Currently still in the legislative process, the Whistleblower Protection Act is due to be implemented in the first quarter of 2023 as an implementation of the EU Whistleblower Protection Directive. Companies with more than 50 employees will then be obliged to provide an anonymous system to draw attention to company-related legal violations.
To make it easier for employees to report criminal behavior in the company anonymously and securely, there should be reporting offices in companies (internal) and authorities (external) that take care of the matter. The process could then look like this:
- An employee discovers criminal behavior in the company and reports this either in writing, verbally or in person to the internal reporting office. An anonymous report is also possible.
- He is free to choose whether to report it internally, to the Federal Office of Justice or to his state authority
- The body must confirm receipt to the notifier within the next seven days
- The body now has three months to inform the whistleblower about the measures taken, e.g. forwarding to the prosecution authorities
- The whistleblower receives a kind of reversal of the burden of proof: if he is disadvantaged in his job in the future, it is assumed that this happened because of his report. This may already be the case if the employment contract is not extended. In this case, the employer must be able to prove that it has nothing to do with his role as a whistleblower. If he is unable to do so, claims for damages and fines are possible
Companies with 50 to 249 employees are granted a grace period until mid-December 2023. All companies with 250 employees or more must take action when the law comes into force. However, as the Federal Council recently refused to approve the draft law, this may still take some time. The target date of April 2023 has therefore lapsed for the time being.