Whistleblowing
"Truth triumphs alone, lies always need accomplices" (Epictetus).
Whistleblowing is a process through which employees (and others) of an organization report illicit or unethical behavior occurring in the workplace. This tool is essential for improving transparency and integrity, as it allows unfair or illegal practices that could harm the organization and its stakeholders to be brought to light. Various regulations have been introduced into the Italian legal system (and also within the European context) to ensure the protection of whistleblowers. In the EU, Directive 2019/1937 requires companies with more than 50 employees to establish secure and confidential reporting channels that protect whistleblowers from any form of retaliation, such as dismissal or discrimination. This regulation was implemented in Italy with Legislative Decree No. 24 of 10 March 2023.
Implementing an effective whistleblowing system not only fulfills legal obligations but also offers several strategic benefits for organizations. It fosters a corporate culture based on ethical values, facilitating the detection and prevention of fraud and other illicit activities. This not only reduces the risk of financial and reputational damage, but also strengthens regulatory compliance, helping the organization avoid penalties. Whistleblowing, therefore, is not only an obligation, but an opportunity for organizations to demonstrate their ethical and responsible behavior, fostering a work environment where integrity and compliance are valued and protect the company's sustainable future.
Guide to the internal channel for managing reports
Our service is dedicated to guiding and supporting organizations in choosing the most appropriate channel for receiving and managing whistleblowing reports. While we do not provide a portal or software for directly collecting reports, we collaborate with technical experts who have developed specific, certified channels in Italy that guarantee the highest technical and organizational security measures.
*Fill out the questionnaire and you will be contacted by one of our consultants (by phone or email, as you prefer)
Data Protection Impact Assessment (DPIA)
Based on the organization and the reporting channel chosen, we assist Data Controllers in preparing appropriate DPIAs. We analyze and proactively identify the risks associated with the processing of sensitive data in the context of whistleblowing. We support the Organization in implementing effective MTOS to mitigate potential risks and protect sensitive data.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Treatment register: implementation and management
We assist your organization in creating and maintaining accurate and detailed records, ensuring that all personal data processing activities are documented in compliance with the regulation (Article 30 of the GDPR). With a focus on accuracy and continuous updating, we help reduce the risk of non-compliance and improve transparency in personal data management.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Preparation of the Internal Organizational Act
We can provide our clients with the Internal Organizational Document (AOI), or Internal Organizational Document (Atto Organizzativo Interno) required by Legislative Decree 24/2023. The AOI establishes a clear and defined structure and procedure for managing whistleblowing within an organization. It is a key element in ensuring that reports are handled effectively, fairly, and legally, while promoting a responsible and transparent work environment.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Auditing the status quo of the reports received
The preparation of detailed documentation provides the necessary basis for internal audits and controls by the competent authorities, highlighting the organization's commitment to legality and ethics. Legislative Decree 24/2023 requires the establishment of confidential reporting channels, verifying their adequacy, and guaranteeing whistleblower anonymity. Auditing can highlight potential risks as well as your organization's regulatory compliance.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
External reporting management service
We offer a specialized reporting service, operating as an external entity. We process each report within seven days of receipt and then manage it in collaboration with the organization's designated contact, ensuring compliance with the timelines and procedures established by law.
Our service is provided in Italian, German, English and Spanish.
*Fill out the questionnaire and you will receive a no-obligation quote for your organization.
Complete Management of the Whistleblowing Organizational Model
Our service includes the study, design, and implementation of a customized MOW, which clearly establishes the roles, responsibilities, and procedures required for effective management of personal data in the context of whistleblowing. We provide ongoing monitoring and updates to promptly align your model with regulatory or organizational changes.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Internal regulatory tools: the value of policies
We can provide our clients with tailored internal regulatory tools (e.g., codes of conduct and company policies) designed to protect personal data processing. Our goal is to provide the tools necessary to ensure regulatory compliance, promote a corporate culture focused on personal data protection, and train all personnel involved in data processing.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Evaluation of management staff
Preliminary assessment of who will handle whistleblowing reports is essential to ensure (including to the ANAC) that the organization operates ethically, legally, and transparently, while safeguarding the trust, security, and confidentiality of whistleblowers' identities. Not just anyone can fill this role within your organization: preliminary assessment and specific whistleblowing training are required.
*Fill out the questionnaire and you will receive a no-obligation quote tailored to your organization.
Do you need support?
Further information on the processing of personal data for these purposes is contained in the privacy policy ( pursuant to art. 13 of Regulation (EU) 2016/679).
