---
url: https://eurocomply.app/regulations/whistleblower
canonical: https://eurocomply.app/regulations/whistleblower
title: Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law — EuroComply
shortName: Whistleblower Directive
alternateNames: [EU Whistleblower Directive, Whistleblowing Directive]
regulationNumber: (EU) 2019/1937
celex: 32019L1937
instrumentType: directive
status: in-force
inForceDate: 2019-12-16
applicationDate: 2021-12-17
transpositionDeadline: 2021-12-17
extraterritorialReach: false
sourceUrl: https://eur-lex.europa.eu/eli/dir/2019/1937/oj
officialJournalRef: OJ L 305, 26.11.2019, p. 17–56
lastReviewed: 2026-05-12
author: EuroComply Team
license: CC-BY-4.0
---

# Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law

The EU's whistleblower protection directive. Requires legal entities above size thresholds to establish internal reporting channels and procedures, and protects whistleblowers from retaliation. Covers reports on breaches of EU law in specified areas (public procurement, financial services, product safety, AML/CFT, environment, etc.).

## Who does Whistleblower Directive apply to?

Applies to legal entities in the private sector with 50+ workers, and to public-sector entities (with some exceptions for small municipalities). Covers persons working in the entity who report breaches of Union law in the listed material scope.

**Applies to:**

- private-sector legal entities with 50+ employees
- public-sector entities
- designated competent authorities

## What are the penalties for Whistleblower Directive non-compliance?

**Maximum fine:** Penalties set by national law — must be effective, proportionate, dissuasive

**Tier detail:**

- Member-state penalties for hindering reporting, retaliation, breach of confidentiality, or malicious reports: national law (set by national law) — Article 23

## When does Whistleblower Directive apply?

**Key dates:**

- 2019-12-16 — Entry into force (Article 28)
- 2021-12-17 — Transposition deadline (entities with 250+ employees) (Article 26)
- 2023-12-17 — Extended deadline for entities with 50–249 employees (Article 26(2))

## Supervising authorities

- Member-state designated bodies (varies by country: national integrity authorities, ombudspersons, labour inspectorates) *(member-state)*

## Sector applicability

- Material scope: public procurement, financial services, product safety, transport safety, environment, radiation protection and nuclear safety, food and feed safety, animal health and welfare, public health, consumer protection, privacy and personal data protection, network and information systems security
- Plus: breaches affecting EU financial interests and breaches of internal market rules (including competition and state aid)

## Primary articles

- **materialScope:** Article 2
- **internalReportingChannels:** Article 8
- **externalReporting:** Article 11
- **protectionFromRetaliation:** Article 19
- **remediesAndCompensation:** Article 21
- **penalties:** Article 23
- **transposition:** Article 26

## Related EuroComply resources

- Hub: [/regulations/whistleblower](https://eurocomply.app/regulations/whistleblower)

## Source

Authoritative text: [(EU) 2019/1937 — EUR-Lex](https://eur-lex.europa.eu/eli/dir/2019/1937/oj) (OJ L 305, 26.11.2019, p. 17–56).

---

Informational only. Not legal advice — consult qualified legal counsel for your specific situation.

Last reviewed: 2026-05-12 by the EuroComply Team. License: CC-BY-4.0.