6 minute read | May.24.2023
With a delay of almost one and a half years, the German legislator has implemented the so-called Whistleblower Directive (Directive (EU) 2019/1937) into German law: In mid-December 2022, the German Bundestag had passed the Whistleblower Protection Act (Hinweisgeberschutzgesetz – HinSchG) in the version proposed by the Legal Committee. The Bundesrat did not approve the law in February 2023. However, on May 12, the Bundesrat has now approved the bill after the original bill was amended in the mediation committee. The law will enter into force in mid-June 2023.
Companies must now immediately review the implementation of whistleblower systems. Failure to do so could result in heavy fines.
In the past, German law did not provide any specific protection for whistleblowers or rules on how companies should deal with reports of violations of the law. There was only a ban on disciplinary action: the employer was not allowed to discriminate against an employee by any agreement or measure if the employee exercised his or her rights in a lawful manner. This included reporting violations of the law. However, reports by employees to the press or to authorities about (alleged) violations and grievances against the employer could also lead to dismissal.
The Directive and its implementation in the HinSchG are now intended to provide better protection for whistleblowers who report violations of laws and regulations. This is to be ensured by internal reporting bodies within the companies and external reporting bodies at third parties, as well as the provision of appropriate reporting channels. However, whistleblowers should prefer to use internal reporting channels in the first instance if there is a case where effective internal action can be taken to address the violation.
In addition to these reporting offices, there will also be contact points at the Federal Office of Justice, the Federal Financial Supervisory Authority, and the Federal Cartel Office.
The material scope of application of the HinSchG goes far beyond the Directive. While the Directive only covers violations in certain European legal and political areas, the material scope of application of the HinSchG goes beyond this and covers all violations of the law that are subject to penalties and fines.
For example, reports of the following violations are covered:
Whistleblowers are any natural persons who, in the course of or in preparation for connection their professional activities, become aware of violations of law and report or disclose such information to the reporting channels provided for by law.
Thus, whistleblowers are understood to include, among others, employees, shareholders, employees of suppliers and persons who became aware of violations prior to commencing their employment. This broad scope is consistent with the Directive’s requirements.
The whistleblower is protected only if, at the time of the report, he or she had reasonable grounds to believe that a violation had occurred and that the reported violation fell within the scope of the HinSchG. As long as the report is made in good faith, the protection is not lost if it turns out later that a violation did not actually occur.
The HinSchG establishes certain response obligations following a report, including:
The threat of fines of up to EUR 50,000, with the possibility of even higher fines if certain conditions are met, is the main reason why employers should address this issue and implement whistleblower protection systems if they do not already exist. This is particularly true for companies with more than 249 employees, for which no transition period is provided. Existing systems will need to be reviewed to ensure they meet the legal requirements.
Multinationals with entities in multiple EU member states should assess the local law requirements, given that the Directive gives EU member states some leeway in implementing its regulations. As a starting point, multinationals should be considering the legal requirement in their core markets first. In many cases these concepts can be used with some changes in other EU countries.
For advice on implementing a whistleblower protection system in Germany and other EU member states compliant with the new standards, please contact us.