Skip to main content
Hinweisgeberschutz

Whistleblower Protection Act (HinSchG)

The German law protecting whistleblowers, transposing EU Whistleblower Directive 2019/1937 into national law.

The Whistleblower Protection Act (Hinweisgeberschutzgesetz, HinSchG) entered into force in Germany on 2 July 2023. It transposes EU Directive 2019/1937 into German law and establishes comprehensive protections for individuals who report violations of law within organisations. The Act applies to companies with 50 or more employees as well as public sector bodies.

At its core, the HinSchG requires covered organisations to establish secure internal reporting channels that allow employees and other stakeholders to submit reports confidentially or anonymously. Reports must be acknowledged within seven days, and reporters must receive a status notification within three months. The Act prohibits any retaliation against individuals who report in good faith, including dismissal, demotion, or other adverse measures.

Non-compliance carries significant consequences: organisations that fail to establish a reporting channel or that retaliate against whistleblowers can face fines of up to €50,000. For this reason, building a compliant, trusted reporting system is not only a legal obligation but also a strategic investment in corporate integrity and risk management.

Legal Basis

Hinweisgeberschutzgesetz (HinSchG) of 12 May 2023; EU Directive 2019/1937

Practical Example

A mid-sized logistics company with 120 employees implements a digital whistleblower system ahead of the HinSchG deadline. When an employee reports suspected invoice fraud through the system, the designated case manager acknowledges the report within the statutory seven-day period and launches an internal investigation. Because the process follows HinSchG requirements, the company avoids regulatory fines and resolves the issue before it escalates.

FAQ

All private sector employers with 50 or more employees and all public sector bodies must establish a compliant internal reporting channel. For companies with 50–249 employees, certain shared solutions are permitted.
Failing to establish or operate a compliant reporting channel is an administrative offence under the HinSchG and can result in fines of up to €20,000. Retaliatory measures against whistleblowers can attract fines of up to €50,000.
Organisations are not legally required to accept anonymous reports, but they are encouraged to do so. If anonymous reports are received, they should be processed in the same way as identified reports.

How preeco supports you

Learn how our software supports you with this topic.

Learn more