EU frameworkGDPRNIS 2DORAAI ActWhistleblowing
Recital 40

Recital 40

Directive on the protection of persons who report breaches of Union law · UE 2019/1937

(40)

Effective whistleblower protection implies protecting also categories of persons who, whilst not relying on their work-related activities economically, can nevertheless suffer retaliation for reporting breaches. Retaliation against volunteers and paid or unpaid trainees could take the form of no longer making use of their services, or of giving them a negative employment reference or otherwise damaging their reputation or career prospects.

Luxembourg specificity
loi luxembourgeoise du 16 mai 2023 relative a la protection des personnes signalant des violations du droit

In Luxembourg, the law of 16 May 2023 on whistleblower protection explicitly transposes recital 40 in its article 4, which expressly includes interns (paid or unpaid), volunteers, self-employed workers, shareholders and former collaborators. The OFRS is competent to receive their external reports, and retaliation triggers criminal fines of 1,250 to 25,000 EUR, doubled in case of recurrence, plus full civil compensation.

Luxgap practice: systematically add a whistleblowing protection clause in your internship agreements and volunteer charters, and retain positive evaluations for 5 years after the end of the mission to neutralise any risk of a contested negative reference.