Module Learning Objective

answer clarifications and communicate securely

1. Regulatory Concept & Core Standards

In this video we will consolidate a skill: answer clarifications and communicate securely. Use the case to test what you would do in a similar situation. We will explain the proposed response step by step so that you can understand each choice and recognise when more information would be needed. A reporting person need not establish a breach conclusively. Describe facts learned through work honestly and use an appropriate route. These examples cover preparation, secure submission and follow-up. Protection depends on Estonian statutory conditions.

Follow-up can clarify timing, documents or events. A person may honestly say they do not know. Feedback may omit other people’s investigation details because confidentiality limits disclosure, even while handling continues.

Apply the following rule: Under section 10, acknowledge receipt within seven days of receipt, subject to express prohibition by the reporter or confidentiality-risk exceptions. Section 11 requires follow-up feedback as soon as possible and within three months of receipt. External channels may use six months in justified cases. An authority lacking competence forwards promptly, no later than the fifth working day. Acknowledgement, follow-up feedback and final-outcome feedback are separate events.

2. Practical Implementation & Procedure

Use authorised communication and protect access credentials. Answer within your knowledge and identify new information and its source. For suspected retaliation, document events and find appropriate assistance or reporting routes. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

The handler asks when payment occurred. The person remembers the week but not the day and says so. A later document allows correction without concealing earlier uncertainty. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Should an unknown date be invented to answer a request? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Honest approximation is preferable to unsupported certainty. State what is known and add new information when lawfully available.

One mistake to avoid is: inventing missing facts to satisfy clarification.

Now apply the national rule to a second decision. The platform counts 90 days from opening in every country. Does this suit Estonia?

No. Acknowledgement is generally due within seven days of receipt. Follow-up is due within three months of receipt, or six months for a justified external-channel case. Apply statutory exceptions and distinguish working from calendar days. Three months is not always 90 days and opening does not replace receipt.

National Legal Framework: Rikkumisest teavitaja kaitse seadus, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.