Since July 2023, Germany has a dedicated whistleblower-protection statute: the Hinweisgeberschutzgesetz (HinSchG), implementing the EU Whistleblowing Directive. Its core promise for employees is remarkable: if you suffer any detriment after making a protected report — dismissal, warning, demotion, exclusion — the law presumes it is retaliation, and the employer must prove otherwise (§ 36 HinSchG). That burden-of-proof reversal turns cases that used to be nearly unwinnable into strong ones. For expats, who frequently work in compliance-sensitive sectors and are often the ones who notice irregularities, the HinSchG is worth understanding before you ever need it — because the protection depends on reporting through the right channels.
What the HinSchG covers
The HinSchG protects people who report or disclose information about violations they learned of in a work-related context. The material scope (§ 2 HinSchG) includes:
- All criminal offences under German law.
- Fine-backed violations (Ordnungswidrigkeiten) where the violated rule protects life, health or the rights of employees or their representative bodies — this pulls in large parts of occupational safety, working-time and minimum-wage law.
- Violations of specified German and EU rules in areas such as money laundering, product safety, environmental protection, food safety, data protection, financial services, public procurement, consumer protection and corporate tax arrangements.
What is not covered: purely interpersonal grievances without a law violation. If your issue is bullying or a conflict with your manager, other instruments apply — for example the Maßregelungsverbot of § 612a BGB or the AGG — but not the HinSchG.
Where to report: internal and external channels
Internal reporting channels
Companies with 50 or more employees must operate an internal reporting channel (Meldestelle). It must allow confidential reports in writing or orally, confirm receipt within 7 days, and give feedback on follow-up measures within 3 months. Larger groups often run one channel for several entities; many outsource it to law firms or ombudspersons.
External reporting channels
The central external reporting office sits at the Bundesamt für Justiz (BfJ); specialised channels exist at BaFin (financial sector) and the Bundeskartellamt (competition). External reports enjoy exactly the same protection as internal ones.
You choose — there is no “internal first” rule
The HinSchG lets you pick internal or external reporting freely (§ 7 HinSchG). The statute merely says employees should prefer internal channels where the violation can be addressed effectively internally and no reprisals are feared — a non-binding preference, not a condition of protection. Going public (media, social networks) is different: public disclosure is protected only under narrow conditions (§ 32 HinSchG), essentially where external reporting failed or imminent danger exists. Do not go to the press without legal advice.
The reprisal ban and the burden-of-proof reversal (§ 36 HinSchG)
Reprisals against whistleblowers are prohibited — the term covers every work-related detriment: dismissal, non-renewal, Abmahnung, denied promotion, changed duties, reduced hours, exclusion from training, negative reference, harassment.
The decisive mechanism: if you suffer a detriment after a report, and you claim it is retaliation, the law presumes the detriment is a reprisal. The employer must then prove that the measure was based on sufficiently justified independent grounds — a heavy burden in practice, especially where the timing is tight and the paper trail is thin. Violations trigger damages liability (§ 37 HinSchG); the employer owes compensation for the resulting loss.
Anonymous reporting
Anonymous reports are permitted, and reporting offices are expected to process them; however, there is no strict obligation to design channels so that anonymous two-way communication is always possible. Practical reality: anonymity protects you only as long as it holds. If the report’s content points to you — because only you had the data — plan as if you will be identified, and document everything from day one.
Whistleblowing and dismissal: how the pieces fit
A dismissal following a protected report is where the HinSchG shows its teeth. The retaliation presumption of § 36 HinSchG flows directly into the dismissal-protection case: the employer must show the dismissal rests on genuinely independent grounds. Combined with the usual KSchG requirements, a post-report dismissal is often indefensible — which translates into voiding the dismissal or, more commonly, a settlement far above standard severance levels.
The limits: honest mistake yes, knowing falsehood no
Protection requires that, at the time of the report, you had reasonable grounds to believe the information was true and fell within the HinSchG’s scope. You are protected if you turn out to be honestly wrong. You are not protected if you report knowingly false information — that exposes you to damages liability towards the employer (§ 38 HinSchG) and fines, and it can justify dismissal. Grossly distorted or purely tactical “reports” filed to build leverage in an existing dispute are dangerous territory; get advice before filing anything you may need to defend later.
Worked example
Quality engineer at a 220-employee machinery manufacturer near Bonn, 4 years’ tenure, gross salary €5,500/month. He discovers that test protocols for a safety-critical component are being altered before submission to the certification body, raises it with his manager, is told to “focus on his own tasks”, and then files a documented report through the company’s internal Meldestelle.
Six weeks later he receives an ordinary dismissal “for operational reasons” — his position is allegedly being eliminated, while a colleague with 18 months’ tenure in the same function stays on.
Strategy and outcome:
- Kündigungsschutzklage filed on day 12, well within the three-week deadline.
- The claim invokes § 36 HinSchG: dismissal within weeks of a documented report — presumed retaliation, and additionally void under § 612a BGB.
- The employer must now prove independent grounds. Its “role elimination” story collapses: the social selection ignores the junior colleague, and internal e-mails show the restructuring plan post-dates the report.
- Standard severance expectation for 4 years at this salary would be around 0.5–0.7 monthly salaries per year (€11,000–€15,400 — see severance calculation).
- Settlement: €33,000 (1.5 monthly salaries per year), 6 months’ garden leave on full pay, a Grade-1 reference and a neutral communication line. The certification issue is separately reported externally to the competent authority.
Frequently asked questions
Does the HinSchG protect me if I complain about my own treatment?
Only if your complaint reports a violation within the HinSchG’s scope — for example unpaid minimum wage or safety violations. A pure interpersonal conflict is not a HinSchG matter; there, § 612a BGB (Maßregelungsverbot) and the AGG are the relevant shields.
My company has fewer than 50 employees and no internal channel. Am I unprotected?
No. The 50-employee threshold only governs who must operate an internal channel. You can always report externally to the Bundesamt für Justiz and enjoy full HinSchG protection, whatever your employer’s size.
Do I have to report internally before going to the authorities?
No. Internal and external channels are equally protected, and you choose freely. The only sharply restricted route is public disclosure to the media — that requires the specific conditions of § 32 HinSchG.
What exactly counts as a reprisal?
Any work-related detriment: dismissal, Abmahnung, transfer to worse duties, denied promotion or pay rise, reduced bonus, exclusion from projects or training, negative reference, ostracism tolerated by the employer. The breadth matters because the § 36 presumption attaches to all of them, not just dismissal.
I reported something that turned out to be wrong. Am I in trouble?
Not if you had reasonable grounds to believe it was true when you reported it — honest error is protected. Only knowingly false reports strip protection and create liability. Keep the documents that show why your belief was reasonable at the time.
Should I report anonymously to be safe?
Anonymity is legitimate but fragile — content often identifies the source. Frequently the stronger play is a documented, attributable report through the proper channel, because it timestamps your protected status and makes the § 36 presumption easy to invoke later. Which route fits your situation is worth a short legal consultation before you file.