Purpose
Whistleblowers have a choice between internal and external reporting — they do not have to report internally first. By contrast, disclosure to the public (press, social media) is protected only under narrow conditions. This Skill determines the correct reporting channel, explains the federal external reporting office, and checks whether a planned disclosure retains the protection of the HinSchG.
Inputs
- Subject matter of the violation and material scope (§ 2 HinSchG)
- Previous reporting channel (no report yet / reported internally / deadline expired)
- Risk of reprisals in the case of internal reporting
- Urgency (danger to the public interest, destruction of evidence)
- Competent external reporting office (federal / Länder / special statutory BaFin, BKartA)
Sub-agent architecture
Three conceptual roles work together. A channel agent evaluates the right of choice under § 7 HinSchG and determines the competent reporting office. A procedure agent describes the procedure of the external reporting office under § 28 HinSchG (acknowledgment of receipt, follow-up measures) and the federal external reporting office under § 19 HinSchG. A disclosure agent reviews the strict requirements for protection in the case of disclosure under § 32 HinSchG. The channel agent comes first; the disclosure agent warns against premature publication if the requirements of § 32 are not met.
Process
1. Right of choice between internal / external reporting § 7 HinSchG
- The whistleblower chooses freelywhether to contact an internal reporting office (§ 12) or an external reporting office (§§ 19–24).
- Internal reporting should be preferred if effective internal remedy is possible and no reprisals are imminent — however, there is no obligation to report internally first.
- Obstructing a report is prohibited (§ 7(2) HinSchG).
2. Federal external reporting office § 19 HinSchG
- At the Federal Office of Justice , a federal external reporting office is established.
- In addition, special external reporting offices exist: BaFin (financial services supervision) and Federal Cartel Office (§§ 21, 22 HinSchG) as well as external reporting offices of the Länder.
3. Procedure of the external reporting office § 28 HinSchG
- Acknowledgment of receipt without delay, at the latest after 7 days.
- Review of the material scope and of the substantiated merits.
- Follow-up measures and feedback to the whistleblower (Section 29 HinSchG) within a reasonable period, as a rule within 3 months (extendable to 6 months).
- Maintenance of confidentiality of identity (Section 8 HinSchG).
4. Protection in the case of disclosure Section 32 HinSchG
A disclosure (making information accessible to the public) is only protected if the whistleblower
- previously reported externally and no suitable follow-up measures were taken within the period or no feedback was provided (Section 32(1) No. 1), or
- sufficient reason to assume that the violation represents an imminent or obvious danger to the public interest, that reprisals are threatened or that evidence could be suppressed (Section 32(1) No. 2).
5. Requirements for protection Section 33 HinSchG
- The general protection requirements also apply to external reporting and disclosure: permissible reporting channel, sufficient reason, substantive scope of application.
Risks / typical errors
- Disclosure without fulfilling the requirements of Section 32 HinSchG — loss of protection, risk of liability and criminal prosecution.
- Period of the external reporting office awaited? Premature publication before expiry of the response period jeopardises protection.
- Confidentiality of one's own identity surrendered in the course of disclosure — afterwards no anonymity remains.
- Adverse reaction by the employer to the external report — presumed reprisal under Section 36 HinSchG.
- Wrong external reporting office addressed — jurisdiction of BaFin / BKartA / Länder not checked.
Output format
EXTERNE MELDUNG / OFFENLEGUNG — PRÜFPROTOKOLL — <Mandant> — <Datum>
I. Anwendungsbereich § 2 [erfasst / nicht erfasst]
II. Wahlrecht § 7 [interne / externe Meldung] Empfehlung: <…>
III. Zuständige Meldestelle [BfJ § 19 / BaFin / BKartA / Land]
IV. Verfahren § 28 Eingangsbestätigung ≤ 7 Tage; Rückmeldung: <…>
V. Offenlegung § 32 Voraussetzung: [Nr. 1 Fristablauf / Nr. 2 Gefahr]
geschützt: [✓ / 🟡 / ✗]
VI. Schutzvoraussetzungen § 33 hinreichender Grund: [✓/✗]
VII. Repressalienrisiko § 36 Schutzmaßnahmen: <…>
Hinweis: Offenlegung erst nach Prüfung des § 32 — sonst Schutzverlust.
Sources
Statutes
- Section 7 HinSchG (right to choose internal/external reporting)
- Section 19 HinSchG (external reporting office of the Federation)
- Section 28 HinSchG (procedure of the external reporting office)
- Section 32 HinSchG (protection in the case of disclosure)
- Sections 21, 22, 29, 33 HinSchG (BaFin/BKartA, feedback, requirements)
- Directive (EU) 2019/1937 (Art. 10, 15 external reporting/disclosure)
Authorities
- BfJ – External Reporting Office of the Federation: https://www.bundesjustizamt.de/
Secondary literature
- Reufels, Hinweisgeberschutz, 1st ed. 2024
- Schmidt-Husson, HinSchG-Praxiskommentar, 2nd ed. 2024
- BeckOK HinSchG (Online)