Who must set up a whistleblowing channel in Finland?
This page is not legal advice.
Whether an organisation must run an internal reporting channel is decided by section 10 of the Whistleblower Protection Act (1171/2022). This guide restates the rule and the most common follow-up questions. It is general information, not legal advice.
The 50-person rule
Section 10 requires the organisations it lists to establish an internal channel when they regularly have at least 50 persons in an employment or public-service relationship. The list covers companies and foundations referred to in the section, specified State bodies, wellbeing services counties, municipalities and parishes. The word “regularly” matters: the count is the organisation’s usual headcount, not a single peak day.
Covered regardless of size
Supplementary pension institutions must establish a channel whatever their headcount. Read section 10 itself for the full list and its exceptions before concluding that your organisation is outside it.
Under 50 people: a voluntary channel
A smaller organisation may still run a channel. If it does, section 13 applies the Act’s rules to that channel, so the same deadlines and handling duties apply. Many small organisations choose a channel anyway because it lets problems surface internally first.
Doing it yourself or outsourcing
- Section 11: operation of the channel may be outsourced to an external service provider. The organisation remains responsible for the duties in the Act.
- Section 12: the Act allows a shared channel in certain situations. Check its conditions in the Act before relying on one.
- Section 14: whatever the model, the organisation designates the impartial person or persons who handle reports, and only they may process them.
Take the two-minute self-check: do we need a reporting channel?
For a binding answer about your organisation, read the Act and ask qualified counsel.