Communicating the code, risk plan and channel

1. Regulatory Concept & Core Standards

This video focuses on how to help people find and use organisational instruments. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. Training should help each role apply the entity's policies and procedures. This proposed programme links content to risks and actual national duties. A generic catalogue needs a connection to the code and channel people will use.

A published file does not itself provide understandable instructions. Explain purpose, location and action. Article 12 requires clear, accessible internal-reporting information, including on an existing website and visibly at work premises. Do not promise unconditional anonymity: anonymous reports do not initiate proceedings under this Act.

Apply the following rule: The Commission for Personal Data Protection, CPDP/KZLD, is the central external reporting body and coordinates checks with competent authorities. Article 11 permits internal reporting, external reporting or both; the internal priority and exceptions for retaliation risk or ineffective handling do not create a universal prohibition on direct external reporting. The amendment published on 5 June 2026 changes article 20(3) on public positions and the Commission for Counteracting Corruption. Check current powers and transitional rules; CPDP remains the central external body. Public disclosure has separate conditions under article 7.

2. Practical Implementation & Procedure

Choose appropriate methods and check links. Explain internal and external reporting and protection conditions. Test access for contractors and people outside the intranet. Describe the risk plan as the organisation’s applicable instrument rather than a universally mandatory Bulgarian model. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A campaign advertises the channel, but the printed link requires intranet access unavailable to contractors. An external-user test identifies the barrier. The team corrects access and adapts the message to its audience. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: What simple test shows whether communication works? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Ask someone in the audience to find the instrument and explain its use. Include different roles and access conditions. Sending a message does not establish understanding or a functioning link.

One mistake to avoid is: measuring communication only by messages sent.

Now apply the national rule to a second decision. An advice page is presented as the sole destination for every report. What check is missing?

The recipient's powers and role must be confirmed. Advice, external receipt, investigation and protection may belong to different bodies. Also check the national conditions for the selected route. User information must help people find the correct procedure without requiring steps that do not exist in law.