Module Learning Objective

produce proportionate findings and appropriate case communications

1. Regulatory Concept & Core Standards

This video focuses on how to produce proportionate findings and appropriate case communications. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. The organisation, people and events are entirely fictional. Horizonte Equipamentos employs 120 workers and operates an internal channel. Five episodes follow a procurement report and turn its findings into preventive improvements.

The report establishes changed criteria without the required control and weaknesses in interest declarations. Evidence does not establish every favouritism allegation. Competent bodies decide responsibilities and any authority referrals under applicable procedures. Feedback must explain follow-up without disclosing information that cannot be shared.

Apply the following rule: Internally, acknowledge receipt within seven days and give information on measures within three months from sending the acknowledgement; if none was sent, calculate three months from expiry of the seven-day period. Section 17 exempts anonymous internal reports from acknowledgement and feedback under section 16(2). Externally, the Chancellor of Justice’s Office normally acknowledges within seven days, subject to the statutory exceptions for the person’s request and identity protection. The competent authority gives feedback within three months, or at most six months for a justified reason, from its own receipt of the report, and communicates the final outcome. Feedback is not necessarily the end of an investigation.

2. Practical Implementation & Procedure

The team prepares findings by allegation, limitations and proposed measures. It tracks the measures-feedback deadline and any final-outcome request. Owners are assigned for procedure review, interest management and change approval. Retention and restricted access continue. Management receives enough to decide without indiscriminate identity access. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Feedback explains document assessment, identified weaknesses and corrective measures with suitable reasons. It omits complete interviews and employment data about people concerned. The file preserves the actual communication and date. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Must communicating an outcome include the complete internal report and all attachments? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Not automatically. Meet the applicable information duty while respecting confidentiality, data protection and third-party rights. Assess suitable contents rather than forwarding the entire file.

One mistake to avoid is: using confidentiality to justify an empty reply or, at the other extreme, disclosing everything.

Now apply the national rule to a second decision. The platform uses a fixed 90-day period for every country, starting when someone opens the message. Can this setting be retained?

Not without validating the local rule. Use the correct starting event and unit, distinguish acknowledgement from follow-up and allow only permitted extensions. Test receipt outside working hours, month-end dates and the responsible person's absence. Opening a message does not automatically change the legal date of receipt.

National Legal Framework: Laki ilmoittajansuojelusta (1171/2022), transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.