Factsheets

COMPARATIVE COUNTRY FACT SHEETS AND IMPLEMENTATION SUMMARIES 

The following country fact sheets summarize national implementation, operational challenges, governance gaps, trust issues, retaliation concerns, and reform priorities identified through the VoiceGuard Needs Analysis and Skills Assessment. The Skills Assessment covered Bulgaria, Czech Republic, Spain, Greece, Luxembourg, and Romania, with 150 responses across the six countries.  

National Implementation Overview 

Bulgaria transposed Directive (EU) 2019/1937 through the Protection of Persons Reporting or Publicly Disclosing Information on Breaches Act. The Bulgarian framework applies to organizations required to establish internal reporting channels and extends protection beyond breaches of EU law to include breaches of Bulgarian legislation, criminal offences of a general nature, and labour law violations. The national external reporting channel and oversight authority is the Personal Data Protection Commission.  

Anonymous reports are not necessarily subject to mandatory investigation, but anonymous whistleblowers whose identity is later revealed remain protected against retaliation. This creates a practical need for organizations to clarify how anonymous disclosures are received, documented, preserved, and assessed. 

Operational Challenges 

VoiceGuard findings indicate that Bulgarian organizations show a strong demand for practical training on receiving and handling reports. The Skills Assessment identified practical training as the dominant support need in Bulgaria, with much lower demand for infrastructure support or templates compared to other countries.  

Key operational challenges include: 

• limited practical experience in handling reports;  

• need for clearer intake and triage procedures;  

• uncertainty regarding anonymous reports;  

• need for structured investigation procedures;  

• insufficient awareness among employees;  

• limited use of proactive support mechanisms.  

Governance Gaps 

The main governance gap is the difference between formal legal implementation and organizational capacity to operate systems effectively. Organizations may have reporting channels in place, but they may lack: 

• trained responsible persons;  

• independent case-handling procedures;  

• clear escalation rules;  

• retaliation monitoring;  

• systematic communication with reporting persons.  

Organizational Trust Issues 

VoiceGuard Needs Analysis findings show that respondents from Bulgaria often relied on external or public disclosure because of lack of trust in internal systems. This indicates that internal reporting channels may not yet be perceived as safe or credible by potential whistleblowers.  

Trust-related concerns include: 

• fear that confidentiality will not be preserved;  

• concern that management may influence investigations;  

• low confidence in internal follow-up;  

• fear of informal workplace consequences.  

Retaliation Concerns 

Retaliation concerns are strongly linked to distrust of internal reporting channels. Potential risks include: 

• dismissal or contract non-renewal;  

• exclusion from professional opportunities;  

• workplace isolation;  

• reputational harm;  

• pressure from superiors.  

Reform Priorities 

Priority reforms for Bulgaria should focus on: 

• practical training on report intake, triage, and investigation;  

• clear organizational procedures for anonymous reports;  

• strengthening functional independence of responsible persons;  

• visible anti-retaliation protocols;  

• regular awareness-raising for employees;  

• development of accessible internal communication materials;  

• stronger guidance from competent authorities.  

National Implementation Overview 

The Czech Republic adopted its Whistleblower Protection Act on 21 April 2023, which entered into force on 1 August 2023. Employers with 50 or more employees must establish internal whistleblowing systems. The Czech law extends protection to certain misdemeanours punishable by significant fines, but it does not generally protect anonymous reporting unless the identity of the anonymous whistleblower is later revealed.  

The Czech framework therefore contains both broader substantive scope in some areas and limitations regarding anonymous reporting. 

Operational Challenges 

The VoiceGuard Skills Assessment describes the Czech Republic as a comparatively balanced environment, with moderate demand across several support categories rather than one dominant need.  

Operational challenges include: 

• need for practical training for responsible persons;  

• uncertainty in legal qualification of reports;  

• low awareness among employees;  

• lack of systematic organizational communication;  

• limited experience with internal reporting systems;  

• need for clearer investigation and record-keeping procedures.  

Governance Gaps 

Key governance gaps include: 

• limited public awareness of whistleblower protection law;  

• cultural scepticism toward whistleblowing;  

• insufficient visibility of reporting channels;  

• risk of internal systems being perceived as dependent on management;  

• lack of strong proactive protection mechanisms.  

The Needs Analysis notes that public awareness and trust remain low in the Czech Republic and that scepticism toward whistleblowing mechanisms is widespread.  

Organizational Trust Issues 

Trust is a significant issue in the Czech context. The Needs Analysis found that most Czech whistleblower respondents relied on external or public disclosure because they did not trust internal whistleblowing systems.  

Trust barriers include: 

• fear of management influence;  

• uncertainty about confidentiality;  

• concern that reporting may result in professional isolation;  

• limited belief that internal systems will produce meaningful corrective action.  

Retaliation Concerns 

The VoiceGuard Needs Analysis identified serious retaliation patterns in Czech cases, including professional isolation and the experience of colleagues distancing themselves from whistleblowers out of fear of “contagion.” It also highlighted the psychological consequences of workplace bullying and institutional betrayal.  

Retaliation concerns include: 

• dismissal;  

• workplace mobbing;  

• professional isolation;  

• reputational harm;  

• financial and legal asymmetry between whistleblowers and organizations.  

Reform Priorities 

Priority reforms for the Czech Republic should include: 

• stronger awareness campaigns on the national law;  

• practical case-handling training;  

• improved protection against subtle retaliation;  

• better access to legal and psychosocial support;  

• clarification of anonymous reporting procedures;  

• organizational trust-building measures;  

• structured internal reporting procedures and monitoring. 

National Implementation Overview 

Greece transposed Directive (EU) 2019/1937 through Law 4990/2022, which entered into force on 11 November 2022. The law requires public sector entities and private companies with 50 or more employees to appoint a Reporting Receiving and Monitoring Officer. It also requires reporting channels in high-risk sectors regardless of employee headcount. The National Transparency Authority serves as the external reporting channel.  

Greek law allows anonymous reporting, although organizations are required to investigate anonymous reports only when sufficient evidence is provided. If an anonymous whistleblower is later identified, protection against retaliation applies. 

Operational Challenges 

The VoiceGuard Skills Assessment identifies Greece as the country with the highest overall intensity of demand for support. Respondents expressed strong demand across almost all categories, including practical training, expert hubs, investigation procedures, legal interpretation, templates, and technical support.  

Operational challenges include: 

• need for comprehensive capacity-building;  

• uncertainty regarding legal interpretation;  

• need for expert consultation;  

• insufficient investigation procedures;  

• need for templates and internal policy models;  

• need for support in setting up internal reporting channels.  

Governance Gaps 

Governance gaps include: 

• limited operational maturity of internal reporting systems;  

• need for clearer procedures for responsible officers;  

• risk of hierarchical pressure;  

• insufficient independence in sensitive cases;  

• lack of comprehensive support infrastructure.  

Organizational Trust Issues 

The Needs Analysis indicates that Greek respondents used internal channels, although one did so informally because no formal reporting structure was available. This suggests that internal reporting may exist unevenly and that formal structures are not always sufficiently accessible or institutionalized.  

Trust concerns include: 

• hierarchical organizational culture;  

• reluctance to challenge authority;  

• uncertainty about confidentiality;  

• fear that internal reporting may not lead to effective action.  

Retaliation Concerns 

Retaliation risks include: 

• workplace marginalization;  

• negative treatment by superiors;  

• informal pressure not to report;  

• lack of early protective measures;  

• insufficient psychosocial support.  

Reform Priorities 

Priority reforms for Greece should include: 

• comprehensive training for responsible officers;  

• development of investigation procedures and templates;  

• stronger expert consultation mechanisms;  

• clearer guidance on legal interpretation;  

• stronger retaliation prevention and monitoring;  

• development of support infrastructure, including legal and psychosocial referral mechanisms;  

• stronger communication to employees about reporting rights and channels.  

National Implementation Overview 

Luxembourg transposed the Directive through the Law of 16 May 2023, which entered into force on 21 May 2023. The law expands the material scope to cover violations of all national laws, not only EU-law breaches. Private entities with 50 or more employees and all public sector bodies must establish secure internal reporting channels. The Whistleblowing Office oversees compliance and provides guidance.  

Anonymous reporting is not mandatory for employers to facilitate, but anonymous whistleblowers later identified are protected against retaliation. 

Operational Challenges 

Luxembourg appears comparatively more advanced in the VoiceGuard Needs Analysis. The report describes a marked geographical contrast between the mostly effective system in Luxembourg and widespread failures elsewhere, suggesting that more effective protection is achievable where institutions and organizational cultures support safe reporting.  

However, the Skills Assessment still identifies support needs in Luxembourg, especially strong demand for an expert contact hub.  

Operational challenges include: 

• managing complex or cross-border cases;  

• ensuring continued professional support;  

• maintaining multilingual accessibility;  

• supporting whistleblowers with expert legal or psychosocial resources;  

• ensuring consistent organizational practice across sectors.  

Governance Gaps 

Governance gaps appear less acute than in other countries but still include: 

• need for structured expert referral mechanisms;  

• need for advanced case consultation;  

• possible differences in maturity between organizations;  

• need for continued evaluation and quality assurance.  

Organizational Trust Issues 

Luxembourg respondents in the Needs Analysis all used internal reporting channels, and some successful outcomes were reported. This suggests comparatively stronger confidence in internal mechanisms. 

Remaining trust issues may include: 

• ensuring continued confidentiality;  

• maintaining consistency across organizations;  

• supporting reporting persons during longer procedures;  

• ensuring access to independent expert support when needed.  

Retaliation Concerns 

Retaliation concerns are present but appear less systemic than in several other participating countries. Priority should remain on: 

• early risk assessment;  

• confidentiality;  

• psychosocial support;  

• monitoring after case closure;  

• preventing subtle retaliation.  

Reform Priorities 

Priority reforms for Luxembourg should include: 

• creation or strengthening of expert contact hubs;  

• advanced guidance for complex cases;  

• structured psychosocial support pathways;  

• multilingual awareness resources;  

• continued evaluation of internal reporting systems;  

• sharing good practices with other participating countries. 

National Implementation Overview 

Romania transposed the Directive through Law No. 361/2022 on the protection of whistleblowers in the public interest, which entered into force on 22 December 2022. Public entities and private companies with 50 or more employees must establish internal reporting channels. The National Integrity Agency serves as the main competent authority for external reports and compliance oversight.  

Romanian law covers the Directive’s areas, but the Needs Analysis notes ambiguity in the drafting of the material scope, resulting in differing interpretations among public administration and judiciary professionals.  

Operational Challenges 

Romania reported the highest level of difficulty in assessing whether a report falls within the legal scope of protection, with one third of respondents finding this assessment difficult. The Skills Assessment also identifies continued need for legal interpretation and expert support.  

Operational challenges include: 

• legal qualification uncertainty;  

• inconsistent interpretation of national law;  

• need for expert legal consultation;  

• need for templates and procedural guidance;  

• uneven capacity to handle reports;  

• insufficient confidence in internal systems.  

Governance Gaps 

Governance gaps include: 

• unclear legal interpretation in practice;  

• weak procedural consistency;  

• limited institutional trust;  

• insufficient support systems;  

• need for stronger record-keeping and investigation procedures.  

Organizational Trust Issues 

The Needs Analysis identifies Romania as one of the contexts where trust may collapse after reporting, with some respondents moving from high initial trust to feeling completely unprotected.  

Trust issues include: 

• fear that internal systems will not protect whistleblowers;  

• uncertainty about confidentiality;  

• concern that reports will not produce meaningful action;  

• distrust in institutional response.  

Retaliation Concerns 

Retaliation concerns include: 

• dismissal;  

• professional isolation;  

• pressure by management;  

• legal and financial asymmetry;  

• lack of timely preventive protection.  

The Needs Analysis identified severe retaliation patterns outside Luxembourg, including dismissal and professional isolation in Romania and other countries.  

Reform Priorities 

Priority reforms for Romania should include: 

• clarification of legal scope and interpretation;  

• practical legal qualification training;  

• expert consultation mechanisms;  

• templates and model procedures;  

• stronger confidentiality safeguards;  

• retaliation prevention and early protection measures;  

• institutional trust-building and communication campaigns.  

National Implementation Overview 

Spain transposed Directive (EU) 2019/1937 through Law 2/2023 of 20 February, which entered into force on 13 March 2023. The law requires public sector entities and private companies with 50 or more employees to establish an Internal Information System. Spanish law explicitly requires acceptance of anonymous reports. The Independent Authority for the Protection of Informants serves as the main national authority for external reporting and oversight.  

Spain introduced a strong sanctioning regime, including significant fines for retaliation or breach of confidentiality. 

Operational Challenges 

The Skills Assessment indicates that Spanish respondents showed strong demand for ad hoc expert consultations regarding specific protected reports, exceeding demand for general practical training. This suggests that organizations may require support with complex case-specific legal and operational questions.  

Operational challenges include: 

• complex legal assessment;  

• need for expert consultation;  

• uneven implementation maturity;  

• practical difficulties in handling anonymous reports;  

• need for consistent investigation procedures;  

• need for better support during retaliation cases.  

Governance Gaps 

Governance gaps include: 

• uneven organizational implementation;  

• risk of management-led defensive responses;  

• inconsistent operational maturity across organizations;  

• need for stronger case-handling independence;  

• need for better integration of support systems.  

Organizational Trust Issues 

The Needs Analysis found that Spanish whistleblowers relied on external or public disclosure because they did not trust internal whistleblowing systems. It also noted that one Spanish expert described organizations’ initial response as discrediting the person rather than investigating the report.  

Trust issues include: 

• fear of institutional hostility;  

• concern that organizations prioritize reputation protection;  

• low confidence in internal investigations;  

• fear of social and professional ostracism.  

Retaliation Concerns 

Spain shows serious retaliation concerns in the Needs Analysis. Reported patterns include: 

• harassment;  

• covert recording;  

• reputational attacks;  

• psychological harm;  

• social ostracism;  

• “fear of contagion” among colleagues;  

• slow justice compared with rapid retaliation.  

Reform Priorities 

Priority reforms for Spain should include: 

• case-specific legal and expert consultation;  

• stronger preventive retaliation measures;  

• practical guidance on anonymous reporting;  

• independent investigation safeguards;  

• psychosocial support pathways;  

• rapid response mechanisms for retaliation;  

• organizational training on ethical response to disclosures.  

Cross-Country Summary 

Across all six countries, VoiceGuard research shows that the main implementation gap is not only legal transposition, but the operational ability of organizations to build trusted, independent, and protective systems. The Needs Analysis describes a recurring gap between the promise of legal protection and the lived experience of whistleblowers, including institutional betrayal, retaliation, and psychological harm.  

Common priorities across countries include: 

• practical training on receiving and handling reports;  

• improved confidentiality and anonymous communication;  

• stronger functional independence;  

• active retaliation monitoring;  

• improved legal qualification capacity;  

• psychosocial and legal support;  

• greater visibility and accessibility of reporting channels;  

• stronger organizational trust and speak-up culture.