Internal reporting channel
What the law requires
In Romania, whistleblower protection is governed by Law no. 361/2022. It requires certain employers to establish an internal reporting channel and a procedure for handling what comes through it.
The part that most often goes wrong is not the channel itself but what surrounds it: the identity of the person reporting has to be protected, the handling has to be documented, and the processing of the personal data involved has to satisfy Regulation (EU) 2016/679 at the same time. A shared mailbox that three people can read does not meet any of it.
What you get
Internal procedure
Who receives reports, how they are recorded, who examines them and how the outcome is communicated. Written so that it can be followed by the people who will actually have to follow it.
The reporting channel
We set up the channel using means you already have, and define how a report reaches the designated person without passing through anyone else.
Notice to staff
Employees have to know the channel exists, how to use it and what protection applies. A channel nobody knows about is not a channel.
Register of reports
The record required by law, kept so that it protects the identity of the person reporting while still evidencing that the report was handled.
What this service is
We build the procedure and the documentation. We do not sell a reporting platform and we do not operate the channel on your behalf. Where a dedicated software platform is wanted, you choose the supplier and we set out what it has to satisfy.
Where this fits
Reports frequently concern how staff are treated or monitored, which is why this sits next to employee data protection. For the company’s wider obligations, see GDPR compliance.
Do you already have a reporting channel?
Tell us how many employees you have and how reports reach you today.
Request a quote