Security Alert

The long-awaited Joint Ministerial Decision (the “JMD”) specifying the procedure of reporting, receiving and following up on whistleblowing reports has now been published.
As a reminder and as previously reported (here), certain private entities, including private sector entities having 50 to 249 employees must, at the latest by 17.12.2023, appoint an Officer who will receive and manage whistleblowing reports (internal reporting channel); a relevant policy must be put in place and employees and other concerned persons must be informed about the existence of a whistleblowing scheme and processing of personal data in this context.
The JMD is now specifying certain matters on the internal reporting procedure provided for by Law 4990/2022 on the protection of persons who report breaches of EU law (the “Law”), while leaving other (practical) issues unresolved.
How to make a report
The JMD includes:
How to receive a report
The JMD clarifies certain aspects regarding the receipt of a report by the Officer, importantly regarding:
How to manage a report
The JMD offers clarifications on:
How to follow up on a report
The JMD clarifies how the Officer follows up on reports to provide feedback to a reporting person, also introduces an obligation for the competent examination committee or the competent public authority, which investigates the report, to inform the Officer regarding the actions taken in this context.