Poland’s whistleblowing deadline approaches: Ensuring compliance with Whistlelink 

As the deadline for implementing Poland’s whistleblower protection legislation draws near, businesses across the country must prepare to comply with this pivotal law. Coming into force on September 24, 2024, the Whistleblower Protection Act aligns with the European Union’s Whistleblowing Directive and establishes crucial legal standards for reporting violations.

In this article, we highlight the key deadlines, core aspects of the new law, sanctions for non-compliance, and how Whistlelink’s platform ensures legal compliance. 

Key deadlines and scope of the law 

The Whistleblower Protection Act applies to all public and private sector organisations in Poland with 50 or more employees as of January 1 or July 1 of any given year. These organisations are required to set up internal reporting systems by September 25, 2024.  

The new legislation covers a broad range of individuals, including employees, volunteers, shareholders, and contractors, with provisions extending beyond traditional employment relationships. Reports may concern breaches related to corruption, financial services, consumer protection, privacy, and data protection, among other areas. Whistleblowers are protected when reporting violations obtained in a work-related context, whether before, during, or after employment. 

Legal requirements for whistleblowing channels 

A key provision of the Polish Whistleblower Act is the requirement for companies to establish internal reporting channels that allow for oral, written, and face-to-face reporting. These channels must be secure, with encryption in place to protect personal data in compliance with GDPR/RODO regulations. 

Whistleblowers should be able to report misconduct confidentially, and organisations have the discretion to accept anonymous reports. The law also mandates that whistleblowers must receive acknowledgment of their report within seven days and be updated on any follow-up actions or investigations within three months. 

Sanctions for non-compliance 

Failure to meet the requirements of the Whistleblower Protection Act can result in severe sanctions. Companies that fail to establish adequate reporting procedures, hinder the reporting process, breach confidentiality, or retaliate against whistleblowers could face fines of up to PLN 1 million or imprisonment for up to three years. Compensation for victims of retaliation is also mandated under the law.  

Whistlelink: A solution for compliance 

With the deadlines fast approaching, organisations must ensure they are fully prepared to comply. Establishing internal reporting systems and safeguarding whistleblower confidentiality is essential to avoid substantial fines and reputational damage.  

This is where Whistlelink’s whistleblowing platform becomes an essential tool. Whistlelink offers a comprehensive and secure solution that allows organisations to meet all the legal requirements, including GDPR-compliant data protection, anonymous and confidential reporting, voice reports, and user-friendly case management. 

Whistlelink’s platform also simplifies the process of tracking and managing cases, ensuring that whistleblower reports are handled promptly and in line with legal obligations. This system allows for customisable reporting categories and maintaining case registers, facilitating a tailored approach to compliance while upholding high ethical governance standards. Book your free demo with our whistleblowing experts today!