Training – how to handle whistleblower reports?

Training the members of the team handling whistleblower reports will enable them to carry out their duties effectively – in accordance with the regulations and with respect for the privacy of the data subjects they process.

Tailored to the organisation

Online or on-site

Access to the recording after training

Training for the Report Review Team

Order training dedicated to staff handling whistleblower reports so they can carry out their duties effectively – in accordance with the regulations and with respect for the privacy of the data subjects they process.

During approximately two hours of intensive training, employees acquire key knowledge for their organisation and, through practical examples, learn how to apply it when handling whistleblower reports.

Illustration of whistleblower report handling training

What does the training schedule look like?

Schedule

How to handle whistleblower reports

Module 1

I. Whistleblower – who they are and how they operate

  • What is an internal report and what can it involve?
  • Who can be a whistleblower? An employee, a former employee, an associate, a subcontractor?
  • How to distinguish a report from a complaint or application?

II. Whistleblower rights – what does the law guarantee?

  • What rights does the person reporting the wrongdoing have?
  • What steps does the organization need to take to protect the whistleblower from repression?
  • Can a whistleblower be held accountable?

Module 2

I. Data protection and anonymity – key to trust

  • How do you protect a whistleblower's personal data at every stage of the process?
  • When and how to ensure anonymity – secure reporting channels.
  • Data controller obligations and the reporting system – what does the GDPR require?

II. Report review team – how to appoint it and how it operates

  • Team composition – competence, impartiality, confidentiality.
  • Accepting a report – how to respond so as not to discourage the whistleblower?
  • Rules for communicating with the reporting person – channels, deadlines, tone.

Module 3

I. Explanatory procedure – what happens after a report?

  • How to conduct an efficient and thorough procedure?
  • The principle of proportionality and minimisation of data in practice.
  • How can procedural errors and infringements of parties' rights be avoided?

II. Team powers – what actions can the team take?

  • Access to information, interviews with employees, document review – limits of authority.
  • Cooperation with other departments – HR, compliance, legal.
  • What if there's a conflict of interest for a team member?

Module 4

I. Internal report register – how to maintain it and what it should contain

  • What information should be documented and how long should it be stored?
  • Should the whistleblower be identified in the register?
  • Accountability rules and register access – who, when, and to what extent?

II. Team responsibility – tasks and risks

  • Who is responsible for breaches of the rules in the reporting system?
  • What are the consequences of failure to react or misconduct?
  • Why is a whistleblower system not only a legal requirement but also an element of organizational culture?
Karolina Langer

Training led by

Karolina Langer

Karolina Langer, legal advisor and member of the District Chamber of Legal Advisers in Katowice. She gained professional experience in personal data protection as a Data Protection Officer (DPO) in commercial law companies.

Benefits of whistleblower report handling training

After whistleblower report handling training, employees will:

  • checkwill know their obligations regarding receiving and handling whistleblower reports;
  • checkwill understand the importance of protecting whistleblowers' personal data and the data of persons concerned by reports, which minimises the risk of privacy breaches;
  • checkwill be able to register reports effectively, confirm receipt and provide feedback to whistleblowers within the required deadlines;
  • checkwill know how to communicate effectively with whistleblowers.

Opinion of the participants

Google

Tomasz G.

Google

2 years ago

starstarstarstarstar

I wanted to thank you for the wonderful training I've had at your company, the materials were very well prepared, and the instructor has shown tremendous knowledge and experience.

Google

Aleksandra P.

Google

2 years ago

starstarstarstarstar

Training at a very high level, I highly recommend!!! Training materials very useful in everyday work.

Google

Sławomir M.

Google

2 years ago

starstarstarstarstar

Mrs. Mecenas, it was an honor to be able to take part in this training, and thank you very much for your professional approach and valuable practical guidance.

Google

Wacław T.

Google

3 years ago

starstarstarstarstar

The IOD course organized by ODO24 has met all my expectations, a very practical approach, concrete examples and professional support.

Google

Maria K.

Google

1 year ago

starstarstarstarstar

The training was conducted in a way that was understandable even to those without previous experience in this field.

Google

Piotr N.

Google

10 months ago

starstarstarstarstar

Very good training, a lot of practical examples, a little bit too little time to ask questions, but overall I'm satisfied.

Google

Anna W.

Google

8 months ago

starstarstarstarstar

A professional approach, a great atmosphere during the training, the instructor answered all the questions thoroughly, and I highly recommend ODO24!

Google

Jan K.

Google

1 year ago

starstarstarstarstar

It's the best personal data protection training I've ever had, specific examples from real life, not just a dry theory, I recommend it to anyone who works with GDPR.

Google

Katarzyna J.

Google

6 months ago

starstarstarstarstar

The training meets my expectations. A lot of practical knowledge, good materials. The only drawback is too much group, so less time for individual consultations.

Google

Michał L.

Google

4 months ago

starstarstarstarstar

Excellent training! A very competent conductor with vast experience. Everything explained in a clear and understandable way. The training materials are very useful.

Google

Joanna D.

Google

3 months ago

starstarstarstarstar

I recommend ODO24 training to anyone seeking a sound knowledge of the field of ODO: professional service, excellent organisation and excellent teaching facilities.

Google

Andrzej S.

Google

2 months ago

starstarstarstarstar

Sometimes the pace was a little too fast, but the conductor was happy to return to the topics discussed earlier at the request of the participants.

What our customers say about our services

Marcin Wieczorek

Wojas

foto-lizard-media.jpg

I am very impressed with the high level of substantive expertise of the training staff"

From 13 to 17 March I attended the "Course for Information Security Administrators" organized by ODO 24 sp. z o.o. I am very impressed with the high substantive level of the training staff and the comprehensive program. Working as an ABI requires knowledge not only of legal provisions but also of IT matters, which ODO 24 took into account. Noteworthy is the curriculum, which gradually introduces increasingly advanced nuances of personal data protection, starting from the legal basics and ending with practical aspects of auditing and working with documents within a company. The complete set of materials, editable documents and publications I received will facilitate my daily work as an ABI. I can certainly recommend ODO 24 as a reliable partner offering training services of a high standard.

Scope of Services:

Magdalena Węglewska

Mazda

foto-mazda.jpg

We can wholeheartedly recommend ODO 24 as a professional and reliable partner"

For many years we have consistently placed great importance on the protection of the personal data of our customers as well as our employees. We took an active part in creating the "Code of Good Practice for the Protection of Personal Data of Customers and Potential Customers,” developed jointly by GIODO and the Polish Automotive Industry Association. Due to the complexity and variability of the rules on personal data protection, as well as Mazda’s dynamic development in Poland and the increasing volume of data we process, we decided to entrust the ABI function to a company specialized in this field. The decision to use the services of ODO 24 was primarily influenced by the experience and competence of the team of experts, the comprehensiveness of the offering and its flexibility in adapting to our organization. After a year of cooperation we can recommend ODO 24 as a professional and reliable partner.

Agnieszka Karłowicz

Spiżarnia

foto-spizarnia.jpg

A practical approach, continuous advisory availability, and positive working relationships"

We have been working with ODO24 for over a year. For us it has been a year of peaceful breathing and a sense of security: at least regarding personal data protection :-) The people at ODO are professionals who explain matters that are incomprehensible to the average person in an understandable way. They understand not only their profession but, which is very important to us, business and its requirements. A practical approach, constant advisory availability, and great relationships — all of this means I can recommend this Company to anyone who wants to work and sleep peacefully.

Tomasz Siwicki

Gefco

foto-gefco.jpg

I recommend the company ODO 24 as a professional partner"

For several years we have been cooperating with ODO 24 in the field of personal data protection. A professional team that efficiently helped us to comply with the requirements of the GDPR. We make use not only of the experts’ knowledge but also of professionally prepared e‑training, thanks to which we were able to train several hundred employees in a very short time. I highly recommend ODO 24 as a professional partner delivering services at the highest level.

Whistleblower report handling training FAQ

Who is a whistleblower and what is their role?

A whistleblower is a person who reports irregularities or unethical behaviour in the workplace, such as fraud, abuse, or violations of the law.

Whistleblowers play a key role in promoting transparency and accountability in organisations. Their actions make it possible to expose problems that may threaten public safety or interests.

It is worth knowing that whistleblowers often need protection from retaliation. That is why at ODO 24 we help companies implement whistleblower protection: /oferta/ochrona-sygnalistow

What are the employer's obligations regarding whistleblower protection?

If your organisation employs at least 50 people as of 1 January or 1 July, you are subject to a statutory obligation. Employers are required to create appropriate reporting channels and procedures that will allow employees to report irregularities in a safe and confidential manner.

The internal reporting procedure establishes a system that allows employees to report violations of the law in a safe and confidential manner.

The aim of the procedure is to create a safe environment for whistleblowers so that they can report irregularities without fear of retaliation from the employer.

Employers must inform employees about the procedure and ensure access to it, following consultations with trade union organisations or employee representatives.

What violations can whistleblowers report?

Pursuant to Article 3(1) of the Whistleblower Protection Act, a violation of the law is an act or omission that is contrary to the law or intended to circumvent it.

Examples of violations that can be reported:

  • Corruption – any activities related to bribery or abuse of power.
  • Public procurement – irregularities in tendering processes and contract performance.
  • Services, products and financial markets – violations of regulations in the financial sector.
  • Combating money laundering and terrorist financing – actions contrary to prevention regulations.
  • Product safety – problems related to product quality and conformity with standards.
  • Environmental protection – activities harmful to the natural environment.
  • Privacy and personal data protection – violations related to the processing of personal data.
What forms of whistleblower protection exist?

Whistleblower protection in Poland was regulated by the Act of 14 June 2024.

The Act prohibits any retaliatory actions against whistleblowers.

🔹A whistleblower cannot be deprived of employment or suffer negative employment consequences, such as a reduction in remuneration or being overlooked for promotion.

🔹Disciplinary or financial penalties cannot be imposed on a whistleblower in connection with their report.

🔹A report made by a whistleblower cannot be the basis for civil or disciplinary liability, provided it is based on reasonable grounds.

Need help implementing whistleblower protection? Contact our experts: /oferta/ochrona-sygnalistow

Who should review whistleblower reports?

The team handling whistleblower reports may include:

  • 1.HR department employees – HR staff have experience handling complaints and knowledge of the organisational structure.
  • 2.Risk management representatives – they have knowledge of legal regulations and internal procedures.
  • 3.Legal experts – they help interpret regulations and ensure actions comply with applicable law.
  • 4.Employee representatives – this ensures a diversity of perspectives and avoids conflicts of interest.

Worth remembering:

  • The team should be diverse to ensure objective assessment of reports.
  • Those handling reports should not be directly related to the reported situation.
  • Team members should be appropriately trained in whistleblower protection and reporting procedures.
How to inform staff of the procedure for protecting whistleblowers?

Effective ways to inform employees about the whistleblower protection procedure:

  • Post clear information on the notice board in a visible location so everyone has easy access.
  • Send information by email – make sure the message is concise and covers the most important points.
  • Place documentation on internal IT resources.
  • Organise training sessions during which employees learn the procedure and get answers to additional questions.
  • Prepare an FAQ section as well as brochures or informational leaflets available in the workplace.
  • Raise the topic during regular team meetings to ensure everyone is aware of the procedures.
  • Launch an information campaign using posters, newsletters, or company social media to raise awareness.

Make sure all employees are aware of whistleblower protection procedures and know how to report irregularities safely and confidentially.

Our greatest value is the trust of our customers.

How can we help you?

Write or call, we will find a solution

Form decoration

Use the form

The data controller will be ODO 24 sp. z o.o. with its registered office in Warsaw at ul. Kamionkowska 45. Your data will be processed for the purpose of preparing, sending and archiving the cooperation offer. More information can be found in the Privacy Policy

Handling whistleblower reports | ODO 24