Purpose
Once the reporting office has been established, the quality of processing determines the effectiveness of whistleblower protection. Missed deadlines, breaches of confidentiality and failure to take follow-up measures shift protection to the external reporting office, weaken the employer's evidentiary position in retaliation disputes and can trigger fines. This skill governs procedurally compliant processing from acknowledgement of receipt to feedback.
Inputs
- Report (channel, date, anonymous / non-anonymous, content)
- Material scope of application (Section 2 HinSchG) — does the violation fall within it?
- Persons involved (whistleblower, affected person, third parties)
- Existing investigation and escalation processes
- Previous reports / context
Sub-agent architecture
Three conceptual roles process the matter. An intake agent records the report, tracks deadlines (acknowledgement of receipt 7 days, feedback 3 months) and ensures confidentiality pursuant to Section 8 HinSchG. A review agent assesses the substantiatedness and the material scope of application and selects the follow-up measures pursuant to Section 18 HinSchG. An escalation agent reviews conflicts of interest, refers suspected criminal conduct to the competent authorities and documents pursuant to Section 11 HinSchG. The intake agent has priority regarding deadlines and confidentiality; the escalation agent can override the review agent in the event of bias on the part of the reporting office.
Process
1. Receipt and acknowledgement Section 17(1) HinSchG
- Acknowledgement of receipt to the whistleblower within 7 days of receipt.
- Review of whether the reported violation falls within the material scope of application (Section 2 HinSchG).
- Maintain contact with the whistleblower, request further information if necessary.
2. Tasks of the reporting office Section 13 HinSchG
- Operation of the reporting channels, receipt in the chosen form.
- Review of the substantiatedness of the report.
- Anonymous reports should also be processed.
3. Follow-up measures Section 18 HinSchG
- Internal investigation to be conducted at the employer.
- Contact affected persons and organizational units.
- Referral of the whistleblower to other competent authorities (e.g. authority).
- Discontinuation of proceedings for lack of substantiatedness or for other reasons.
- Referral of the matter to a competent internal body for further investigation.
4. Feedback Section 17(2) HinSchG
- Feedback to the whistleblower within 3 months of the acknowledgement of receipt.
- Content: planned and taken follow-up measures and their reasons — insofar as internal investigations or third-party rights do not conflict.
5. Confidentiality § 8 HinSchG
- The identity of the whistleblower, the person concerned and third parties is confidential (confidentiality requirement).
- Disclosure only in the narrow exceptions of § 9 HinSchG (consent, legal obligation, criminal prosecution).
6. Conflict of interest and independence
- The person entrusted with processing must be independent and free of conflict of interest .
- If the report concerns the responsible person themselves, the matter must be handed over.
7. Documentation § 11 HinSchG
- Document the matter; retention for 3 years after conclusion of the proceedings, then deletion.
Risks / typical errors
- Deadline for acknowledgement of receipt (7 days) or feedback (3 months) missed — violation of § 17 HinSchG, whistleblower may report externally.
- Confidentiality breached (disclosure of identity to superiors) — violation of § 8 HinSchG, subject to a fine.
- Conflict of interest of the processing person not recognized — the matter should have been handed over.
- Detrimental measure against the whistleblower during processing — suspected retaliation under § 36 HinSchG.
- Anonymous report discarded without review — violation of the duty to process.
Output format
INTERNE MELDUNG — BEARBEITUNGSPROTOKOLL — <Meldestelle> — <Datum>
I. Eingang Kanal: <…> Datum: <…> anonym: [ja/nein]
II. Eingangsbestätigung § 17 versendet am: <Datum> (≤ 7 Tage: [✓/✗])
III. Anwendungsbereich § 2 [erfasst / nicht erfasst]
IV. Stichhaltigkeit § 13 [stichhaltig / offen / unbegründet]
V. Folgemaßnahmen § 18 [interne Untersuchung / Verweis / Einstellung]
VI. Rückmeldung § 17 Abs. 2 Frist: <Datum, ≤ 3 Monate>
VII. Vertraulichkeit § 8 Zugriffsbeschränkung / Pseudonymisierung: <…>
VIII. Interessenkonflikt [keiner / Abgabe an: …]
IX. Dokumentation § 11 Ablage; Löschung nach 3 Jahren: <Datum>
Hinweis: Belastende Personalmaßnahmen während der Bearbeitung vermeiden (§ 36).
Sources
Statute
- § 8 HinSchG (confidentiality requirement)
- § 13 HinSchG (tasks of the internal reporting office)
- § 17 HinSchG (procedure for internal reports)
- § 18 HinSchG (follow-up measures)
- § 11 HinSchG (documentation)
- §§ 2, 9, 36 HinSchG (scope of application, exceptions, retaliation)
- Directive (EU) 2019/1937 (EU Whistleblower Directive)
Secondary literature
- Reufels, Hinweisgeberschutz, 1st ed. 2024
- Schmidt-Husson, HinSchG-Praxiskommentar, 2nd ed. 2024
- BeckOK HinSchG (Online)