Module Learning Objective

assess whether there is enough information to begin checks

1. Regulatory Concept & Core Standards

Today we will learn to assess whether there is enough information to begin checks. Throughout the video, consider the difference between knowing a rule and applying it to a decision. We will work through an example, identify a possible failure and develop a response that can be used at work. Triage organises the initial response without replacing investigation. It determines who should assess the case, what information is missing and which measures cannot wait. Intake must remain protected even before a conclusion on the report's legal classification.

The threshold for beginning an assessment differs from that for concluding that a breach occurred. A short report may identify a verifiable document, date or process. A lengthy report may contain only vague opinions. Anonymity does not remove the value of the facts. The team should focus on the quality and verifiability of information.

Apply the following rule: The Act covers specified breaches of EU law and other serious offences or serious matters. An ordinary workplace disagreement is not automatically covered. Assess seriousness and the exclusions in section 1. Protection requires, among other conditions, reasonable grounds to believe the information was correct and within scope when reported.

2. Practical Implementation & Procedure

Create an allegations table. For each allegation, record the fact described, the source mentioned, the verifiable element and the gap. Request specific clarification where secure contact is available. Avoid automatic criteria such as a minimum number of attachments. If information is insufficient, document why and what would allow reassessment. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A four-line anonymous report identifies a contract and an approval changed on a specific day. Another, identified report merely says that management does suspicious business. The first provides a more verifiable starting point, although neither immediately establishes a breach. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Which communication provides a better basis for an initial check, and why? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Missing identification is not the same as missing useful information. Assess the facts and the actual scheme’s rules. Danish law does not impose a universal internal duty to process anonymous reports, but other duties may apply, particularly to public workplaces. Document the reasoned handling decision.

One mistake to avoid is: confusing an account's factual usefulness with compliance with national identity and protection requirements.

Now apply the national rule to a second decision. A report is automatically classified as protected because it contains the word corruption. What check is missing?

Read the facts and apply the national scope, context and conditions for protection. A form label helps organise information but does not determine the legal framework. If the case falls outside the regime, identify an appropriate route without unnecessarily disclosing information.

National Legal Framework: Lov om beskyttelse af whistleblowere, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.