Procedure for protecting whistleblowers

According to Art. 26 sec. 1 of Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons reporting breaches of Union rights Member States, including Poland, were required to bring into force the laws, regulations and administrative provisions necessary to comply with the directive by December 17, 2021. The directive referred to at the outset regulates the procedure for reporting irregularities and protecting persons reporting irregularities (whistleblowers) against retaliatory sanctions for disclosing illegal activities taking place in individual enterprises. To date, the Polish legislator has not implemented the above-mentioned directives into the national legal order. Legislative work is currently underway on the draft act on the protection of persons reporting violations of the law. The fate of the draft act can be followed on the website of the Government Legislation Center at: https://legistacja.rcl.gov.pl/projekt/12352401 Regardless of this, private entrepreneurs should already be aware of the institutions of legal protection of whistleblowers contained in the directive and the draft act.

Anonymity of the whistleblower

One of the main assumptions underlying the Directive was to ensure the protection of the person reporting irregularities by creating a secure system for reporting violations and introducing measures to protect whistleblowers. In view of the above, the Directive requires the creation of an internal reporting channel and procedures to ensure security and protection of confidentiality of the identity of the reporting person and the third party mentioned in the report and preventing unauthorized personnel from accessing them. In principle, therefore, the identity of the reporting person should not be disclosed to any person who is not an authorized member of staff competent to receive and follow up reports. This also applies to any other information from which the identity of the reporting person can be directly or indirectly identified. The identity of the reporting person may exceptionally be disclosed where such disclosure is a necessary and proportionate obligation under Union or national law in the context of investigations or judicial proceedings by national authorities.

Prohibition of retaliation

Moreover, it should be pointed out that Directive No. 2019/1937 in art. Article 19 imposes an obligation on the national legislator to prohibit any retaliatory actions against whistleblowers. According to the said provision: “(…) Member States shall take the necessary measures to prohibit all forms of retaliation against persons referred to in Art. 4, including threats of retaliatory actions and attempts to take retaliatory actions, including in particular retaliatory actions taken in the following forms.

(a) suspension, forced unpaid leave, dismissal or equivalent measures;

b) demotion or suspension of promotion;

c) transfer of duties, change of workplace, reduction of remuneration, change of working hours;

d) suspension of training;

e) negative performance evaluation or negative opinion about work;

f) imposing or applying any disciplinary measure, reprimand or other penalty, including financial;

g) coercion, intimidation, mobbing or exclusion;

h) discrimination, unfavorable or unfair treatment;

(i) failure to convert a fixed-term employment contract into an employment contract of indefinite duration where the worker could reasonably expect to be offered permanent employment;

j) non-renewal or early termination of a fixed-term employment contract;

(k) damage, including damage to a person’s reputation, especially on social media, or financial losses, including economic losses and loss of income;

(l) blacklisting on the basis of an informal or formal sector or industry agreement, which may result in a person not finding future employment in a particular sector or industry;

m) early termination or termination of a contract for goods or a contract for the provision of services;

(n) revocation of a license or permit;

(o) referrals for psychiatric or medical examinations.”

Criminal penalties in the proposed whistleblower protection law

The draft law on the protection of persons reporting violations of the law in the shape developed so far provides for the prohibition of retaliation against whistleblowers required by the directive. At the same time, it should be pointed out that a number of planned penal sanctions are to ensure the reality of this protection. These sanctions are mainly intended to “deter” potential offenders.

Penalties in the draft act include, among others: for: – hindering the filing of a notification; – taking retaliatory action against the person who made the report or public disclosure; – breach of the obligation to maintain the confidentiality of the identity of the reporting person; – lack of an internal procedure for reporting violations of the law or non-compliance of this procedure with legal requirements. The planned criminal sanctions include, first of all, a fine, restriction of liberty and even imprisonment.

To sum up, it should be stated that when designing and implementing an internal channel for receiving notifications and a procedure ensuring security and protection of confidentiality of the identity of the reporting person, a private entrepreneur should be aware of a number of restrictive requirements provided for by legal acts, as well as sanctions (including criminal sanctions) for their violation . From the point of view of legal responsibility, in order to implement appropriate internal procedures, it is recommended to use the services of a professional law firm.