Polish Whistleblower Protection Act

Who does the Polish Whistleblower Protection Act cover?

The obligations apply primarily to private entities with at least 50 people performing paid work, public-sector entities, and organizations operating in specified regulated fields regardless of workforce size. The act also contains rules for public entities in municipalities with fewer than 10,000 residents.

Protection extends across work-related relationships. It covers employees, contractors, interns, job candidates, former employees, suppliers, shareholders, and other people who obtain information about a breach in a work-related context.

When did the act take effect?

The act was enacted on June 14, 2024 and published on June 24, 2024 as Journal of Laws of 2024, item 928. Most provisions took effect on September 25, 2024. The provisions governing external reports took effect on December 25, 2024.

This national act implements the EU directive in Poland. The EU Whistleblower Directive establishes the European framework, while the Polish act defines the procedures, authorities, time limits, and duties that apply under Polish law.

Organizational duties

Organizations covered by the act must:

• establish an internal channel that receives reports while protecting confidentiality and personal data;
• adopt a procedure for receiving reports and taking follow-up action, including the consultation required by the act;
• protect a reporting person's identity and prevent retaliation;
• maintain a register of internal reports;
• acknowledge receipt within seven days and provide feedback within the statutory time limit, generally three months.

Penalties

The act establishes criminal liability for conduct including obstructing a report, retaliating against a whistleblower, disclosing a protected identity, knowingly making a false report, and failing to establish or correctly operate a required internal reporting procedure.

AMODIT for whistleblower reports

AMODIT supports secure and controlled handling of whistleblower reports. The platform provides:

• a dedicated digital reporting channel, including anonymous reporting where the adopted procedure allows it;
• automated routing and follow-up with confidentiality controls;
• role-based access, change history, and an audit trail;
• registers and reports aligned with the organization's procedure;
• case statuses, assignment of responsible people, reminders, and deadline monitoring.

Teams configure the process in AMODIT's visual process designer and adapt it to the adopted reporting procedure.

Benefits of digital whistleblower case management

• Confidentiality and security: encryption and restricted access protect report data and the reporting person's identity.
• Controlled compliance: configurable workflows reflect national requirements and internal procedures.
• Automation: notifications, reminders, assignments, and status monitoring support timely follow-up.
• Transparency and auditability: the case history records actions and decisions.
• Scalability: one process can handle reports across business units, departments, and locations.

The act and digital transformation

A digital reporting process combines legal duties with a clear operating model for receiving, assessing, investigating, and closing reports. AMODIT keeps the information, responsibilities, deadlines, and case history in one controlled workflow, supporting a transparent culture and consistent follow-up.

Summary

The Polish Whistleblower Protection Act translates the EU framework into binding national rules. It defines protected people, reporting channels, organizational procedures, follow-up, records, external reports, and protection against retaliation. AMODIT supports these duties with a configurable and secure case workflow.