Anonymous reporting

Directive

Can reports be made anonymously?

See local law.

Are private sector entities required to accept and follow up on anonymous reports?

See local law.

Belgium

Can reports be made anonymously?

Yes.

Are private sector entities required to accept and follow up on anonymous reports?

Yes.

Czech Republic

Can reports be made anonymously?

Yes.

Are private sector entities required to accept and follow up on anonymous reports?

No.

It is however generally recommended to do so as the identity of the whistleblower may be revealed at any time. As soon as their identity is known to the obliged entity, the whistleblower is fully protected under the Act on Whistleblowing and the obliged entity must acknowledge and respond to the report within the time periods stipulated in the Act on Whistleblowing.

Denmark

Can reports be made anonymously?

Yes. However, the employer/recipient is not obliged to process or follow up on an anonymous reporting, and the anonymous reporter will from a practical perspective not be protected against retaliation as long as the individual is anonymous.

Are private sector entities required to accept and follow up on anonymous reports?

No.

Estonia

Can reports be made anonymously?

Yes, anonymous reporting is allowed. In case of proper anonymous reporting, the reporting person is also protected in the situation where their identity becomes public later.

Are private sector entities required to accept and follow up on anonymous reports?

No, private sector entities are not required to accept and follow up. There is no obligation to receive anonymous reports through internal and external reporting channels, but receiving and processing reports from anonymous reporting people is recommended. In the case of receiving an anonymous report, these reports should also be investigated to the extent possible without receiving additional information from the reporting person.

Finland

Can reports be made anonymously?

Organizations may decide to accept anonymous reports as well.

Are private sector entities required to accept and follow up on anonymous reports?

No.

France

Can reports be made anonymously?

The CNIL (French data protection agency) recommends that companies do not encourage anonymous reports (which are defined as a report whose author is neither identified nor identifiable) but states that if anonymous reports are allowed:

  1. the seriousness of the facts mentioned should be established and the factual elements should be sufficiently detailed; and 
  2. the processing of this report should be carried out with special precautions, such as a prior examination by the first addressee of the appropriateness of its circulation within the whistleblowing system.  

Are private sector entities required to accept and follow up on anonymous reports?

No.

Germany

Can reports be made anonymously?

Yes.

There is no requirement to allow for anonymous reporting but if a report is made on an anonymous basis, these must likewise be handled.

Are private sector entities required to accept and follow up on anonymous reports?

No, there is no requirement to establish reporting channels for anonymous reporting.

Hungary 

Can reports be made anonymously?

Yes, however the investigation of the report may be omitted if the report was made by an unidentified person.

Are private sector entities required to accept and follow up on anonymous reports?

No, the investigation of the report may be omitted if the report was made by an unidentified person.

Ireland

Can reports be made anonymously?

Yes; however, there is no obligation to follow up on an anonymous report, but a recipient entity may, if it considers it appropriate to do so, follow up on the subject-matter of an anonymous report.

Are private sector entities required to accept and follow up on anonymous reports?

No. However, if a private sector entity does decide to accept anonymous reports, the conditions pursuant to which such reports can be accepted and followed up on should be communicated to employees. If accepted, the same procedural requirements (as apply to non-anonymous reports) should also apply to anonymous reports.

The decision on whether or not to follow up on an anonymous report should be subject to appropriate internal documentation. In particular, a record should be made of its receipt, together with any information that receiving entity considers necessary and appropriate for the purposes of the Act applying, should that person be subsequently identified and penalised for having made that report. Any such records should only be retained for as long as is necessary and proportionate for the purposes of compliance with the Act or any other enactment.

Italy

Can reports be made anonymously?

Yes.

The protection measures provided for by the Legislative Decree 24/2023 applies also to report addressed to judicial or accounting authorities or to public disclosures, even if done anonymously.

Are private sector entities required to accept and follow up on anonymous reports?

No.

Netherlands

Can reports be made anonymously?

It will be, but the relevant provisions (Article 2, e + f) relating to anonymous reporting have not yet entered into force.

Are private sector entities required to accept and follow up on anonymous reports?

Yes, once the relevant provisions have entered into force

Poland

Can reports be made anonymously?

Yes, if the internal procedure allows to file anonymous reports (at the discretion of the company).

Are private sector entities required to accept and follow up on anonymous reports?

No.

Slovakia

Can reports be made anonymously?

Yes, the newly amended Whislteblowing Act addresses directly the protection of anonymous whistleblowers whose identities have been exposed and provides them with the same protection as other whistleblowers.

Are private sector entities required to accept and follow up on anonymous reports?

Yes, under the newly amended Whistleblowing Act both private and public sector are obliged to accept and follow up on every report (anonymous included).

Spain

Can reports be made anonymously?

Yes.

Are private sector entities required to accept and follow up on anonymous reports?

No.

Sweden

Can reports be made anonymously?

Yes.

Are private sector entities required to accept and follow up on anonymous reports?

No.

United Kingdom

Can reports be made anonymously?

Yes.

Are private sector entities required to accept and follow up on anonymous reports?

Existing law makes no express provision for this.