechanisms:** A variety of channels through which individuals can submit reports, including an anonymous hotline, an online platform, email, or a designated contact person. These channels must be confidential and secure. * **Protection against retaliation:** A clear and enforceable policy that offers whistleblowers protection from negative consequences, regardless of who they are. This is crucial for trust and acceptance. * **Investigation procedures:** A defined, timely, and fair process for investigating all credible reports. This should include the collection of evidence, interviews, and documentation of the findings. * **Feedback and communication:** A mechanism to provide whistleblowers with feedback on the progress and outcome of their report, wherever possible and appropriate. * **Training and Awareness:** Regular training sessions for employees and management to explain the system, its importance, and how to use it. * **Data Protection and Confidentiality:** All reported information must be treated as strictly confidential and made available only to those necessary for the investigation. * **Independence and Objectivity:** The units or individuals responsible for administering the whistleblower system and conducting investigations should, whenever possible, operate independently of the potential accused parties to ensure objectivity. * **Management Commitment:** Visible and consistent support for the system from senior management is essential to promote its effectiveness and acceptance. * **Continuous Review and Improvement:** The system should be regularly reviewed and updated to assess its effectiveness and ensure that it remains relevant and up to date.
It sounds so simple. You just need to have the appropriate Reporting channels provide and appoint a suitable person to process incoming reports. „Already“ you meet the requirements of the EU Whistleblower Directive. But is that really all? Define some reporting channel and then it's off to the races? No, there's more to do to make the whistleblower system work for you business success can contribute.
- What must such a system be able to do?
- Which legal requirements Are to be observed?
- What is necessary from the perspective of the insiders (often also called whistleblowers) to build trust and high Acceptance to achieve?
- Which technical solutions make it easier to use?
You can find out more about the necessary and useful functions below.
Secondly, the best solution is of little use if users are unaware of it and do not trust it. Without a extensive, recurring and targeted communication The whistleblowing system is used little to not at all. With clear messages and easily accessible information, you must primarily reach your company's employees. Furthermore, you must also address external parties, such as your suppliers, customers, and other service providers. We will explain practical, proven methods for effective communication later in this article.
Why introduce a whistleblowing system at all?
Certainly, you know many good reasons why you would Introduce a whistleblowing system We want to shed light on two aspects, which should be enough of an incentive.
Obligation from the EU Whistleblower Directive
At the beginning, many companies realise that the EU Whistleblower Directive introduces a Duty enables whistleblowers to confidentially report legislative breaches. This stipulation was already adopted in 2019 and End of 2021 The implementation deadline for national laws has passed for all EU member states. The regulation affects all companies with over 50 employees.
But don't just make it a mere duty to fulfil the requirements; let your company become even better as a result.
Contribution to company success
By introducing a good whistleblower system, you are certainly contributing to the company's success beyond mere legal obligations. Success bye.
The call to report misconduct and thus potential errors in operational processes is viewed positively as a catalyst for continuously improving business operations. Errors become opportunities. This creates a open Error and learning culture. While it is also about identifying conscious violations by individuals that harm the company and punishing them appropriately, insights into which aspects are at least just as important Vulnerabilities occurred in systems or where gaps have been revealed.
With a professional whistleblowing system, you position your company as Good employer. They ensure the protection of all employees through suitable prevention measures – such as the simple option to report infringements – and thus also the protection of the company. Furthermore, this creates a positive external image, provided that your whistleblowing system is prominently displayed, for example, on the homepage, so that external parties such as your suppliers can access it. In the Supply chain Pitch yourself as a business partner who handles the investigation of misconduct and the optimisation of flawed systems.
Naturally, it's not the primary motivation for a whistleblower system, yet a whistleblower system has as its Part of Compliance a deterrent effect on potential perpetrators. If your whistleblowing system is clearly recognisable to outsiders, much like the video surveillance system on the premises with high-value goods, this creates a significant disincentive, particularly for possible “external attacks”.
A good whistleblower system is characterised by trust, anonymity, clear procedures, prompt feedback, and protection from retaliation. It ensures that reports are handled discreetly, investigated thoroughly, and that the reporting person is safe from any negative consequences.
What a whistleblowing system must deliver is, on the one hand, already defined in the EU Whistleblower Directive. On the other hand, important best-practice approaches are emerging from the experience of large and international companies that have been using such systems for some time. In the following “7-point plan” Let's summarise the most important factors for your effective whistleblowing solution. Generally, when designing the whistleblowing system, you should consider not only formal but also practical aspects. And of course, costs and benefits play a role – consider both the costs as well as personnel costs. Your solution should primarily represent a possible reporting channel for whistleblowers. In addition, your system should allow you to process reports and document the proceedings. Contact with the whistleblower should be possible directly from within the system, and the respective case handlers should be easy to administer. Ideally, external lawyers can beconnect it to the system, be it your trusted lawyer or an external consultant who will handle the cases for you.
“7-Point Plan for Efficient Whistleblower Systems:
- Reports from whistleblowers must in any case Confidential Recommendation from practice: Allow whistleblowers to make the initial contact even anonymous to be undertaken.
- All data and information must be very well protected against access by unauthorised persons. This concerns a clear Access restriction internal and includes protection against cyber-attacks.
- Access to the whistleblowing system should be low-threshold, meaning your solution should be an offer that whistleblowers can accept without complication. Give whistleblowers the opportunity to report an observed violation anytime and anywhere to report directly into the system.
- Your system should user-friendly This includes well-structured questions and input fields, as well as the option to upload multiple documents, for example. For people who are not IT-savvy, it is a tremendous relief if they can give their tip orally into the system (by phone or via “speech-to-text”).
- Consider which languages are commonly used in your company. To encourage actual usage, your whistleblower system should available in several languages to be.
- Reports of potential violations can be made by internal employees and external parties. Your whistleblowing system should be able to accept both options, i.e. your system should also allow for Access for External to provide for.
- It is also important to control the necessary Access permissions. You may require different permissions for multiple users. In a whistleblower system, rights to read, edit, close, delete, or evaluate should be easy to set up.
Whistleblowing System: Pros and Cons “Digital” or “Analog”
You are now aware of the essential functions of a whistleblowing system. Now you might be asking yourself: Do I need to complex technical software acquire and install? Isn't a classic one enough Complaints box?
Reports can be submitted in a variety of formats: by letter, fax, and email. By calling a hotline or through a personal visit to a confidential contact person. A variety of possibilities. With a view to the subsequent steps, once the whistleblower's report has been received and further processing of the matter is pending, it quickly becomes apparent Disadvantages of “analog” solutions. Letters, printed emails and faxes, as well as handwritten meeting minutes, can certainly be securely stored in a file in a fireproof cabinet. However, this is not the current state of science and technology in the age of New Work and home office – and above all, not in terms of security or documentation.
We recommend: Do not offer „just all“ reporting channels. This is more confusing than helpful. Clarity ensures. The effort involved in transmitting information to the defined handler of the tips, and the risk of ensuring the confidentiality of forwarded letters and emails within the company, are high. Rely on a few, selected, and well-thought-out reporting channels, e.g. a digital whistleblowing system as a cloud solution (“Software-as-a-Service”) and additionally an external lawyer as a personal point of contact Ombudsperson. You can neither prevent nor prohibit a whistleblower from sending the tip via post. In this case, you must ensure, through unambiguous internal procedures, that the letter goes directly from the mailroom to the correct department. Nevertheless, this case, which is now statistically rarer, of tips being submitted by post is also better managed if the document is scanned and then into the Digital file is taken over by your whistleblower system.
More about “Pros and cons” You can find the different configuration options for the communication channels in our article. „Selection of a whistleblowing system“.
Decision before implementation: Operate a whistleblower system internally or externally?
What's the use of the best product if there's no suitable person to operate it? Should the person who processes the reports be better in the company sein oder kann die Bearbeitung der Hinweise ein External service provider take over? There are plausible arguments and advantages for both options:
The arguments for an internal solution are:
- Little effort – provided a suitable employee is available for managing and processing tips
- Messages come directly into the company, “without detours”.
- Internal processors are familiar with the operational procedures and affected persons
- Special trust of employees in internal colleagues
The advantages of an external solution are:
- Legal duty of confidentiality of lawyers
- As a rule, long-standing experienced experts
- Quick, valid initial assessment of the evidence
- Independence of the external party from company instructions
- Trust in external contacts is often higher than in “colleagues”.”
- No internal resources to be set up or maintained.
- Generally easier access for external whistleblowers
Perhaps you won't make a “for or against” decision. You can also combine these options well as a team solution to create an optimal mix: i.e., external expertise in compliance combined with knowledge of internal processes. This also contributes to the preservation of Mehr-Augen-Prinzips Check-and-Balance.
Creating Acceptance: Communication for a Whistleblower System
Whistleblower systems are only gladly used if whistleblowers are aware of them and trust them trust. Without good marketing of the whistleblowing system, the benefit of the solution will be significantly lower.
Make the whistleblowing system and processing procedures transparent
Ensure the internal and external users of the whistleblowing system for maximum transparency. There should be no secrets about the type of processing. However, you should, Confidentiality highlight the individual cases.
Answer the following questions from the perspective of the whistleblowers:
- Where Do I find the system?
- Who looks at the instructions and evaluates them?
- Which Are cases being followed up on? Which ones are not being processed?
- How Is there a professional investigation of suspected cases? Are specialists brought in for examinations?
- Was What happens if misconduct is proven? Do HR and the works council get involved?
- Is there a regular report on the number of reported incidents and solved cases?
You do not need to answer all questions in detail in a whistleblower system manual. At an appropriate point, e.g. in the internal Collaboration platform (Intranet), in Code of Conduct or in Anti-corruption training, Some explanations serve their purpose.
Inform internal employees and external parties about the whistleblowing system
Don't stop at just informing your own employees comprehensively about the whistleblower system. If you Feedback from your customers, service providers etc. would also like to receive and process systematically, then you should make this clear. Below we give you suggestions on how to do this.
Communication campaign for the whistleblowing system
How best to approach potential whistleblowers? Plan the information about the whistleblowing system in advance, make a Campaign from this. Use simple messages to convey to future whistleblowers that Notes expressly requested are
- We don't want any violations!
- Have you witnessed any misconduct?
- Please log in!
- Any infringements found will be penalised!
For the Communication can and should you different channels use. Consider the means by which you normally reach your target audiences for communication, your own employees and external customers, suppliers, etc., and take that “Tip” into these channels too.
A non-exhaustive selection (“checklist”) of Communication media:
- Speeches for works meetings and leadership events
- Podcast or management video
- Posters and notices as announcements (“Blackboard”)
- Brochure on Compliance and the Whistleblowing System
- Employee and customer magazines
- Explainer videos
- Integration in face-to-face training and e-learning
- Clauses in employment contracts for employees and in contracts with business partners
- Intranet
- Company Homepage(s)
The Intranet and the Homepage offer themselves particularly well as a communication channel, as the information about the whistleblowing system can be found there permanently. Make it easy for users to land on your whistleblowing system with just a few actions (no more than 2 “clicks”). It is also helpful to have specific Keywords wie “Compliance”, “Hinweise” und “Verstöße” in der Search function to deposit.
Addressing negative associations with “whistleblowing” and emphasising positive aspects.
Not everyone associates the act of reporting or whistleblowing with positive things. The fear of stool pigeons who want to make another person look bad without good reason is high. Unfortunately, the view that the messenger of bad news is (almost) as bad as the perpetrator themselves is still widespread. You should actively counter these negative associations. Market the fact that you have received important reports positively. Perhaps tell a Success story, what change in internal processes a report has caused, or publish a statistic on how many cases could be solved with the help of tips. Say “Thank you” to the employees for using the whistleblowing system. All of this belongs to the “Tone from the top”.
To a wrong or even Misuse To prevent misuse of the whistleblowing system, you can address this in the communication about the system. What does not belong in the whistleblowing system because other channels already exist for it, e.g. customer complaints to the customer hotline or accusations of discrimination to the designated anti-discrimination officer? The message that only well-intentioned whistleblowers are protected is more difficult to convey. You can subtly hint at this by asking whistleblowers for information solely based on Facts, Proof and Witness statements bitten.
Consciously false suspicions in the case of whistleblower systems, by the way, one very small exception less than 5 % The more positively and actively you communicate your whistleblower system and the company's compliance culture, the lower the rate of malicious fantasies will be.
Conclusion: Successful implementation requires strategic communication
Practical functions of the whistleblowing system and engaging communication are the levers for success. Read more about this topic in our article too „Advantages and disadvantages of a whistleblowing system“
In this article, you’ve received the most important answers to the question of how to design your whistleblowing system so that whistleblowers are happy to use it and thus contribute to the success of your company.
You have learned that a good technical solution without open and Trust an inspiring address to whistleblowers is only half the battle.
You are on the right track if you
a) one suitable whistleblowing system select,
b) one targeted communication to plan whistleblowing,
c) the whistleblowing system into the integrate into operational processes and
d) the whistleblowing system Run permanently and actively.
Read more about this in our „Guide to implementing the Whistleblower Protection Act in your company“.
If we may accompany you on your way, Feel free to contact us.
(The male form used refers to all persons, regardless of gender.)
