Compliance tools · Finland

Laki Euroopan unionin ja kansallisen oikeuden rikkomisesta ilmoittavien henkilöiden suojelusta

Säädöskokoelma 1171/2022 (Finlex) · Finland · Binding instrument

Tämä sivu kansallisella kielellä

A set of six working files that organise the obligations of Finland's whistleblower protection act into open questions a business answers from its own records, with the statutory text carried verbatim beside each duty.

The act concerns employers, online sellers, waste producers and other businesses that employ staff or handle goods and materials in Finland. It sets out how a business must receive, investigate and protect a person who reports suspected breaches of European Union or national law. The toolkit's six working files walk through the duties that follow: setting up internal reporting arrangements, naming a responsible person, examining reports, handling the burden of proof, keeping and deleting information, and passing reports onward to the authority.

Each working file presents the duties as open questions the business answers from its own records. The statutory text is carried verbatim beside each duty, so the business reads the authority's own words next to the question it is answering. Sections are served through a connector inside Claude, and the documents that come back are dated compliance reports the business keeps in its own file.

The toolkit never gives advice and never presents a perspective; it carries what the authority wrote, organised. A business that works through the open questions builds a dated record of how its arrangements meet each duty in the act.

Find every toolkit your business needs →

Which businesses fall within the scope of this act?

The act reaches employers, online sellers, waste producers and other businesses that employ staff or handle goods and materials in Finland. A business that receives a report of a suspected breach of European Union or national law from a worker or a contractor falls within its protection rules. The working files set out the duties that follow for such a business.

What does the first working file cover?

The first working file covers the duty to set up internal reporting arrangements, drawn from Section 10 and Section 12, subsection 2. It turns that duty into open questions about how the business receives a report and who can raise one. The business answers from its own records, and the statutory text sits beside each question.

What does the second working file cover?

The second working file covers the duty to name a responsible person, drawn from Section 14 and Section 15, subsection 4. It asks the business to set out who holds that role and how the appointment is recorded. The answers come from the business's own records.

What does the third working file cover?

The third working file covers the duty to examine a report, drawn from Section 16 and Section 23. It walks through the open questions a business answers about how a report is received, assessed and followed up. The statutory text is carried beside each duty.

What does the fourth working file cover?

The fourth working file covers the burden of proof, drawn from the first sentence of Section 25 and Section 29, subsection 1. It asks the business to show how it records the reasons behind a decision that affects a person who has reported a breach. The answers rest on the business's own documentation.

What does the fifth working file cover?

The fifth working file covers the keeping and deleting of information, drawn from the first sentence of Section 29, subsection 2 and the first sentence of Section 32, subsection 2. It turns the retention rules into open questions about what the business keeps and for how long. The business answers from its own records.

What does the sixth working file cover?

The sixth working file covers the passing of a report onward, drawn from the second sentence of Section 32, subsection 2 and Section 37. It asks how the business forwards a report to the competent authority and what it records about that step. The statutory text sits beside each question.

How are the working files delivered?

The sections are served through a connector inside Claude. The business reaches the open questions and the statutory text in the same place, and the documents that come back are dated compliance reports kept in the business's own file.

What does a business receive when it works through the questions?

The documents that come back are dated compliance reports. The business keeps them in its own file as a record of how its arrangements meet each duty in the act. Each report is dated, so the business can see when the answers were given.

Does the toolkit tell a business what to do about a report?

The toolkit never gives advice and never presents a perspective; it carries what the authority wrote, organised. A business reads the statutory text beside each open question and answers from its own records. The dated compliance reports record those answers for the business's own file.

Source: Finlex. Official text, free of copyright under Tekijänoikeuslaki § 9. Official reference: Säädöskokoelma 1171/2022 (Finlex).

Related toolkits for Finland: Jätelaki · Kuluttajansuojalaki · Pelastuslaki · Laki sähköisen viestinnän palveluista