You'll need secure reporting channels in place.
In other words somewhere secure for your employees and other people closely connected to your business to raise concerns about unethical behaviour.
The channels must meet several requirements set out in the Directive, such as guaranteeing anonymity, being easily accessible and meeting GDPR guidelines.
So you may simply need to refine your existing reporting procedures or implement an entirely new system. What do you need to do?
How to find out
Read our simple guide on how to Get Compliant and check whether you already meet the Directives requirements or discover what you need to do.