The classic trap
Recital 48 sets the directive's structural threshold: 50 workers triggers the obligation to set up an internal reporting channel, regardless of the sector. The most common mistake is confusing 'average annual headcount' with a snapshot, or excluding fixed-term workers, temps and apprentices from the count. The Luxembourg OFRS and ITM audit this threshold based on actual figures, and an SME moving from 48 to 52 employees without deploying a channel immediately faces the criminal sanctions of the law of 16 May 2023.
Calculating the threshold: what really counts
- All employees under contract (permanent, fixed-term, apprentices, paid interns) count toward the 50.
- Temporary workers and contractors under hierarchical control are included under Luxembourg labour case law.
- The threshold applies per separate legal entity: a holding company and its subsidiary count separately, except for the pooling allowed by the directive for 50-249 workers.
- Durable threshold crossing (3 consecutive months in practice) triggers the obligation, not a one-off peak.
- Public entities are subject without any threshold in Luxembourg, including municipalities under 10,000 inhabitants unless national law exempts them.
The often-overlooked 'high-risk' angle
The recital allows Member States to lower the threshold for high-risk companies. In practice, this targets CSSF-regulated financial actors (already subject to their own whistleblowing obligations), NIS 2 critical operators, labs handling health data, and defence subcontractors. Even below 50 workers, a fintech or medtech must anticipate the internal channel because its sector will eventually qualify it.
How Luxgap automates this risk
Our Luxgap Headcount Threshold Monitor eliminates the grey zone around the 50-worker threshold by continuously monitoring your consolidated headcount and automatically triggering the deployment of the reporting channel as soon as the threshold is legally crossed. The tool connects directly to your payroll (Sage BOB 50, Cegid Quadra, SD Worx, Securex), to your temporary contracts (Adecco, Randstad, Manpower API) and to your ATS to reconstruct your real-time workforce as defined by the law of 16 May 2023, rather than by approximate accounting figures.
- Calculates consolidated headcount day by day, integrating permanent staff, fixed-term workers, apprentices, paid interns and temps under hierarchical control, following the official ITM grid.
- Alerts the DPO and HR via Teams or email as soon as headcount exceeds 45, so the channel can be deployed before the legal threshold is crossed.
- Detects durable crossing (3 consecutive months above 50) and automatically launches the compliance procedure with a retroplanning aligned with OFRS deadlines.
- Identifies group entities potentially subject separately and suggests the pooling scenario for subsidiaries between 50 and 249 workers.
- Produces a timestamped PDF report, enforceable before the OFRS and ITM, proving the exact crossing date and the timely deployment of the channel.
- Monitors sector-specific risk indicators (CSSF regulation, NIS 2 classification, CNPD registration) to anticipate qualification below 50 workers.
Available as a complement to a Luxgap DPO or CISO mandate or as a dedicated SaaS module depending on your scope. Request a personalised quote and our team will prepare a demonstration based on your real payroll data, with a free 48-hour blind audit to measure your threshold exposure before any commitment.
