Whistleblower laws in all 27 EU member states and beyond

Every EU country has transposed Directive 2019/1937 into national law, but the operational details differ by country: private-sector threshold, public-sector scope, shared channels, external reporting authority, and data protection authority.

Four European jurisdictions outside the EU are covered too, each on its own terms rather than as a transposition. Moldova, an accession candidate, has partially aligned its Legea 165/2023 with the Directive ahead of accession. The United Kingdom left before the transposition deadline and keeps a regime that predates the Directive by two decades. Norway is an EEA state the Directive has not been extended to, yet requires internal procedures from five employees rather than fifty. Switzerland has no general whistleblower protection law at all.

For the authorities that run each external channel — what they can do, the deadlines they work to, and how a report reaches them — see national whistleblower authorities .

This section prioritizes official law texts and authority guidance over vendor summaries. Select a country below to see the applicable law, the competent authority, and the main compliance points that matter in practice.