At European and national level, discussions have been going on for years on how best to protect the so-called whistleblowers from being victims of retaliation measures by those whose actions they have uncovered. Whistleblowers are persons who, as "insiders" (such as employees) disclose dubious practices of the institutions they serve. Here we think first and foremost of persons such as Edward Snowden, whose disclosures were directed against state measures. But the Panama Papers, the Luxembourg Papers and many more are also findings that have been disclosed by whistleblowers.
In Europe and Germany whistleblowers are sometimes seen as "traitors”. At any rate, they must expect dismissal and criminal proceedings, when they involve the public and/or authorities, without having previously tried to fight against the undesirable developments internally in the company. In the discussions about the introduction of European whistleblower protection, the sticking points that individual member states strongly disagreed about were usually
On March 12, 2019, an agreement was reached between representatives of the EU states and the European Parliament. The compromise reached essentially provides for the following regulations:
The draft directive itself therefore stipulates that companies should now establish internal whistleblower systems as soon as possible, at the latest within the two-year implementation deadline. It is already foreseeable that the draft directive and its implementation will lead to considerable legal discussions and questions.
But there are also other issues arising as a result. The General Data Protection Regulation has established a comprehensive right to information of employees regarding the data stored about them by the company (Art. 15 GDPR). The State Labor Court of Baden-Wuerttemberg (Ruling of 12.28.2018 - 17 Sat 11/18) has recently ruled that a company should provide a staff member with comprehensive information on the data stored about her, which was collected on the basis of an internal reporting investigation and ultimately sanctions. In other words: In the specific case, according to the LAG Baden-Württemberg, a culprit, who was held accountable on the basis of an internal whistleblower, was able to enforce the disclosure of the name and circumstances of the internal whistleblower in court. The reason for this was allegedly the unspecific defense against the right to information on part of the employer.
It will be exciting to see how the General Data Protection Regulation can be aligned with the Whistleblowing Directive and national implementation legislation. This is all the more so since the Business Secrets Act passed on March 21, 2019, now requires employers to take appropriate measures to protect confidentiality (see our Update Compliance no. 5/2019); without such protective measures, there is no protected secret whose leaking / disclosure could lead to sanctions.