{"id":662,"date":"2023-03-22T15:19:07","date_gmt":"2023-03-22T14:19:07","guid":{"rendered":"https:\/\/www.clience.legal\/wichtige-complianceregelungen-whistle-blower-und-iso-37301\/"},"modified":"2026-09-09T10:25:24","modified_gmt":"2026-09-09T08:25:24","slug":"wichtige-complianceregelungen-whistle-blower-und-iso-37301","status":"publish","type":"post","link":"https:\/\/www.clience.legal\/en\/wichtige-complianceregelungen-whistle-blower-und-iso-37301\/","title":{"rendered":"Key compliance rules \u2013 whistleblowing and ISO 37301"},"content":{"rendered":"

Important changes in the area of compliance  <\/strong><\/p>\n\n\n\n

Is your compliance system prepared for the upcoming changes? <\/strong><\/p>\n\n\n\n

The EU Whistleblower Directive significantly expands entrepreneurs\u2019 obligations with regard to their compliance system. In addition, the Corporate Sanctions Act (VerSanG) is to be adopted.<\/p>\n\n\n\n

Below is an overview of the most important changes:<\/p>\n\n\n\n

A. \u201cEU Whistleblower Directive\u201d<\/h2>\n\n\n\n

I. Objectives of the Directive<\/h2>\n\n\n\n

The EU Whistleblower Directive aims to uncover and prevent violations of EU law, particularly with regard to tax fraud, money laundering or offenses related to public procurement, product and traffic safety, environmental protection, public health, and consumer and data protection. In addition, effective, confidential and secure reporting channels are to be established and whistleblowers better protected.<\/p>\n\n\n\n

II. Implementation of the directive in your company<\/h2>\n\n\n\n

1. General requirements<\/h3>\n\n\n\n

Does your company employ more than 250 people? Then you have been obliged since December 17, 2021 \u2013 otherwise within two years at the latest \u2013 to set up channels through which violations of national and EU law can be reported. These channels must allow reports to be made in writing, orally or in person. It is important that all information submitted is documented in writing or recorded as an audio recording in a durable and retrievable form. The whistleblower must be given the opportunity to check the note or minutes and correct them if necessary. They must also confirm it with their signature. Moreover, it must be possible to make a report at any time. Companies are free to decide whether to set up an internal organizational unit or to entrust an external reporting office.<\/p>\n\n\n\n

In addition, it must be ensured that unauthorized employees are denied access. The confidentiality of the whistleblower\u2019s identity must be guaranteed at all times. Furthermore, receipt of the report must be acknowledged within seven days at the latest. Within three months, the whistleblower must also receive feedback on how their report is being followed up.<\/p>\n\n\n\n

2. Implementation options<\/h3>\n\n\n\n

In practice, there are two options:<\/p>\n\n\n\n

Firstly, setting up a toll-free external telephone number (problem: round-the-clock availability and overcoming language barriers may incur high costs); otherwise, setting up an IT-secured whistleblower system.<\/p>\n\n\n\n

III. Is your company affected by the directive?<\/h2>\n\n\n\n

It is still unclear whether the German legislature will make use of the option to postpone this obligation by two years for legal entities with between 50 and 249 employees. Even then, however, prompt implementation is advisable, as these companies will also be obliged to introduce a reporting channel within two years at the latest!<\/p>\n\n\n\n

B. Introduction of ISO 37301<\/h2>\n\n\n\n

I. Changes compared to ISO 19600<\/h2>\n\n\n\n

With regard to the compliance systems to be introduced, ISO 37301 must be taken into account. In terms of content, ISO 37301 differs only slightly from the previous ISO 19600.<\/p>\n\n\n\n

However, unlike ISO 19600, ISO 37301 is a Level A standard. ISO 19600 has a Level B status and is not binding; therefore, it does not serve as a benchmark for certification.<\/p>\n\n\n\n

Instead, ISO 37301 contains \u201cshould\u201d and \u201cshall\u201d provisions. This is intended to give you the opportunity to have the structure, implementation and effectiveness of your compliance management system reviewed from your own perspective and to demonstrate this through certification.<\/p>\n\n\n\n

Certification allows you to prove that you took measures in advance to prevent violations. This becomes particularly relevant under the VerSanG described above.<\/p>\n\n\n\n

II. Practical significance for your company<\/h2>\n\n\n\n

If you have aligned your compliance system with ISO 19600, you need not fear any significant changes.<\/p>\n\n\n\n

ISO 37301 is very similar to ISO 19600 in its approach. However, the compliance system should be reviewed against ISO 37301. If you do not yet have a compliance system in place, we recommend using ISO 37301 as a guide. Do you need support? We at Eigenstetter Helmreich und Partner will be happy to advise and help you.<\/p>\n\n\n\n

Although the ISO 37301 standards are not legally binding, non-compliance creates a risk that your compliance system will not be certified and that, in the event of a corporate offense, you may be accused of not having done enough in advance to prevent corporate criminal offenses. In view of the high sanctions, it is advisable to align your system with ISO 37301.<\/p>\n\n\n\n

D. How we can help you<\/h2>\n\n\n\n

Our team at clience.legal is your point of contact for all legal issues in your company. In particular, we support you in implementing the changes described in your company, as well as with all questions relating to compliance.<\/p>","protected":false},"excerpt":{"rendered":"

As a business owner and managing director, you have an interest in sustainable success. Compliance rules such as the Whistleblower Directive and ISO 37301 help you.<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[9],"tags":[],"class_list":["post-662","post","type-post","status-publish","format-standard","hentry","category-compliance"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t