Does the whistleblowing obligation apply to financial undertakings with fewer than 50 employees?
Yes, for part of the financial sector the whistleblowing obligation applies even if you have fewer than fifty employees. The European whistleblowing directive designates a number of sectors separately, including parts of financial services and the prevention of money laundering. Organisations that fall under these designations must in practice often still establish a reporting channel, even if their staff numbers fall below the general threshold.
Whether this applies specifically to your undertaking depends on the type of licence or supervision under which you operate and how the directive has been transposed into national law in your country. This varies between Member States enough that it cannot be summed up in a single sentence; what applies to a small payment service provider in one country may be regulated differently for a comparable business elsewhere.
Why the financial sector is designated separately
The directive reasons not only from the number of employees, but also from the risk associated with a sector. Money laundering, investment product fraud and breaches of supervisory legislation can have significant consequences, even in a small organisation. For this reason, institutions subject to financial supervision, such as banks, investment firms, insurers and certain payment service providers, are in many cases exempted from the threshold of fifty employees.
This does not mean that every organisation with a connection to money or finance automatically falls under this rule. An accounting firm or an online shop with its own payment module is not a licensed financial institution. It specifically concerns parties that fall under supervisory legislation such as the AML Directive or comparable financial supervisory rules.
What this means in practice
For a small asset manager with, for example, twelve employees, this means that the general threshold of fifty employees does not automatically provide reassurance. Even with a small team, there may be an obligation to establish an internal reporting channel, with a procedure, a receipt deadline and a dedicated handler. The legal basis for this then lies not in staff numbers, but in the nature of the licence or supervisory regime.
The same pattern recurs in other sectors designated separately in the directive, such as parts of transport safety or environmental supervision. The logic is always comparable: the risk of the sector counts, not just the size of the organisation. If you are active internationally, the precise scope may also differ per location country.
How to verify this for your situation
Because the scope varies by sector and country, it is wise not to rely solely on staff numbers. A first step is to determine which supervisory regime your undertaking falls under and whether that regime is specifically mentioned in the national implementation of the directive. You can check in a few questions whether this applies to your organisation, without needing an account.
For the precise scope of sectors and the location in the official text, you can read the explanation per sector in the knowledge base. You will also find there where the information comes from, so that you can check it yourself. You can see how this works via an explanation of how we keep the information traceable.
If you still have doubts about your own situation after reading, that is not something that can be resolved with a checklist alone. The classification of supervisory regimes and transposition by country requires tailored solutions. A lawyer or the supervisor in your sector can answer that question definitively; signalo.eu structures and monitors the process once it is established that a channel is required, but does not determine whether the obligation applies in your specific case.
If the obligation does apply
If your organisation is subject to this guideline, the same requirements apply as for any other employer with reporting obligations: a written procedure, the possibility of reporting anonymously or verbally, a designated handler and the two statutory time limits for acknowledgement of receipt and feedback. The number of staff does not change this; it only determines via which route you fall under the obligation, the general threshold or the sectoral guideline.
Are you curious whether your organisation falls under one of these exceptions, or would you first like to read more broadly about what situations the reporting obligation entails? Do the free quick-scan or read the answers to similar questions before you take further steps.