EU Member States had the obligation to transpose Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law to their national law. Only seven out of twenty-seven Member States managed to do so in time, respecting the deadline of 17 December 2021.
The Whistleblowers Directive aims to offer an important protection against retaliation for persons, including workers, who report on breaches of Union law (which covers a vast array of legal provisions, from consumer protection to GDPR rules). Legal entities and governments were also asked to create internal reporting mechanisms to install formal procedures for whistleblowers. By 17 December 2021, authorities and legal entities (companies) of 250 or more workers should have established such an internal reporting mechanism. For smaller companies this obligation only enters into force on 17 December 2023.