Whistleblower policy

This policy covers reports of breaches of law covered by the Act and breaches of internal rules. The persons eligible to make reports are those specified in the Act, including employees, candidates, former employees, contractors and persons performing work on another basis.

We maintain an internal reporting channel that ensures the confidentiality of the identity of the reporting person, the person concerned by the report, and any third parties named in the report. We acknowledge receipt of a report within 7 days of receiving it and provide feedback on follow-up action within a period not exceeding 3 months. The obligation to establish an internal reporting procedure applies to entities for which at least 50 persons perform work; regardless of this threshold, we provide reporting persons with the protection required by the Act.

Regardless of the internal channel, a reporting person may make an external report to the Commissioner for Human Rights or to the competent public authority, and, in cases provided for by the Act, make a public disclosure, on the terms set out in it.

Retaliation against whistleblowers and persons associated with them is prohibited. We provide protection in accordance with the Act.

We maintain a register of internal reports and process the data it contains in accordance with the Act and the GDPR, for the period specified in it.