Module Learning Objective

organise a timetable combining obligations and checks based on risk

1. Regulatory Concept & Core Standards

This video's topic is an annual monitoring plan. By the end, you should be able to organise a timetable combining obligations and checks based on risk. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. The Croatian confidential person and deputy have specific statutory functions that are not automatically identical to integrity coordination. This course covers mandates, resources, cover and management information. Its proposed annual plan is an organisational tool, not a universal Portuguese RGPC obligation in Croatia.

A proposed annual plan schedules evidence collection and control review. It is a management tool. Track statutory reporting deadlines separately, including the confidential person’s written report to the Ombudsman within 30 days of the decision under Article 22(2)(6). An annual meeting does not replace this case-related duty.

Apply the following rule: Internal receipt must be acknowledged within 7 days of receipt. Feedback is normally due within 30 days and no later than 90 days from acknowledgement or, if none was sent, expiry of 7 days after submission. This is not a general deadline for finishing the investigation. The reporting person must be informed of the outcome in writing without delay. The confidential person reports received reports and outcomes to the Ombudswoman in writing within 30 days of deciding the report. External acknowledgement is without delay and within 7 days of receipt, subject to statutory exceptions. Article 25(5) provides for external feedback normally within 30 days, no later than 90 days, or up to 6 months in justified cases.

2. Practical Implementation & Procedure

List applicable national obligations separately from internal preparation dates. Allow time for collection, validation and decisions. Include higher-risk checks and actions arising from earlier cases. Identify the source, owner and evidence for each task. Legislative changes should trigger review of tasks and training content. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A fictional plan puts every check on the last day of the quarter. An absence prevents message approval and delays follow-up. The coordinator distributes collection across the period, appoints cover and separates statutory dates from internal meetings. Monitoring can proceed without exposing case contents to the whole management team. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does a change in external reporting obligations remove the need for regular internal monitoring? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Internal monitoring remains necessary. Changing external reporting does not remove the need to check controls and measures. The plan must reflect national duties that actually apply and update its legal and institutional references.

One mistake to avoid is: copying last year's timetable without reviewing regulatory changes and risk priorities.

Now apply the national rule to a second decision. The platform uses a fixed 90-day period for every country, starting when someone opens the message. Can this setting be retained?

Not without validating the local rule. Use the correct starting event and unit, distinguish acknowledgement from follow-up and allow only permitted extensions. Test receipt outside working hours, month-end dates and the responsible person's absence. Opening a message does not automatically change the legal date of receipt.

National Legal Framework: Zakon o zaštiti prijavitelja nepravilnosti, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.