European nations implement EU whistleblower protection laws

Several European nations have implemented or updated national laws to transpose the EU Whistleblower Protection Directive into their domestic legal frameworks, establishing stricter standards for reporting misconduct.

In Portugal, Law no. 93/2021 applies to entities with 50 or more employees. It requires secure reporting channels, acknowledgment of reports within seven days, and feedback on investigations within three months. The law mandates the appointment of impartial personnel to manage reports while ensuring compliance with GDPR.

Spain introduced Law 2/2023, which provides the first unified national approach to whistleblower protection across all sectors. It applies to all public sector entities and private organizations with more than 50 employees, aiming to combat corruption by protecting those who report offenses in professional contexts.

Italy amended its legislation via Legislative Decree No. 24 in March 2023. This law covers public and private organizations with at least 50 employees. It requires secure, confidential reporting channels and protects whistleblowers and their assistants from retaliation. It also allows for external reporting to the Italian Anticorruption Agency (ANAC) if internal reports are not addressed.