OtherEuropean Union
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law
Directive (EU) 2019/1937 of 23 October 2019 on the protection of persons who report breaches of Union law. Requires legal entities with 50 or more workers and public sector bodies to establish secure, confidential internal reporting channels with prescribed procedures (7-day acknowledgement, impartial follow-up, 3-month feedback); requires Member States to designate competent authorities operating external reporting channels; sets the conditions for protected public disclosure; mandates confidentiality of the reporting person's identity, GDPR-compliant data processing and record-keeping; prohibits retaliation and provides protective measures including reversal of the burden of proof, support measures and remedies; and requires effective, proportionate and dissuasive penalties..
Domains
Whistleblowing: Penalties and Remedies
Whistleblowing: Protection Measures
Whistleblowing: Confidentiality, Data Protection and Record-Keeping
Whistleblowing: Public Disclosures
Whistleblowing: External Reporting Channels
Compare Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs ISO 27001:2022View comparison →Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs SOC 2View comparison →Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs NIST CSF 2.0View comparison →Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs GDPRView comparison →Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs HIPAAView comparison →Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law vs PCI DSS 4.0View comparison →
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law by Industry
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Healthcare→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Financial Services→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Technology→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Government→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Manufacturing→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Energy→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Retail→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Education→
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law by Role
Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for CISOs→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Compliance Officers→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Risk Managers→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for IT Directors→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for DPOs→Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law for Auditors→
Frequently Asked Questions
What is Directive?
Directive (EU) 2019/1937 of 23 October 2019 on the protection of persons who report breaches of Union law. Requires legal entities with 50 or more workers and public sector bodies to establish secure, confidential internal reporting channels with prescribed procedures (7-day acknowledgement, impartial follow-up, 3-month feedback); requires Member States to designate competent authorities operating external reporting channels; sets the conditions for protected public disclosure; mandates confidentiality of the reporting person's identity, GDPR-compliant data processing and record-keeping; prohibits retaliation and provides protective measures including reversal of the burden of proof, support measures and remedies; and requires effective, proportionate and dissuasive penalties..
How many controls does Directive have?
Directive contains 22 controls organized across 7 domains.
Where does Directive apply?
Directive is applicable in European Union. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Directive map to?
Directive has control-to-control mappings with 3 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Directive compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
How ready are you for Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.