# Instrument Metadata
# Output tuned for LLM consumption -- deterministic parse of the
# EUR-Lex source, no LLM involved in generation.

instrument_id: whistleblowing
celex: "32019L1937"
eli: "http://data.europa.eu/eli/dir/2019/1937/oj"
full_title: Whistleblower Protection Directive (EU) 2019/1937
short_title: Whistleblowing Directive
instrument_type: directive
document_type: directive
normative_weight: binding
jurisdiction: EU
effective_period:
  from: "2019-12-16"
  to: null
dates:
  adopted: "2019-10-23"
  entered_into_force: "2019-12-16"
status: in_force
legal_status: in_force
structure_levels:
  - title
  - chapter
  - article
total_articles: 29
total_recitals: 0
total_annexes: 1
definitions_article: 5
chunk_strategy: by_chapter
chunks:
  - /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
  - /whistleblowing/chunks/whistleblowing_t02_internal_reporting_and_follow_up.md
  - /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
  - /whistleblowing/chunks/whistleblowing_t04_public_disclosures.md
  - /whistleblowing/chunks/whistleblowing_t05_provisions_applicable_to_internal_and_ex.md
  - /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
  - /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
  - /whistleblowing/chunks/annexes.md
key_dates:
  - date: "2019-10-23"
    type: lifecycle
    context: "Adopted"
  - date: "2019-12-16"
    type: lifecycle
    context: "Entered into force"
  - date: "2021-12-17"
    type: deadline
    article: "26"
    context: "…regulations and administrative provisions necessary to comply with this Directive by 17 December 2021. 2. By way of derogation from…"
  - date: "2023-12-17"
    type: deadline
    article: "26"
    context: "…legal entities in the private sector with 50 to 249 workers, Member States shall by 17 December 2023 bring into force the laws,…"
  - date: "2023-12-17"
    type: review
    article: "27"
    context: "…of this Directive. On the basis of the information provided, the. Commission shall, by 17 December 2023, submit a report to the European…"
  - date: "2025-12-17"
    type: review
    article: "27"
    context: "…and proceedings, related to the breaches reported. 3. The Commission shall, by 17 December 2025, taking into account its report…"

generated_at: "2026-10-05T22:51:06.259Z"

articles:
  - article_number: 1
    article_title: Purpose
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 1"
    applies_to_entities: []
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
    keywords:
      - reporting
      - breaches
    contains:
      obligations: false
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 2
    article_title: Material scope
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 2"
    applies_to_entities:
      - member_states
      - consumers
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
      - data_protection
      - aml
    keywords:
      - consumer
      - security
      - data
      - privacy
      - system
      - network
      - reporting
      - breaches
    contains:
      obligations: false
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 3
    article_title: Relationship with other Union acts and national provisions
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 3"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
    keywords:
      - security
      - reporting
      - breaches
      - report
      - to report
    contains:
      obligations: true
      prohibitions: true
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 4
    article_title: Personal scope
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 4"
    applies_to_entities: []
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
    keywords:
      - supervision
      - reporting
      - breaches
      - information on breaches
      - report
      - reporting person
      - facilitator
      - work-related context
      - retaliation
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 5
    article_title: Definitions
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 5"
    applies_to_entities:
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
    keywords:
      - reporting
      - breaches
      - information on breaches
      - report
      - to report
      - internal reporting
      - external reporting
      - public disclosure
      - to publicly disclose
      - reporting person
      - facilitator
      - work-related context
      - person concerned
      - retaliation
      - follow-up
      - feedback
      - competent authority
    contains:
      obligations: false
      prohibitions: false
      permissions: true
      definitions: true
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 2
    external_references: []
    recitals: []

  - article_number: 6
    article_title: Conditions for protection of reporting persons
    chunk_file: /whistleblowing/chunks/whistleblowing_t01_scope_definitions_and_conditions_for_pro.md
    path: "Chapter I > Article 6"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - scope
      - definitions
    keywords:
      - reporting
      - breaches
      - information on breaches
      - report
      - public disclosure
      - reporting person
      - retaliation
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 7
      - target: Article 10
      - target: Article 15
    external_references: []
    recitals: []

  - article_number: 7
    article_title: Reporting through internal reporting channels
    chunk_file: /whistleblowing/chunks/whistleblowing_t02_internal_reporting_and_follow_up.md
    path: "Chapter II > Article 7"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
    keywords:
      - reporting
      - breaches
      - information on breaches
      - internal reporting
      - external reporting
      - reporting person
      - retaliation
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 10
      - target: Article 15
      - target: Article 9
        paragraph: "1"
      - target: Article 12
        paragraph: "4"
      - target: Article 13
    external_references: []
    recitals: []

  - article_number: 8
    article_title: Obligation to establish internal reporting channels
    chunk_file: /whistleblowing/chunks/whistleblowing_t02_internal_reporting_and_follow_up.md
    path: "Chapter II > Article 8"
    applies_to_entities:
      - member_states
      - european_commission
    topics:
      - whistleblowing
      - enforcement
      - risk_assessment
    keywords:
      - third party
      - reporting
      - notification
      - breaches
      - information on breaches
      - report
      - to report
      - internal reporting
      - external reporting
      - follow-up
      - feedback
    contains:
      obligations: true
      prohibitions: true
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 4
        paragraph: "1"
      - target: Article 4
        paragraph: "2"
      - target: Article 9
        paragraph: "1"
    external_references: []
    recitals: []

  - article_number: 9
    article_title: Procedures for internal reporting and follow-up
    chunk_file: /whistleblowing/chunks/whistleblowing_t02_internal_reporting_and_follow_up.md
    path: "Chapter II > Article 9"
    applies_to_entities:
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - authorisation
    keywords:
      - access
      - third party
      - system
      - reporting
      - report
      - internal reporting
      - reporting person
      - follow-up
      - feedback
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: true
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 8
      - target: Article 10
    external_references: []
    recitals: []

  - article_number: 10
    article_title: Reporting through external reporting channels
    chunk_file: /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
    path: "Chapter III > Article 10"
    applies_to_entities: []
    topics:
      - whistleblowing
      - enforcement
    keywords:
      - reporting
      - breaches
      - information on breaches
      - report
      - internal reporting
      - external reporting
      - reporting person
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 15
        paragraph: "1"
      - target: Article 11
      - target: Article 12
    external_references: []
    recitals: []

  - article_number: 11
    article_title: Obligation to establish external reporting channels and to follow up on reports
    chunk_file: /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
    path: "Chapter III > Article 11"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - competent_authorities
    keywords:
      - reporting
      - breaches
      - information on breaches
      - report
      - external reporting
      - reporting person
      - follow-up
      - feedback
      - competent authority
    contains:
      obligations: true
      prohibitions: true
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 12
    article_title: Design of external reporting channels
    chunk_file: /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
    path: "Chapter III > Article 12"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - authorisation
      - competent_authorities
    keywords:
      - access
      - system
      - reporting
      - report
      - external reporting
      - reporting person
      - person concerned
      - feedback
      - competent authority
    contains:
      obligations: true
      prohibitions: true
      permissions: false
      definitions: true
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 18
    external_references: []
    recitals: []

  - article_number: 13
    article_title: Information regarding the receipt of reports and their follow-up
    chunk_file: /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
    path: "Chapter III > Article 13"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - liability
      - data_protection
    keywords:
      - liability
      - data
      - access
      - reporting
      - breaches
      - report
      - to report
      - external reporting
      - reporting person
      - retaliation
      - follow-up
      - feedback
      - competent authority
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 12
      - target: Article 17
      - target: Article 21
        paragraph: "2"
      - target: Article 20
        paragraph: "3"
    external_references:
      - instrument_type: regulation
        reference: "2016/679"
      - instrument_type: directive
        reference: "2016/680"
      - instrument_type: regulation
        reference: "2018/1725"
    recitals: []

  - article_number: 14
    article_title: Review of the procedures by competent authorities
    chunk_file: /whistleblowing/chunks/whistleblowing_t03_external_reporting_and_follow_up.md
    path: "Chapter III > Article 14"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - competent_authorities
    keywords:
      - report
      - follow-up
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 15
    article_title: Public disclosures
    chunk_file: /whistleblowing/chunks/whistleblowing_t04_public_disclosures.md
    path: "Chapter IV > Article 15"
    applies_to_entities: []
    topics:
      - whistleblowing
      - enforcement
      - liability
    keywords:
      - system
      - reporting
      - report
      - external reporting
      - public disclosure
      - retaliation
    contains:
      obligations: true
      prohibitions: true
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 9
        paragraph: "1"
      - target: Article 11
        paragraph: "2"
    external_references: []
    recitals: []

  - article_number: 16
    article_title: Duty of confidentiality
    chunk_file: /whistleblowing/chunks/whistleblowing_t05_provisions_applicable_to_internal_and_ex.md
    path: "Chapter V > Article 16"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - authorisation
      - competent_authorities
    keywords:
      - data
      - consent
      - reporting
      - breaches
      - information on breaches
      - report
      - reporting person
      - person concerned
      - follow-up
      - competent authority
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 17
    article_title: Processing of personal data
    chunk_file: /whistleblowing/chunks/whistleblowing_t05_provisions_applicable_to_internal_and_ex.md
    path: "Chapter V > Article 17"
    applies_to_entities:
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - data_protection
    keywords:
      - data
      - report
    contains:
      obligations: true
      prohibitions: true
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references:
      - instrument_type: regulation
        reference: "2016/679"
      - instrument_type: directive
        reference: "2016/680"
      - instrument_type: regulation
        reference: "2018/1725"
    recitals: []

  - article_number: 18
    article_title: Record keeping of the reports
    chunk_file: /whistleblowing/chunks/whistleblowing_t05_provisions_applicable_to_internal_and_ex.md
    path: "Chapter V > Article 18"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - competent_authorities
    keywords:
      - consent
      - system
      - reporting
      - report
      - reporting person
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 16
      - target: Article 9
      - target: Article 12
    external_references: []
    recitals: []

  - article_number: 19
    article_title: Prohibition of retaliation
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 19"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
    keywords:
      - licence
      - penalty
      - transfer
      - retaliation
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: true
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 4
    external_references: []
    recitals: []

  - article_number: 20
    article_title: Measures of support
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 20"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
    keywords:
      - access
      - cross-border
      - reporting
      - reporting person
      - person concerned
      - retaliation
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 4
    external_references: []
    recitals: []

  - article_number: 21
    article_title: Measures for protection against retaliation
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 21"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - liability
      - data_protection
    keywords:
      - liability
      - data
      - access
      - reporting
      - breaches
      - information on breaches
      - report
      - public disclosure
      - reporting person
      - retaliation
    contains:
      obligations: true
      prohibitions: true
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 4
      - target: Article 3
        paragraph: "2"
      - target: Article 3
        paragraph: "3"
    external_references: []
    recitals: []

  - article_number: 22
    article_title: Measures for the protection of persons concerned
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 22"
    applies_to_entities:
      - member_states
      - competent_authorities
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - competent_authorities
    keywords:
      - access
      - reporting
      - report
      - public disclosure
      - reporting person
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 12
      - target: Article 17
      - target: Article 18
    external_references: []
    recitals: []

  - article_number: 23
    article_title: Penalties
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 23"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
      - liability
    keywords:
      - reporting
      - public disclosure
      - reporting person
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: true
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 4
      - target: Article 16
    external_references: []
    recitals: []

  - article_number: 24
    article_title: No waiver of rights and remedies
    chunk_file: /whistleblowing/chunks/whistleblowing_t06_protection_measures.md
    path: "Chapter VI > Article 24"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - consumer_protection
    keywords: []
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 25
    article_title: More favourable treatment and non-regression clause
    chunk_file: /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
    path: "Chapter VII > Article 25"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - final_provisions
    keywords:
      - reporting
      - reporting person
    contains:
      obligations: true
      prohibitions: false
      permissions: true
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references:
      - target: Article 22
      - target: Article 23
        paragraph: "2"
    external_references: []
    recitals: []

  - article_number: 26
    article_title: Transposition and transitional period
    chunk_file: /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
    path: "Chapter VII > Article 26"
    applies_to_entities:
      - member_states
      - european_commission
    topics:
      - whistleblowing
      - enforcement
      - final_provisions
    keywords:
      - reporting
      - internal reporting
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: true
    internal_references:
      - target: Article 8
        paragraph: "3"
    external_references: []
    recitals: []

  - article_number: 27
    article_title: "Reporting, evaluation and review"
    chunk_file: /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
    path: "Chapter VII > Article 27"
    applies_to_entities:
      - member_states
      - competent_authorities
      - european_commission
    topics:
      - whistleblowing
      - enforcement
      - final_provisions
      - liability
    keywords:
      - access
      - cross-border
      - reporting
      - breaches
      - report
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 28
    article_title: Entry into force
    chunk_file: /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
    path: "Chapter VII > Article 28"
    applies_to_entities: []
    topics:
      - whistleblowing
      - enforcement
      - final_provisions
    keywords: []
    contains:
      obligations: true
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: true
    internal_references: []
    external_references: []
    recitals: []

  - article_number: 29
    article_title: Addressees
    chunk_file: /whistleblowing/chunks/whistleblowing_t07_final_provisions.md
    path: "Chapter VII > Article 29"
    applies_to_entities:
      - member_states
    topics:
      - whistleblowing
      - enforcement
      - final_provisions
    keywords: []
    contains:
      obligations: false
      prohibitions: false
      permissions: false
      definitions: false
      penalties: false
      delegated_powers: false
      implementing_powers: false
      rts_mandate: false
      its_mandate: false
      transitional: false
    internal_references: []
    external_references: []
    recitals: []