Search
Contact
12.05.2023 | KPMG Law Insights

Bundestag and Bundesrat pass whistleblower protection law

The Whistleblower Protection Act has been passed. On May 9, 2023, the Mediation Committee of the Bundestag and Bundesrat reached an agreement and submitted a recommended resolution on the draft bill. The Bundestag approved this on May 11, 2023, the Federal Council then immediately on May 12, 2023 approved. The law will thus enter into force one month after promulgation, i.e. probably in mid-June 2023.

The Whistleblower Protection Act is intended to implement the so-called Whistleblower Directive of the EU (2019/1937). The deadline for this had already expired on December 17, 2021. Although the Bundestag had already passed the law on February 10, 2023, the Bundesrat (upper house of the German parliament) refused to give its approval at the time, which is why a mediation committee was set up.

The purpose of the regulation is to improve the enforcement of European and German law by strengthening the protection of employees who draw attention to wrongdoing in their organization or in their authority.

Here are the key points of the new law:

Scope of application of the Whistleblower Protection Act

The new whistleblower protection rules apply to private and public employment employers with 50 or more employees. Private employment employers with typically 50 to 249 employees will still be given a grace period for implementation and will not be required to have their internal reporting offices in place as early as mid-June 2023, but rather as late as December 17, 2023. Employees, civil servants, self-employed persons, partners, interns, volunteers, employees of suppliers and persons whose employment relationship has already ended or has not yet begun or is in a pre-contractual stage fall under the legal protection as whistleblowers.

The Act does not apply to the reporting of all wrongdoing, but only to criminal offenses and certain misdemeanors as well as other violations of law that are listed in the catalog of Section 1 of the Whistleblower Protection Act. A further prerequisite is that these legal provisions are violated in the course of a professional, business or official activity.

Obligation to establish a reporting office

Employers with at least 50 employees each, as a rule, are required to set up an internal reporting office for tips. Internal reporting channels must allow reports in verbal or text form. Personal meetings with a person from the internal reporting office must also be made possible.

Hotlines are not required to accept anonymous reports. This was originally provided for in the legislation; however, this passage was deleted in the Mediation Committee.

The reporting offices check the validity of the indications and initiate appropriate follow-up measures. These are usually internal investigations, either by the employment provider itself or by another competent body.

Whistleblowers are not bound to the internal reporting office; they can also contact an external reporting office directly in accordance with the Whistleblower Protection Act.

Whistleblowers must not be disadvantaged

If someone has made a tip and is discriminated against in connection with his or her professional activities, the law presumes that this is a reprisal because of the tip. The employer bears the burden of proving that the adverse action is justified for other reasons. However, the person giving notice must make a substantiated claim that the adverse action is a reprisal. If reprisals actually occur, the whistleblower can claim damages, for example.

Fines for whistleblowers and for employment employers

Both the whistleblower and the company may be subject to fines. A person who knowingly spreads false facts is as much in violation of the law as a person who obstructs communication. Fines may also be imposed if the hotline is not established, reprisals are taken against whistleblowers, or confidentiality is not maintained. The amount of the fine can be up to 50,000 euros and, if necessary, can be increased up to ten times this amount with respect to companies.

Conclusion

Germany is one of the last EU countries to finally have a whistleblower protection law – the KPMG Law Whitepaper provides a general overview. That it was coming has long been known, and many employers have already voluntarily set up a whistleblower hotline. As an employer, you should be informed about legal violations in the company as early as possible. It is to be welcomed that there is now clarity and that the procedures can be designed. Of course, employment providers are free to create additional options for reporting beyond the minimum legal requirements. For example, the relationship to the “complaints mechanism” under the Supply Chain Act, which is to be designed in a very similar way in parts, needs to be clarified.

All private and public employment providers should establish and publicize an internal reporting office and appropriate reporting channels as soon as possible.

Explore #more

30.09.2026 | KPMG Law Insights

Mixed-Use Real Estate as an Opportunity for Downtown Areas

Downtown areas should be vibrant, sustainable, and attractive. But the traditional business model behind them—retail—is becoming less and less viable. Rents are high, customers are…

28.09.2026 | Deal Notifications

KPMG Law and KPMG are advising Rohde & Schwarz on the acquisitions of NEOSAT and PHYTRONIC

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) and KPMG AG Wirtschaftsprüfungsgesellschaft (KPMG) advised the Munich-based technology group Rohde & Schwarz on its acquisitions of NEOSAT GmbH…

28.09.2026 | Deal Notifications

KPMG Law and KPMG are advising Diehl Defence on the acquisition of the Dr. Carls aerial imagery database

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) and KPMG AG Wirtschaftsprüfungsgesellschaft (KPMG) advised Diehl Defence on its acquisition of the aerial imagery database Dr. Carls GmbH.…

26.09.2026 | In the media

Op-Ed in *Lebensmittelzeitung*: PPWR Introduces New Requirements for the Food Industry

The EU Packaging Regulation (PPWR) has been in effect since August 12, 2026—and presents companies in the food industry with a question that requires urgent…

18.09.2026 | Press releases

KPMG Law Honored at the PMN Management Awards

KPMG Law was awarded first place in the Business Development category at this year’s PMN Management Awards. In addition, the project “The Agent-Based Law Firm”…

18.09.2026 | KPMG Law Insights

How the Data Act Affects the Drafting of Lease Agreements

The EU Data Act is also of great significance to the real estate industry, as modern commercial properties have become data spaces. Heating and air…

15.09.2026 | KPMG Law Insights

Reporting Deadlines for Cyber Incidents Under the GDPR, BSIG, and CRA—Every Hour Counts

After a cyber incident, companies have only 24 or 72 hours to file their initial report with the authorities. A single incident can trigger multiple…

11.09.2026 | KPMG Law Insights

The Procurement Acceleration Act and Sustainable Procurement: What Is Permitted and What Is Required?

The Public Procurement Acceleration Act took effect on July 1, 2026. The Act implements the reform of public procurement law that has been under discussion…

08.09.2026 | Deal Notifications

KPMG Law advises the shareholders and management of KODIAK on the sale of shares and the strategic partnership with Bencis

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) advised the shareholders and management of KODIAK GmbH (KODIAK) on the sale of shares to Bencis and the establishment…

07.09.2026 | In the media

KPMG Law advises Bosch Rexroth on the sale of its Active Shuttle product business to Neura Robotics

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) has provided legal counsel to Bosch Rexroth AG (Bosch Rexroth) in the sale of its product business related to…

Contact

Dr. Bernd Federmann, LL.M.

Partner
Regional Manager Southwest
Head of Compliance & Corporate Criminal Law

Theodor-Heuss-Straße 5
70174 Stuttgart

Tel.: 0711 781923418
bfedermann@kpmg-law.com

© 2026 KPMG Law Rechtsanwaltsgesellschaft mbH, associated with KPMG AG Wirtschaftsprüfungsgesellschaft, a public limited company under German law and a member of the global KPMG organisation of independent member firms affiliated with KPMG International Limited, a Private English Company Limited by Guarantee. All rights reserved. For more details on the structure of KPMG’s global organisation, please visit https://home.kpmg/governance.

KPMG International does not provide services to clients. No member firm is authorised to bind or contract KPMG International or any other member firm to any third party, just as KPMG International is not authorised to bind or contract any other member firm.

Scroll