{"id":3951,"date":"2024-06-25T08:52:08","date_gmt":"2024-06-25T08:52:08","guid":{"rendered":"https:\/\/sawaryn.com\/?p=3951"},"modified":"2026-10-23T09:27:48","modified_gmt":"2026-10-23T09:27:48","slug":"poland-whistleblower-act-employer-duties","status":"publish","type":"post","link":"https:\/\/sawaryn.com\/en\/publikacje\/poland-whistleblower-act-employer-duties\/","title":{"rendered":"Employer Duties Under Poland\u2019s Whistleblower Protection Act"},"content":{"rendered":"<p>Below is a <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/poland-whistleblower-act-employer-duties\/\">full list of duties<\/a><\/strong>: what you must implement, how to organise a reporting system and what actions to avoid towards people who report irregularities.<\/p>\n<hr \/>\n<h2>Who is covered and when the rules took effect<\/h2>\n<p>The Polish Act on the Protection of Persons Reporting Violations of Law entered into force on <strong>25 September 2024<\/strong>. The deadline for implementing internal procedures has already passed.<\/p>\n<p>A whistleblower is a <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/who-can-be-a-whistleblower-role-reporting\/\">person reporting violations within an organisation<\/a><\/strong>, such as an employee, contractor or external person connected with the company. You must provide that person with safe conditions to <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/whistleblowers-what-legal-violations-can-you-report\/\">report irregularities<\/a><\/strong>.<\/p>\n<p>If your company has not yet implemented procedures, act immediately. The rules are in force, and having no system does not release you from liability.<\/p>\n<hr \/>\n<h2>Internal reporting procedure: what you need to prepare<\/h2>\n<p>A whistleblower protection system is not a single document. It is a set of connected elements: a procedure, a technical tool, reporting channels and a body that handles cases.<\/p>\n<h3>What the reporting system includes<\/h3>\n<ul>\n<li><strong><a href=\"https:\/\/sawaryn.com\/publikacje\/sygnalista-w-firmie-jak-wdrozyc-dyrektywe-o-sygnalistach\/\">Internal reporting procedure<\/a><\/strong>: written rules for whistleblowing within the company, consistent with the requirements of the Act.<\/li>\n<li><strong>IT system<\/strong>: a platform that allows reports to be submitted online, including anonymously.<\/li>\n<li><strong>Oral channel<\/strong>: an additional way to report a matter without making a written submission.<\/li>\n<li><strong>Body or person handling reports<\/strong>: a committee, designated employee or external entity.<\/li>\n<\/ul>\n<h3>Reporting channels: what you must make available<\/h3>\n<p>The Act requires you to provide at least two types of channel:<\/p>\n<ol>\n<li><strong>Online report<\/strong>: through a dedicated platform. The system should:\n<ul>\n<li>allow anonymous reports,<\/li>\n<li>automatically register every report,<\/li>\n<li>confirm receipt of a report,<\/li>\n<li>allow anonymous exchange of messages with the whistleblower.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Oral report<\/strong>: choose between two options:\n<ul>\n<li>designating a contact person (risk: the whistleblower may decide not to report for fear of losing anonymity),<\/li>\n<li><strong>an automated telephone mailbox<\/strong>, a better option because the whistleblower can record a message without revealing their identity.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h3>Who should handle reports<\/h3>\n<p>You have three options:<\/p>\n<ul>\n<li><strong>Internal committee<\/strong>: made up of company employees.<\/li>\n<li><strong>External entity<\/strong>: for example, a law firm.<\/li>\n<li><strong>Mixed body<\/strong>: an employer representative together with an external lawyer.<\/li>\n<\/ul>\n<p>Assigning report handling to a law firm has specific benefits:<\/p>\n<ul>\n<li>Cases are handled by people experienced in employment law and dispute resolution.<\/li>\n<li>It is easier to take appropriate action, for example in workplace bullying cases.<\/li>\n<li>The law firm keeps the whistleblower\u2019s data itself and does not pass it to the employer, which meets the statutory anonymity requirement.<\/li>\n<\/ul>\n<blockquote><p><strong>Example:<\/strong> A company with more than 250 employees implemented an online platform for anonymous reports. Each report is automatically registered, and the whistleblower receives confirmation of receipt. An external law firm handles the reports and communicates while preserving anonymity.<\/p><\/blockquote>\n<hr \/>\n<h2>Ban on retaliation: the most important whistleblower protection rule<\/h2>\n<p>The Act (Articles 11 and 12) prohibits taking <strong>any negative action against a whistleblower<\/strong> because they made a report. This is not a recommendation. It is a legal obligation carrying criminal sanctions.<\/p>\n<h3>What counts as retaliation<\/h3>\n<p>Retaliation means <strong>any negative consequences experienced by a whistleblower after reporting, directly because of the report<\/strong>. The list is open-ended: it covers any action intended to cause a disadvantage to the whistleblower.<\/p>\n<p>Examples listed in the Act:<\/p>\n<ul>\n<li>dismissal,<\/li>\n<li>demotion,<\/li>\n<li>reduction in pay,<\/li>\n<li>workplace bullying or discrimination,<\/li>\n<li>being passed over for training,<\/li>\n<li>change of work position,<\/li>\n<li>being referred for additional medical examinations.<\/li>\n<\/ul>\n<h3>Consequences for people who retaliate<\/h3>\n<ul>\n<li><strong>A prison sentence of up to 2 years<\/strong> for retaliating against a whistleblower.<\/li>\n<li>The employer must not only refrain from retaliation but also <strong>actively protect the whistleblower<\/strong> from retaliatory actions by other people in the organisation.<\/li>\n<\/ul>\n<blockquote><p><strong>Example:<\/strong> Anna, a quality specialist, reported irregularities in product inspections. The company responded by disciplining the person responsible for the errors, Andrzej. The employer must also make sure that Andrzej does not take revenge on Anna. If he does, the employer must take further action against Andrzej and bring the situation to an end.<\/p><\/blockquote>\n<h3>What you need to put in place in practice<\/h3>\n<ul>\n<li>Make sure employees know about the ban on retaliation and the penalty that may apply.<\/li>\n<li>Provide at least one safe reporting channel.<\/li>\n<li>Build an organisational culture that supports reporting irregularities, not only on paper but in day-to-day operations.<\/li>\n<\/ul>\n<hr \/>\n<h2>Feedback to the whistleblower: deadline and content<\/h2>\n<p>The Act requires you to <strong>give the whistleblower feedback on the action taken<\/strong> in response to a report. You have <strong>a maximum of 3 months from the date of the report<\/strong>.<\/p>\n<p>The feedback should state:<\/p>\n<ul>\n<li>whether an investigation was opened,<\/li>\n<li>what action was taken,<\/li>\n<li>the outcome of that action.<\/li>\n<\/ul>\n<h3>The challenge: how to respond to an anonymous whistleblower<\/h3>\n<p>If the whistleblower did not provide contact details, you need a system that allows anonymous correspondence, for example through a unique report number. The whistleblower logs in with that number and checks the response. You reply without learning their identity.<\/p>\n<blockquote><p><strong>Example:<\/strong> Company Z ensures that each whistleblower receives a report on the case\u2019s progress within three months, including information about investigations opened and their outcomes. Communication takes place through a platform without revealing the whistleblower\u2019s details.<\/p><\/blockquote>\n<hr \/>\n<h2>Report register: what you need to document<\/h2>\n<p>The Act requires you to maintain a register of internal reports. Every report must be documented.<\/p>\n<h3>Required register entries<\/h3>\n<ol>\n<li>Report number.<\/li>\n<li>Subject of the violation.<\/li>\n<li>Personal data of the reporting person and the person concerned by the report, unless the report is anonymous.<\/li>\n<li>Contact address for the reporting person.<\/li>\n<li>Date the report was made.<\/li>\n<li>Information about follow-up action taken.<\/li>\n<li>Date the case was closed.<\/li>\n<\/ol>\n<p>Keep the register up to date. Each report must end with an entry about the action taken and the outcome. This is linked to the duty to provide feedback.<\/p>\n<hr \/>\n<h2>Training and system monitoring<\/h2>\n<p>Implementing the procedure is not the end. You must regularly check that the system works and that employees know about it.<\/p>\n<h3>What to do regularly<\/h3>\n<ul>\n<li><strong>Monitor system effectiveness<\/strong>: check whether reports are being received, channels work and deadlines are met.<\/li>\n<li><strong>Update internal procedures<\/strong>: adapt them to <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/whistleblower-act-changes-poland\/\">changes in the law<\/a><\/strong> and the organisation\u2019s needs.<\/li>\n<li><strong>Review the system<\/strong>: at least once a year. Take account of employee feedback, report records and changes in the law.<\/li>\n<li><strong>Train employees<\/strong>: make sure they know how to report irregularities, what rights they have and what consequences apply to retaliation.<\/li>\n<\/ul>\n<blockquote><p><strong>Example:<\/strong> Company Z reviews its whistleblower protection system every year. It considers employee feedback, reports on submissions and changes in the law. On that basis, it updates its procedures and tools.<\/p><\/blockquote>\n<hr \/>\n<h2>What to do if you have not implemented the rules yet<\/h2>\n<p>The rules have been in force since September 2024. Failure to implement them creates a risk of legal liability for both the company and its managers.<\/p>\n<h3>Order of action<\/h3>\n<ol>\n<li><strong>Check whether <a href=\"https:\/\/sawaryn.com\/en\/publikacje\/polish-whistleblower-protection-act-who-is-covered\/\">your company is covered by the Act<\/a><\/strong>: verify the number of people working for you and the nature of your business.<\/li>\n<li><strong>Prepare an internal reporting procedure<\/strong> that meets the requirements of the Act.<\/li>\n<li><strong>Implement an IT system<\/strong> that allows anonymous reports and correspondence.<\/li>\n<li><strong>Set up an oral channel<\/strong>, preferably an automated telephone mailbox.<\/li>\n<li><strong>Appoint a body to handle reports<\/strong>: internal, external or mixed.<\/li>\n<li><strong>Start maintaining a report register<\/strong> from the first day the system operates.<\/li>\n<li><strong>Train employees<\/strong> on the procedure, whistleblower rights and the ban on retaliation.<\/li>\n<li><strong>Schedule periodic system reviews<\/strong>, at least once a year.<\/li>\n<\/ol>\n<p>If you need legal support with implementation, contact a law firm specialising in whistleblower services.<\/p>\n<h2>Frequently asked questions<\/h2>\n<p><strong>What duties does an employer have towards whistleblowers under the Act?<\/strong><br \/>\nAn employer must prepare and implement an internal reporting procedure, launch reporting channels (online and oral), appoint a body to handle reports, maintain a report register, give the whistleblower feedback within 3 months and actively protect them from retaliation. Ongoing duties also include employee training, monitoring system effectiveness and reviewing procedures periodically, at least once a year.<\/p>\n<p><strong>What should an internal whistleblowing system compliant with the Act include?<\/strong><br \/>\nThe system must include four elements: a written reporting procedure; an IT platform that allows anonymous online reports with automatic registration and confirmation of receipt; an oral channel, such as an automated telephone mailbox; and an appointed body to handle reports, which may be an internal committee, an external entity such as a law firm, or a mixed body. The platform should also allow anonymous message exchanges with the whistleblower so you can correspond and provide feedback without learning the reporting person\u2019s identity.<\/p>\n<p><strong>Must a company allow anonymous whistleblower reports, and how can it arrange this in practice?<\/strong><br \/>\nYes. The IT system should allow anonymous reports, register them automatically, confirm receipt and support anonymous messaging between the whistleblower and the company. In practice, the whistleblower receives a unique report number, uses it to log into the platform and check the response. You reply without learning their identity. For the oral channel, an automated telephone mailbox is a better solution than appointing a contact person because it removes the risk that the whistleblower will decide not to report for fear of losing anonymity.<\/p>\n<p><strong>Which actions against a whistleblower count as retaliation, and what are the consequences?<\/strong><br \/>\nRetaliation means any negative consequences experienced by a whistleblower after reporting, directly because of the report. The list is open-ended and includes dismissal, demotion, reduced pay, workplace bullying, discrimination, being passed over for training, a change of work position or referral for additional medical examinations. Retaliation carries a prison sentence of up to 2 years. The employer must not only refrain from retaliation but also actively protect the whistleblower from such actions by others in the organisation.<\/p>\n<p><strong>When must feedback be given to the whistleblower, and what must the report register contain?<\/strong><br \/>\nYou have a maximum of 3 months from the report date to give feedback stating whether an investigation was opened, what action was taken and its outcome. The internal report register must contain seven entries: the report number; subject of the violation; personal data of the reporting person and the person concerned (unless the report is anonymous); the reporting person\u2019s contact address; the report date; information about follow-up action taken; and the case closure date.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn what employers in Poland must put in place for whistleblowers, how to organise reporting channels, what the register must contain and how to prevent retaliation.<\/p>\n","protected":false},"author":3,"featured_media":1915,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","sip_alt_url":"","sip_en_pl_url":"","sip_pair_uuid":"","sip_pair_state":""},"categories":[1580],"tags":[1448,1528,1532],"specialization":[1207],"practice_area":[],"class_list":["post-3951","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance","tag-compliance","tag-labor-law","tag-whistleblowers","specialization-compliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/comments?post=3951"}],"version-history":[{"count":1,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3951\/revisions"}],"predecessor-version":[{"id":4115,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3951\/revisions\/4115"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media\/1915"}],"wp:attachment":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media?parent=3951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/categories?post=3951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/tags?post=3951"},{"taxonomy":"specialization","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/specialization?post=3951"},{"taxonomy":"practice_area","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/practice_area?post=3951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}