FAQ On Whistleblowing Hotlines: A Data Protection And Criminal Law Perspective

Whistleblowing hotlines enhance transparency within a company; the creation of a whistleblowing internal procedure for a company implies a number of issues from a data protection and criminal law perspective. Here below you can find a set of FAQs on some relevant aspects related to the creation of such a procedure.

1. What is a whistleblowing hotline?

   A whistleblowing hotline is a specific channel designed for employees to report misconduct internally. As clarified by Article 29 of the Data Protection Working Party's (WP29) "internal whistleblowing schemes are generally established in pursuance of a concern to implement proper corporate governance principals in the daily functioning of companies." For this reason, under a data protection law perspective, whistleblowing schemes enhance transparency, and they are considered a best practice. Under criminal law perspective, Law no. 179/2017 provides indications on reporting crimes and irregularities within the private and public employment context. More specifically, with regard to the private context, this law provides for an amendment to the Legislative Decree no. 231/2001 (231 Law). The 231 Law is aimed at encouraging companies to adopt compliance programs (Models) in order to prevent the commission of certain crimes (listed by the 231 Law) by the directors, managers or their...