{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"Whistleblowing Annual Report (Directive (EU) 2019/1937)","description":"Annual report on the operation of the internal reporting channel established under Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law. Legal entities in the private sector with 50 or more workers (Art. 8(3)) and public-sector entities (Art. 8(1), Art. 8(9) — Member States may exempt municipalities below 10 000 inhabitants or entities below 50 workers) are required to establish internal reporting channels, follow up on reports, provide acknowledgement within 7 days (Art. 9(1)(b)) and feedback within 3 months (Art. 9(1)(f)), and keep records of every report (Art. 18(1)). This template produces the aggregate statistics and procedural review summary that controllers customarily publish annually to evidence compliance with Articles 8, 9, 17 and 18 of the Directive and the corresponding national transposition.","type":"object","required":["entity","period","reporting_channels","officer","statistics","retaliation_protection","approval"],"additionalProperties":false,"properties":{"entity":{"type":"object","description":"Legal entity that operates the internal reporting channel (Art. 8(1) Directive (EU) 2019/1937).","required":["name","legal_form","country_code","employee_count"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"legal_form":{"type":"string","minLength":1},"country_code":{"type":"string","pattern":"^[A-Z]{2}$","description":"ISO 3166-1 alpha-2 code of the Member State in which the entity is established."},"employee_count":{"type":"integer","minimum":0,"description":"Number of workers at the end of the reporting period. Art. 8(3) applies the internal-channel obligation from 50 workers upward; Member States may extend to smaller entities under Art. 8(7)."},"registered_address":{"type":"string"}}},"period":{"type":"object","description":"Reporting period, typically the calendar year.","required":["start_date","end_date"],"additionalProperties":false,"properties":{"start_date":{"type":"string","format":"date"},"end_date":{"type":"string","format":"date"}}},"reporting_channels":{"type":"array","minItems":1,"description":"Internal reporting channels made available to reporting persons (Art. 9(2) Directive (EU) 2019/1937). Channels must allow reporting in writing, orally, or both, and ensure confidentiality of the identity of the reporting person and of any third party mentioned.","items":{"$ref":"#/$defs/channel"}},"officer":{"type":"object","description":"Impartial person or department designated under Art. 8(5) Directive (EU) 2019/1937 to receive reports, maintain communication with the reporting person, request additional information and provide feedback.","required":["name","title","contact_email"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"title":{"type":"string","minLength":1},"contact_email":{"type":"string","format":"email"}}},"statistics":{"type":"object","description":"Aggregate statistics on reports received and handled during the period. Records maintained per Art. 18(1) Directive (EU) 2019/1937.","required":["reports_received","reports_by_channel","reports_by_category","reports_anonymous","reports_external_authority_concurrent","acknowledged_within_7_days","feedback_within_3_months","investigations_opened","investigations_closed","investigations_pending_eoy","outcomes"],"additionalProperties":false,"properties":{"reports_received":{"type":"integer","minimum":0},"reports_by_channel":{"type":"array","description":"Breakdown of reports by channel type. Counts should sum to reports_received.","items":{"type":"object","required":["channel_type","count"],"additionalProperties":false,"properties":{"channel_type":{"$ref":"#/$defs/channel_type"},"count":{"type":"integer","minimum":0}}}},"reports_by_category":{"type":"array","description":"Breakdown by material scope category (Art. 2(1) Directive (EU) 2019/1937).","items":{"type":"object","required":["category","count"],"additionalProperties":false,"properties":{"category":{"type":"string","enum":["public_procurement","financial_services","product_safety","transport_safety","environment","radiation_safety","food_feed_safety","animal_welfare","public_health","consumer_protection","privacy_data_protection","network_info_security","financial_interests_eu","internal_market","other"]},"count":{"type":"integer","minimum":0}}}},"reports_anonymous":{"type":"integer","minimum":0,"description":"Reports submitted anonymously (Art. 6(2) Directive (EU) 2019/1937)."},"reports_external_authority_concurrent":{"type":"integer","minimum":0,"description":"Reports for which the reporting person also used the external channel under Art. 10 Directive (EU) 2019/1937."},"acknowledged_within_7_days":{"type":"integer","minimum":0,"description":"Reports acknowledged within 7 days as required by Art. 9(1)(b) Directive (EU) 2019/1937."},"feedback_within_3_months":{"type":"integer","minimum":0,"description":"Reports for which feedback was provided within 3 months as required by Art. 9(1)(f) Directive (EU) 2019/1937."},"investigations_opened":{"type":"integer","minimum":0},"investigations_closed":{"type":"integer","minimum":0},"investigations_pending_eoy":{"type":"integer","minimum":0},"outcomes":{"type":"array","description":"Outcomes of investigations closed during the period.","items":{"type":"object","required":["outcome","count"],"additionalProperties":false,"properties":{"outcome":{"type":"string","enum":["substantiated_action_taken","partially_substantiated","unsubstantiated","insufficient_evidence","forwarded_to_authority","withdrawn"]},"count":{"type":"integer","minimum":0}}}}}},"retaliation_protection":{"type":"object","description":"Measures adopted to prohibit and address retaliation against reporting persons (Chapter VI, in particular Art. 19 Directive (EU) 2019/1937).","required":["incidents_alleged","incidents_confirmed","measures_taken"],"additionalProperties":false,"properties":{"incidents_alleged":{"type":"integer","minimum":0},"incidents_confirmed":{"type":"integer","minimum":0},"measures_taken":{"type":"array","minItems":1,"items":{"type":"string","minLength":1}}}},"system_changes":{"type":"array","description":"Procedural or policy updates made during the period based on learnings from reports handled.","items":{"type":"string","minLength":1}},"approval":{"type":"object","description":"Approval of the annual report by the management body.","required":["approved_by","title","date"],"additionalProperties":false,"properties":{"approved_by":{"type":"string","minLength":1},"title":{"type":"string","minLength":1},"date":{"type":"string","format":"date"}}}},"$defs":{"channel_type":{"type":"string","enum":["written_online","written_postal","oral_phone","oral_in_person","external_authority","anonymous"],"description":"Channel type under Art. 9(2) Directive (EU) 2019/1937: written_online (secure web platform), written_postal (post), oral_phone (dedicated phone or voicemail), oral_in_person (physical meeting within a reasonable time), external_authority (signposting to the competent authority under Art. 11), anonymous (channel explicitly accepting anonymous reports where the Member State so provides per Art. 6(2))."},"channel":{"type":"object","required":["type","description"],"additionalProperties":false,"properties":{"type":{"$ref":"#/$defs/channel_type"},"description":{"type":"string","minLength":1}}}}}