Search
Contact
12.05.2023 | KPMG Law Insights

Bundestag and Bundesrat pass whistleblower protection law

The Whistleblower Protection Act has been passed. On May 9, 2023, the Mediation Committee of the Bundestag and Bundesrat reached an agreement and submitted a recommended resolution on the draft bill. The Bundestag approved this on May 11, 2023, the Federal Council then immediately on May 12, 2023 approved. The law will thus enter into force one month after promulgation, i.e. probably in mid-June 2023.

The Whistleblower Protection Act is intended to implement the so-called Whistleblower Directive of the EU (2019/1937). The deadline for this had already expired on December 17, 2021. Although the Bundestag had already passed the law on February 10, 2023, the Bundesrat (upper house of the German parliament) refused to give its approval at the time, which is why a mediation committee was set up.

The purpose of the regulation is to improve the enforcement of European and German law by strengthening the protection of employees who draw attention to wrongdoing in their organization or in their authority.

Here are the key points of the new law:

Scope of application of the Whistleblower Protection Act

The new whistleblower protection rules apply to private and public employment employers with 50 or more employees. Private employment employers with typically 50 to 249 employees will still be given a grace period for implementation and will not be required to have their internal reporting offices in place as early as mid-June 2023, but rather as late as December 17, 2023. Employees, civil servants, self-employed persons, partners, interns, volunteers, employees of suppliers and persons whose employment relationship has already ended or has not yet begun or is in a pre-contractual stage fall under the legal protection as whistleblowers.

The Act does not apply to the reporting of all wrongdoing, but only to criminal offenses and certain misdemeanors as well as other violations of law that are listed in the catalog of Section 1 of the Whistleblower Protection Act. A further prerequisite is that these legal provisions are violated in the course of a professional, business or official activity.

Obligation to establish a reporting office

Employers with at least 50 employees each, as a rule, are required to set up an internal reporting office for tips. Internal reporting channels must allow reports in verbal or text form. Personal meetings with a person from the internal reporting office must also be made possible.

Hotlines are not required to accept anonymous reports. This was originally provided for in the legislation; however, this passage was deleted in the Mediation Committee.

The reporting offices check the validity of the indications and initiate appropriate follow-up measures. These are usually internal investigations, either by the employment provider itself or by another competent body.

Whistleblowers are not bound to the internal reporting office; they can also contact an external reporting office directly in accordance with the Whistleblower Protection Act.

Whistleblowers must not be disadvantaged

If someone has made a tip and is discriminated against in connection with his or her professional activities, the law presumes that this is a reprisal because of the tip. The employer bears the burden of proving that the adverse action is justified for other reasons. However, the person giving notice must make a substantiated claim that the adverse action is a reprisal. If reprisals actually occur, the whistleblower can claim damages, for example.

Fines for whistleblowers and for employment employers

Both the whistleblower and the company may be subject to fines. A person who knowingly spreads false facts is as much in violation of the law as a person who obstructs communication. Fines may also be imposed if the hotline is not established, reprisals are taken against whistleblowers, or confidentiality is not maintained. The amount of the fine can be up to 50,000 euros and, if necessary, can be increased up to ten times this amount with respect to companies.

Conclusion

Germany is one of the last EU countries to finally have a whistleblower protection law – the KPMG Law Whitepaper provides a general overview. That it was coming has long been known, and many employers have already voluntarily set up a whistleblower hotline. As an employer, you should be informed about legal violations in the company as early as possible. It is to be welcomed that there is now clarity and that the procedures can be designed. Of course, employment providers are free to create additional options for reporting beyond the minimum legal requirements. For example, the relationship to the “complaints mechanism” under the Supply Chain Act, which is to be designed in a very similar way in parts, needs to be clarified.

All private and public employment providers should establish and publicize an internal reporting office and appropriate reporting channels as soon as possible.

Explore #more

30.10.2026 | Unkategorisiert

New Podcast in the Packaging Journal: PWR in Practice—Who Is Liable, Who Pays, and What Are the Current Rules?

The core obligations of the PPWR have been in effect since August 12, 2026. In the Packaging People podcast, Dr. Simon Meyer of KPMG Law…

29.10.2026 | In the media

KPMG and KPMG Law Article in *Betriebs-Berater*: Pitfalls in Customs Law

In light of geopolitical changes, new trade barriers, and more rigorous audits, customs and foreign trade law are increasingly becoming a focus for companies. The…

27.10.2026 | In the media

Op-Ed in Versicherungsmonitor: The Environment Is Finally Becoming a Compliance Risk

With the implementation of the new EU Environmental Criminal Law Directive, the environment is becoming a core area of managerial liability. Managers face reputational damage,…

27.10.2026 | KPMG Law Insights

Federal Court of Justice on the Summary Report: Tax-Exempt but Still a Criminal Offense

Can someone be punished for sales tax evasion even if the sales were subsequently deemed tax-exempt? Yes, says the Federal Court of Justice (BGH) in…

23.10.2026 | KPMG Law Insights

PHP2Shell may trigger legal obligations for companies

Two critical vulnerabilities in the PHP programming language are threatening web applications and digital products worldwide. The Federal Office for Information Security (BSI) has warned…

20.10.2026 | In the media

KPMG Law Guest Column in it daily: The Business Judgment Rule and the Use of AI

The rapid advancement of artificial intelligence presents corporate leadership with diverse and far-reaching decisions. These decisions concern not only the selection and deployment of appropriate…

19.10.2026 | In the media

New articles have been published in PERSONALFÜHRUNG

The current issue of PERSONALFÜHRUNG (10–11/2026) features two articles by female experts from KPMG and KPMG Law. In the article “Will AI Save the Day?…

15.10.2026 | KPMG Law Insights

Faster Building Permits – Legal Options for Businesses

Planning and permitting procedures do not always have to delay construction projects. The law provides several options for expediting the process. To take advantage of…

09.10.2026 | KPMG Law Insights

Claims Management for Cyber Incidents: How Insurers Actively Manage Claims

Cyber incidents are among the most complex claims scenarios for insurers. Ransomware attacks, in particular, can paralyze entire IT infrastructures—with enormous financial consequences. Insurers for …

08.10.2026 | In the media

KPMG Law Guest Column in AUTOHAUS: Consumer Credit Directive: Sales Under New Circumstances

Car dealerships should use the time remaining before the new Consumer Credit Directive takes effect to systematically review their financing and sales processes for regulatory…

Contact

Dr. Bernd Federmann, LL.M.

Partner
Regional Manager Southwest
Head of Compliance & Corporate Criminal Law

Theodor-Heuss-Straße 5
70174 Stuttgart

Tel.: 0711 781923418
bfedermann@kpmg-law.com

© 2026 KPMG Law Rechtsanwaltsgesellschaft mbH, associated with KPMG AG Wirtschaftsprüfungsgesellschaft, a public limited company under German law and a member of the global KPMG organisation of independent member firms affiliated with KPMG International Limited, a Private English Company Limited by Guarantee. All rights reserved. For more details on the structure of KPMG’s global organisation, please visit https://home.kpmg/governance.

KPMG International does not provide services to clients. No member firm is authorised to bind or contract KPMG International or any other member firm to any third party, just as KPMG International is not authorised to bind or contract any other member firm.

Scroll