I need to bring my Luxembourg organisation into compliance with recital 95 of Whistleblowing (UE 2019/1937). What are the concrete requirements, the sanctions, and how can Luxgap support me?

Recital 95 Whistleblowing — Recital 95

EU frameworkGDPR NIS 2 DORA AI ActWhistleblowing

CSSF circularsCSSF 22/806 CSSF 25/883 CSSF 25/880 CSSF 25/881 CSSF 25/882 CSSF 20/750 CSSF 12/552 CSSF 11/504 (repealed)CSSF 24/847

Recital 95

Directive on the protection of persons who report breaches of Union law · UE 2019/1937

(95)

While the types of legal action may vary between legal systems, they should ensure that compensation or reparation is real and effective, in a way which is proportionate to the detriment suffered and is dissuasive. Of relevance in this context are the Principles of the European Pillar of Social Rights, in particular Principle 7 according to which ‘Prior to any dismissal, workers have the right to be informed of the reasons and be granted a reasonable period of notice. They have the right to access to effective and impartial dispute resolution and, in case of unjustified dismissal, a right to redress, including adequate compensation.’. The remedies established at national level should not discourage potential future whistleblowers. For instance, providing for compensation as an alternative to reinstatement in the event of dismissal might give rise to a systematic practice, in particular by larger organisations, thus having a dissuasive effect on future whistleblowers.

Luxembourg specificity

loi luxembourgeoise du 16 mai 2023 relative a la protection des lanceurs d'alerte

In Luxembourg, the law of 16 May 2023 on the protection of whistleblowers translates the spirit of recital 95 into concrete sanctions: criminal fines of 1,250 to 25,000 EUR (doubled in case of recidivism) against retaliation, combined with civil compensation covering the full prejudice. The labour court may order the reinstatement of an employee dismissed in retaliation, and both the ITM and the OFRS may be seized in parallel.

Luxgap practice: never offer a mutual termination agreement as the first response to a Luxembourg whistleblower case, document in writing the serious examination of reinstatement before any negotiation, and have any adverse HR decision on a protected profile validated by a committee independent from the manager involved.

Luxgap guidance · DPO & CISO

How to comply

The classic trap

Recital 95 sends a strong signal to judges and employers: turning the sanction for retaliation into a simple settlement cheque defeats the purpose of the directive. In practice, an employer who dismisses a whistleblower and systematically offers financial compensation rather than reinstatement risks requalification by the Office des rapports de signalement (OFRS) and the ITM, with criminal exposure on top of civil liability. The legislator's logic is clear: redress must be real, effective, proportionate and dissuasive, not a cost of doing business.

How this recital shapes concrete implementation

Document every measure taken against an employee who reported: objective ground, anteriority, internal comparables. Lack of traceability shifts the burden of proof onto the employer (article 21 of the directive).
Avoid the systematic buy-out practice: settling without serious examination of reinstatement can be read as a dissuasive scheme and sanctioned.
Implement an internal post-report protection protocol: freeze adverse HR decisions during the investigation, validate them through an independent committee bypassing the manager involved.
Calibrate compensation on the full prejudice: loss of income, professional reputation, moral damage, legal costs, loss of career opportunity.
Train in-house counsel and external lawyers not to default to a mutual termination agreement as the standard exit route in a whistleblower case.

How Luxgap automates this risk

Our Luxgap Retaliation Shield makes silent retaliation impossible by continuously monitoring every employee flagged as a whistleblower and triggering an instant alert as soon as an adverse HR decision appears in your systems. The tool natively connects to your HR sources (Sopra HR Suite, Workday LU, SD Worx, Sage BOB 50 payroll), your Active Directory and your ticketing tools to correlate in real time the protected status with any change to role, salary, review, logical access or disciplinary procedure.

Automatically detects every adverse HR action (demotion, bonus cut, transfer, access removal, downgraded review) occurring within 24 months after a registered report.
Computes a retaliation risk score by cross-referencing the anteriority of decisions, comparables on the same role and the history of the manager involved.
Instantly alerts the DPO, the ethics committee and the legal department via Teams or email as soon as a decision crosses the critical threshold, before execution.
Generates a defence file ready to be produced before the ITM, the OFRS or the labour court: timestamped chronology, screenshots of decisions, anonymised comparables, evidence of report anteriority.
Simulates the real cost of a conviction (full compensation + criminal penalties 1,250 to 25,000 EUR + reputation) to objectify the reinstatement vs settlement trade-off.
Produces a quarterly cryptographically sealed report, enforceable during an OFRS audit, demonstrating the effectiveness of your anti-retaliation framework.

Available as a complement to a Luxgap DPO or CISO mandate or as a dedicated SaaS brick depending on your scope. Request a tailored quote and our teams will prepare a demonstration on your real HR perimeter, with a free 48-hour blind audit to measure your exposure to silent retaliation before any commitment.

Need help with this article?

Our team (lawyers + cyber engineers) gives you the concrete stuff. Reply within 24 business hours.

Recital 95

They trust us

Before we chat