A factual overview of Act 1171/2022 and Directive (EU) 2019/1937: who must keep an internal channel, deadlines, and the Chancellor of Justice’s external channel. Not legal advice.
Why Finnish and EU whistleblowing rules put an internal channel in front of the external one, what “written” covers, and what a software product cannot do. Not legal advice.
The 50-person rule in section 10 of Act 1171/2022, who is covered regardless of size, voluntary channels and outsourcing. Includes a short self-check. Not legal advice.
What Act 1171/2022 asks of public-sector organisations: who is covered, impartial handlers, public information, anonymity and confidentiality. Not legal advice.
A practical guide for reporters: scope, reasonable grounds, internal or external channel, anonymity, what to write, keeping your code safe and protection from retaliation. Not legal advice.
How the internal channel and the Chancellor of Justice’s external channel fit together under Act 1171/2022, and when the external route may be used. Not legal advice.
What a reporting channel stores, the difference between provider-held and customer-held encryption, the questions to ask a vendor, and the five-year rule. Not legal advice.
Necessary cookies cover staff sign-in in the signed-in app. If you choose Accept, a visit measurement may load on this public page. It is not used on the signed-in app or the reporting channel. Reject keeps that measurement off.
Necessary — sign-in session and CSRF on the signed-in app. Not affected by this choice.