EU frameworkGDPRNIS 2DORAAI ActWhistleblowing
Recital 44

Recital 44

Directive on the protection of persons who report breaches of Union law · UE 2019/1937

(44)

There should be a close link between reporting and the adverse treatment suffered, directly or indirectly, by the reporting person, for that adverse treatment to be considered to be retaliation and consequently for the reporting person to be able to enjoy legal protection in that respect. Effective protection of reporting persons as a means of enhancing the enforcement of Union law requires a broad definition of retaliation, encompassing any act or omission occurring in a work-related context and which causes them detriment. This Directive should not, however, prevent employers from taking employment-related decisions which are not prompted by the reporting or public disclosure.

Luxembourg specificity
loi luxembourgeoise du 16 mai 2023 relative a la protection des lanceurs d'alerte

In Luxembourg, the law of 16 May 2023 on the protection of whistleblowers adopts the broad definition of retaliation required by recital 44 and adds a strong procedural specificity: before the Labour Tribunal, as soon as the reporter establishes that they reported and suffered adverse treatment, the employer must prove that the decision rests on duly justified and prior grounds. An employer unable to demonstrate this anteriority faces criminal sanctions (fines of 1,250 to 25,000 EUR, doubled in case of recidivism) and full civil damages.

Luxgap practice: require that any adverse HR decision taken within 24 months of a report go through a formal review committee, with a timestamped prior rationale file, to effectively rebut the retaliation presumption.