Vem måste inrätta en visselblåsarkanal i Finland?

Whether an organisation must run an internal reporting channel is decided by section 10 of the Whistleblower Protection Act (1171/2022). This guide restates the rule and the most common follow-up questions. It is general information, not legal advice.

The 50-person rule

Section 10 requires the organisations it lists to establish an internal channel when they regularly have at least 50 persons in an employment or public-service relationship. The list covers companies and foundations referred to in the section, specified State bodies, wellbeing services counties, municipalities and parishes. The word “regularly” matters: the count is the organisation’s usual headcount, not a single peak day.

Covered regardless of size

Supplementary pension institutions must establish a channel whatever their headcount. Read section 10 itself for the full list and its exceptions before concluding that your organisation is outside it.

Under 50 people: a voluntary channel

A smaller organisation may still run a channel. If it does, section 13 applies the Act’s rules to that channel, so the same deadlines and handling duties apply. Many small organisations choose a channel anyway because it lets problems surface internally first.

Doing it yourself or outsourcing

• Section 11: operation of the channel may be outsourced to an external service provider. The organisation remains responsible for the duties in the Act.
• Section 12: the Act allows a shared channel in certain situations. Check its conditions in the Act before relying on one.
• Section 14: whatever the model, the organisation designates the impartial person or persons who handle reports, and only they may process them.

Take the two-minute self-check: do we need a reporting channel?

For a binding answer about your organisation, read the Act and ask qualified counsel.