Whistleblower Directive Compliance in Luxembourg
The Whistleblower Directive protects persons who report breaches of EU law. It requires organisations with 50+ employees to establish internal reporting channels and prohibits retaliation.
How does Whistleblower apply in Luxembourg?
Whistleblower applies in Luxembourg under EU law with the same obligations as across the bloc — maximum fine Per member state. The national supervisory authority is the CNPD (Commission Nationale pour la Protection des Données), which handles enforcement, complaints, and notifications. Deadline: December 17, 2021 (250+ employees); December 17, 2023 (50–249 employees).
- Supervisory authority: CNPD (Commission Nationale pour la Protection des Données)
- Maximum fine: Per member state
- Key deadline: December 17, 2021 (250+ employees); December 17, 2023 (50–249 employees)
| Supervisory authority | CNPD (Commission Nationale pour la Protection des Données) |
| Maximum fine | Per member state |
| Key deadline | December 17, 2021 (250+ employees); December 17, 2023 (50–249 employees) |
| Sectors affected | All private sector (50+ employees), Public Sector |
December 17, 2021 (250+ employees); December 17, 2023 (50–249 employees)
Per member state
All private sector (50+ employees), Public Sector, Financial Services
What are my Whistleblower obligations in Luxembourg?
- Establish secure internal reporting channels
- Acknowledge reports within 7 days
- Follow up within 3 months
- Protect reporter identity
- Prohibit all forms of retaliation
Does Whistleblower apply to your Luxembourg business?
Find out in 2 minutes with our free regulation checker.
Check now — freeWhistleblower compliance in other EU countries
Check Your Compliance Obligations
Find out which Whistleblower obligations apply to your Luxembourg organisation in under 2 minutes.
Explore Whistleblower Compliance
For informational purposes only. This is not legal advice — consult qualified legal counsel.