The Whistleblower Act – formally the "Whistleblower Protection Act" – exists so that anyone who discovers serious wrongdoing in their workplace will have the courage to speak up without being punished for it. The law is based on an EU directive and applies throughout Sweden.

Which companies are covered by the Whistleblower Act?

The short answer:all employers with 50 or more employeesmust have internal channels for whistleblowing. This applies to both private companies and public organisations. If you have fewer than 50 employees, you are not obliged by law, but many still choose to introduce a channel to build trust and catch problems early.

An important detail: the requirement is calculated per employer (organization number), not per workplace. If you have 50 employees spread over several offices, you are still covered.

What does the law specifically require?

The law sets several clear requirements on how a whistleblower function should work. The most important are:

  • A secure reporting channel:employees must be able to report in writing, orally or at a physical meeting if they request it.
  • Protection of identity:the whistleblower's identity must not be revealed to unauthorized persons. This is the essence of the whole law.
  • Confirmation within 7 days:the person reporting must receive confirmation that the case has been received within seven days.
  • Feedback within 3 months:the whistleblower must receive feedback on what happens in the matter within three months.
  • Appointed, independent persons:those handling the cases must be impartial and must not have conflicts of interest.
  • Prohibition of retaliation:it is forbidden to punish, threaten or otherwise harm the person who raises the alarm.
Anyone who violates the requirements – or exposes a whistleblower to reprisals – risks both damages and the intervention of the supervisory authority. This is therefore not a "nice to have", but a legal requirement.

What can you blow the whistle on?

The law protects reporting of wrongdoing that there is a public interest in its disclosure – for example, bribery, financial crime, serious safety deficiencies, environmental hazards or breaches of rules protecting consumers. On the other hand, pure personal conflicts or dissatisfaction with the salary are not normally covered.

How do I introduce a whistleblower function - step by step?

Living up to the law doesn't have to be complicated if you take it step by step:

  • 1. Select a secure channel.Most choose a digital whistleblower portal where reports are encrypted and the whistleblower can remain anonymous. It is difficult to meet the requirements for security and traceability with only one e-mail box.
  • 2. Appoint responsible persons.Decide who will receive and investigate cases, and ensure that they are independent.
  • 3. Write clear routines.Document how a matter is received, confirmed, investigated and responded to - with the time frames built in.
  • 4. Inform the staff.All employees must know that the channel exists and how it is used. A channel that no one knows about serves no purpose.
  • 5. Manage data protection (GDPR).As cases often contain personal data, handling must comply with data protection regulations.

Digital portal or manual handling?

In theory, a small business can handle whistleblowing manually, but in practice a digital portal is almost always the safe choice. A good portal automatically takes care of the things that are easy to miss: anonymity, encryption, confirmation within 7 days, reminders about the three-month deadline and a traceable log if the regulator ever asks questions. It reduces both the risk of mistakes and the administrative burden.

Get started safely with ZORC

ZORChelps Swedish companies introduce a secure whistleblower portal that meets the law's requirements - from a technical solution with encryption and anonymity to routines and GDPR adaptation. We build it so that it fits your organization and is easy to manage. Do you want to know what is required for your particular company, or how quickly you can be up and running?Get in touch and we'll go through it together.