Download one of our supply chain, EUDR, CSRD/VSME & ESG compliance guides now Learn more →
Test now Personal demo
lawcode Blog

Analysis, updates & best practices.

Our experts share in-depth analyses and practical classifications on EUDR, CSRD, HinSchG, CSDDD and sustainability.

Never miss an update.
New specialist articles, regulatory updates and practical tips, straight to your inbox. Once a week, no spam.

No spam Unsubscribe at any time GDPR-compliant
Reporting office in corporate groups: Joint group solution or separate systems for subsidiaries?
Whistleblowing Directive 28.05.2026 · 7 min

Reporting office in corporate groups: Joint group solution or separate systems for subsidiaries?

Centralized or decentralized reporting office? Implementing the Whistleblower Protection Act (HinSchG) in a way that conserves resources is a strategic challenge for corporate groups. The question of whether a centralized solution at the parent company is sufficient or whether each subsidiary must operate its own system often leads to legal uncertainty in practice. The reason for this is the sometimes contradictory signals between the requirements of the EU Commission and the pragmatic approach of the German legislator. This guide provides clarity. We examine the group privilege, assess the legal risks and offer practical solutions for structuring your whistleblowing system throughout the group in a legally secure, data protection-compliant and efficient manner.

Documentation obligations according to HinSchG: What, for how long, in what form?
Whistleblowing Directive 28.05.2026 · 7 min

Documentation obligations according to HinSchG: What, for how long, in what form?

The documentation requirements of the Whistleblower Protection Act (HinSchG) pose tangible questions for companies: What must actually be recorded, in what form and for how long can or should reports be kept? § Section 11 of the Whistleblower Protection Act provides clear answers to these questions. Those who know the requirements not only protect the identity of whistleblowers, but also avoid fines of up to 50,000 euros. This article summarizes the most important obligations in a practical way.

Everything to do with due diligence
Compliance 28.05.2026 · 11 min

Everything to do with due diligence

Buying a company, investing or entering into a partnership - such decisions harbor great opportunities, but also considerable risks. Due diligence is a structured look behind the scenes: it uncovers hidden risks, reveals potential and creates the basis for legally compliant decisions. In this article, you will find out what types there are, how the due diligence process works and how companies can not only minimize risks but also gain strategic advantages.

Set up an internal reporting office in accordance with HinSchG: Step-by-step guide
Whistleblowing Directive 21.05.2026 · 6 min

Set up an internal reporting office in accordance with HinSchG: Step-by-step guide

The obligation to set up an internal reporting office poses organizational challenges for many companies. Since the Whistleblower Protection Act (HinSchG) came into force, companies with 50 or more employees are legally obliged to do so. Those who ignore this obligation risk fines. This guide shows in seven structured steps how a legally compliant whistleblower system can be set up in a company, including all legal deadlines, requirements and strategic tips.

Fines under the HinSchG: Violations, penalties and compliance measures for companies
Whistleblowing Directive 26.05.2026 · 9 min

Fines under the HinSchG: Violations, penalties and compliance measures for companies

The Whistleblower Protection Act (HinSchG) has been in force since mid-2023 and has permanently changed the compliance landscape in Germany. It serves to protect whistleblowers who uncover wrongdoing in companies and obliges organizations to set up clear reporting channels. Anyone who ignores these legal requirements, blocks reports or even takes reprisals against whistleblowers runs a massive financial risk. Fines under the HinSchG are not a theoretical threat, but a real instrument used by the supervisory authorities to rigorously enforce compliance with the requirements. This article explains clearly which infringement triggers which fine, who is liable and how you can effectively avoid sanctions.

Anonymous reports under the HinSchG: Mandatory or optional?
Whistleblowing Directive 26.05.2026 · 7 min

Anonymous reports under the HinSchG: Mandatory or optional?

Do companies have to enable anonymous reporting under the Whistleblower Protection Act (HinSchG) or is a classic reporting channel with a name sufficient? This question has been on the minds of many compliance officers since the law came into force on July 2, 2023. The HinSchG, which transposes the EU Whistleblower Directive into German law, is intended to strengthen transparency and integrity in companies and protect whistleblowers from reprisals. The short answer to anonymity is: providing it is formally optional, but in practice it is almost indispensable. In the following, we explain the exact legal situation according to Section 16 HinSchG, the obligations for processing and how you can safely integrate the requirements into your corporate culture.

Internal vs. external reporting office: Which solution fits?
Whistleblowing Directive 21.05.2026 · 7 min

Internal vs. external reporting office: Which solution fits?

The Whistleblower Protection Act (HinSchG) obliges companies with 50 or more employees to set up a reporting office. This raises the strategic question: internal vs. external reporting office, operate it yourself or outsource it to a third party? Both options are permitted under Section 14 HinSchG. However, in many cases, an in-house solution is the better option, provided it is professionally set up. This article shows the advantages and disadvantages of both models and helps you make a decision.

Whistleblowing Directive & DSGVO: Mastering data protection in the whistleblower system
Whistleblowing Directive 26.05.2026 · 8 min

Whistleblowing Directive & DSGVO: Mastering data protection in the whistleblower system

The Whistleblower Protection Act (HinSchG) is intended to strengthen transparency and integrity in companies and authorities by effectively protecting people who report grievances from reprisals. At the same time, the General Data Protection Regulation (GDPR) places extremely high demands on the processing of personal data. As both legal provisions are directly intertwined in the establishment and operation of whistleblowing systems, a complex area of conflict arises in practice. The reporting office processes highly sensitive data, but must also strictly protect the identity of the whistleblower and at the same time safeguard the rights of the accused. Here you can find out how to combine both legal requirements in your internal reporting office in a legally compliant manner and avoid typical liability traps.

Select a whistleblowing system: Software requirements & checklist
Whistleblowing Directive 21.05.2026 · 9 min

Select a whistleblowing system: Software requirements & checklist

Selecting a whistleblower system has been mandatory since 2023. Companies with 50 or more employees must operate an internal reporting office. Violations can result in a fine of up to 50,000 euros. But which software really meets the requirements of the HinSchG? This article provides the minimum legal criteria, the most important functions and a practical checklist for your HinSchG-compliant selection decision.

9 of 76 articles