The Netherlands' whistleblower law, the Wet bescherming klokkenluiders

The Wet bescherming klokkenluiders is the Dutch whistleblower law. It protects people who report wrongdoing at work. It brings EU Directive 2019/1937 into Dutch law. It rewrote the older Wet Huis voor klokkenluiders and has been in force since 18 February 2023. The law sets duties for employers, fixed deadlines for handling a report, and strong protection against reprisals. One part still sits on the shelf. The fines are written into the law, but they have not been switched on yet. Below we explain who it covers, what you must set up, and how the protection works in practice.

Who must comply with the Wet bescherming klokkenluiders?

In the private sector the duty starts at 50 people. Every employer with 50 or more employees must have an internal reporting procedure. Firms in regulated sectors, such as financial services, are covered at any size. Their own EU rules drop the threshold.

The public sector is covered across the board. Government bodies, provinces, and municipalities all fall under the law. Small public employers are not let off the way the directive allowed for small towns. So a village council and a national ministry carry the same duty.

Mid-size firms were given more time. Large employers with 250 or more people had to comply from the day the law took effect. Private employers with 50 to 249 employees had until 17 December 2023. Those smaller firms may also share resources and staff to handle reports.

How do you set up the internal reporting procedure?

The internal channel is the first port of call. The law treats it as the natural route when the problem can be solved inside the organisation without risk to the reporter. It must be open to employees and to the wider circle around the firm. That includes the self-employed, trainees, and people working for suppliers.

The procedure has to meet several rules:

• accept reports in writing and by phone, and in a face-to-face meeting on request;
• send the reporter an acknowledgement within 7 days;
• give feedback within 3 months on the assessment and any follow-up;
• appoint an impartial person or team to handle reports and follow them up;
• keep the reporter's identity confidential and record reports in a dedicated register;
• let staff report to an external authority as well, and tell them how.

The works council has a say. Setting up or changing the procedure needs the consent of the works council (ondernemingsraad), so this is not a document you can quietly file away. One duty is still dormant: the obligation to handle anonymous reports is written into the law but has not yet been switched on, pending further regulation.

The procedure is not the same as the tool. The rules describe a process; the working system behind it must stay reliable, keep the data safe, and control who can open a report. Wemoral, as a whistleblowing system, covers those needs, so you can roll it out without building a channel from scratch. If you are starting from zero, we help with a policy template and a guide to set up the system.

What can you report?

The law uses a broad idea of wrongdoing. The Dutch term is misstand. Through the internal procedure or an external authority you can report:

• breaches of European Union law that fall under Directive 2019/1937;
• an act or omission that harms the public interest, where a legal rule is broken or where there is danger to public health, safety, or the environment;
• the same kind of danger inside an organisation, even where no single rule has been broken yet.

Some matters sit outside the law. It does not override national security rules, the professional secrecy of lawyers and doctors, the secrecy of judicial deliberations, or criminal procedure. A pure personal grievance, with no wider public interest, is not a misstand either. Fraud, a cover-up of safety failures, and the misuse of public money are the kind of cases the law has in mind.

Who is protected?

Protection reaches well beyond the person on the payroll. A reporter (melder) is anyone who learns about wrongdoing through their work and reports or discloses it. We set this out in full in our piece on who is a whistleblower. Under the law it can be:

• the employee, current or former;
• the self-employed person and the contractor;
• the volunteer, trainee, and intern, paid or unpaid;
• the job candidate who learned the facts while applying;
• shareholders and members of a management or supervisory body;
• people working for suppliers and subcontractors.

The shield also covers those caught in the blast radius: a colleague who helps the reporter, a connected third party such as a relative, and the person inside the firm who handles the report.

How are whistleblowers protected?

The heart of the law is the ban on reprisals. Protection starts from the moment of the report or the public disclosure. There is one condition: the reporter must have had reasonable grounds to believe the information was true at the time, and that it concerned a misstand covered by the law.

Ban on disadvantage

An employer may not disadvantage a reporter. The Dutch term is benadeling, and the law lists it broadly: dismissal, suspension, demotion, a withheld promotion, a worse appraisal, a cut in pay, a transfer, intimidation, exclusion, or a damaged reputation. The ban also covers the threat or attempt to do any of these. The report does not have to be proved right. The reporter only needs a fair reason to believe it was true.

Reversal of the burden of proof

The reporter does not have to prove the link. Once someone has reported by the book and then suffered harm, the harm is presumed to be a reprisal. Now the employer has to prove the opposite. It must show the action had nothing to do with the report.

"If a reporter is disadvantaged during or after the handling of a report to the employer, a competent authority, or another competent body, or after a public disclosure, the disadvantage is presumed to be the result of the report or the disclosure."
Article 17eb of the Wet bescherming klokkenluiders

Reporting routes

The law gives a reporter three routes for the same wrongdoing:

Several authorities take external reports. The right one depends on the subject. An external authority confirms a report within 7 days and gives feedback within 3 months, a period it may extend once by another 3 months.

What happens to employers who break the rules?

This is where the Dutch law is unusual. It names sanctions for an employer who has no procedure, ignores a recommendation, or punishes a reporter. The investigation arm of the House for Whistleblowers could impose fines and penalty payments. But these powers were left out of the part that started in 2023. They wait on new rules. Through 2025 the government was still working out how to switch them on.

For now, enforcement runs on two tracks. The House for Whistleblowers can investigate the wrongdoing and the way a reporter was treated. It can then publish its findings and recommendations, but it cannot fine. The real bite sits in the civil courts. A reporter can challenge a dismissal or other reprisal, lean on the reversed burden of proof, and claim compensation. A dismissal that breaks the ban can be undone or turned into damages.

The Wet bescherming klokkenluiders is in force today, so any employer over the threshold should already have its internal procedure running. The missing fines do not make the duty optional. They only delay one form of pressure, while the civil route stays wide open. To see how the Dutch rules sit next to the rest of Europe, browse our list of whistleblowing laws by country. Setting up the channel early is still the cheapest way to stay on the right side of the law.