EU frameworkGDPRNIS 2DORAAI ActWhistleblowing
Recital 16

Recital 16

Directive on the protection of persons who report breaches of Union law · UE 2019/1937

(16)

Common minimum standards for the protection of whistleblowers should also be laid down for breaches relating to the internal market as referred to in Article 26(2) TFEU. In addition, in accordance with the case law of the Court of Justice of the European Union (the ‘Court’), Union measures aimed at establishing or ensuring the functioning of the internal market are intended to contribute to the elimination of existing or emerging obstacles to the free movement of goods or to the freedom to provide services, and to contribute to the removal of distortions of competition.

Luxembourg specificity
loi luxembourgeoise du 16 mai 2023 relative a la protection des personnes signalant des violations du droit

In Luxembourg, the law of 16 May 2023 on the protection of whistleblowers transposes recital 16 without narrowing the material scope: any breach relating to the internal market (competition, State aid, free movement) is covered, even if not explicitly listed in a Luxembourg sectoral text. The Office des rapports de signalement (OFRS) is the transversal external authority, with possible redirection to CSSF, CNPD, ITM, CAA or ILR depending on the domain. Criminal penalties range from 1,250 to 25,000 EUR (doubled in case of recidivism), with additional civil damages for retaliation.

Luxgap practice: configure your internal channel to explicitly accept internal-market reports (competition, State aid, technical barriers) and document the qualification chain for every 'out of scope' rejection, as this is the priority focus of OFRS audits.