Prevention and monitoring measures

1. Regulatory Concept & Core Standards

This video focuses on how to arrange proportionate protective action. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. Trust depends on identity protection and appropriate handling of pressure. Anonymity differs from confidentiality. Estonian law prohibits specified direct or indirect work-related harm connected with reporting, including threats and attempts.

Prevention may involve management awareness, restricted access and checking sensitive personnel changes. Measures should fit the situation and avoid identifying the reporter. General surveillance is not automatically justified. Consider the affected person’s needs.

Apply the following rule: Section 4(4) permits direct external reporting. Under section 6, competence follows the relevant statutory supervisory or offence-procedure powers. No authority handles every subject. Public disclosure requires the separate section 12 conditions. Using a technology provider does not turn an employer channel into an official external channel.

2. Practical Implementation & Procedure

Provide a secure contact and route for pressure concerns. Check relevant changes, reasons and conflicts proportionately. Limit data and review measures when risk changes. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A protection plan is circulated to an entire department, revealing identity. Revised arrangements use a limited team, neutral communication and checks of relevant changes only. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does a protective purpose justify widespread naming? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Protection must respect confidentiality. Disclosures require necessity and a legal basis, using less identifying options where suitable.

One mistake to avoid is: revealing identity through the protection plan itself.

Now apply the national rule to a second decision. An advice page is listed as the only recipient for every report. What needs verification?

Check the recipient’s powers over the particular breach and official reporting method. Advice, intake and investigation may differ. Section 4(4) permits external reporting without prior internal reporting. Public-disclosure conditions remain separate.