Setting Up a Whistleblowing System
Reports from employees are often the fastest way to detect misconduct. We support you in setting up an internal reporting channel that meets the legal requirements and earns the trust of your employees.
Who needs a whistleblowing system?
| Legal basis | Who is obliged? |
|---|---|
| Whistleblower Protection Act (Section 12 HinSchG) | Employers with, as a rule, at least 50 employees; certain financial sectors regardless of size |
| Anti-Money Laundering Act (Section 6(5) GwG) | All obliged entities under the GwG – with no minimum size. Employees must be able to report violations while keeping their identity confidential. |
If an internal reporting channel required under the HinSchG is missing, a fine of up to €20,000 may be imposed (Section 40 HinSchG). A reporting channel also makes sense for smaller companies: it shows supervisory authorities and business partners that compliance is taken seriously.
Our services
- Needs analysis: Which obligations apply to your company, and which topics should be reportable?
- Reporting channel: Setting up a secure online reporting form with an anonymous reporting option and encrypted storage – directly on your website
- Internal reporting office: Selection, training and expert support of the persons responsible
- Rules of procedure: Process for receipt, review, follow-up measures and documentation
- Data protection: Supplementing your privacy notices and a deletion concept (documentation generally three years after completion)
- Communication: Informing employees about reporting channels and protection against retaliation
What makes a good whistleblowing system
Confidentiality
The identity of whistleblowers and the persons concerned is protected (Section 8 HinSchG).
Easy to access
Reports online, by phone or in person – without obstacles.
Independent
The reporting office works free of instructions and without conflicts of interest.
Traceable
Every report is documented, reviewed and handled with appropriate follow-up measures.
An example from practice: our own whistleblower system – anonymous, without storing IP addresses and with encrypted storage.
A whistleblowing system for your company
We clarify which requirements apply to you and implement a suitable solution – from the website to the rules of procedure.
Book a no-obligation initial consultationYour contact person

Alen Gruber
Certified Corporate Compliance Specialist
External AML Officer
