Module Learning Objective

compare records and accounts to establish procurement changes

1. Regulatory Concept & Core Standards

This video's topic is investigation and evidence assessment. By the end, you should be able to compare records and accounts to establish procurement changes. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. The organisation, people and events are entirely fictional. Horizonte Equipamentos employs 120 workers and operates an internal channel. Five episodes follow a procurement report and turn its findings into preventive improvements. The law of 16 May 2023 governs the reporting channel. Proposed risk plans, codes, calendars and control tools are organisational good practice unless a separate applicable rule creates a duty. Public-service or public-procurement requirements must not be generalised to every private business.

Logs confirm a new weighting after bids arrived, without documented approval. One interview suggests correction of a technical error, another pressure to favour a supplier. The change is better substantiated than its intention. The alleged family relationship also needs separate verification.

Apply the following rule: Article 23 subjects processing to data-protection law. Apply GDPR article 5(1)(e): keep identifiable data only as long as necessary for the purposes, subject to lawful exceptions. The whistleblowing law does not prescribe a universal five-year period for all channels. Under article 23(2), clearly irrelevant personal data must not be collected or must be deleted without undue delay. Document duration, purpose, starting event and review, including copies and any applicable legal or public-archive obligations.

2. Practical Implementation & Procedure

The team lawfully collects versions, change logs and originally approved criteria. It interviews participants neutrally and checks the technical explanation. A matrix records information supporting or contradicting each hypothesis. Facts, interpretation and gaps remain separate. Missing approval does not automatically establish personal benefit. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Technical assessment confirms a problem needed correction, but undocumented alternatives existed. The team establishes a procedural failure while keeping intention and responsibility open. Different aspects can reach different levels of certainty. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Can the approval failure be established while intended favouritism remains inconclusive? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Yes. Each finding must match its evidence. A control failure does not require an unsupported finding about intent. State limitations and investigative steps explicitly.

One mistake to avoid is: treating every allegation as a single block that must be wholly true or false.

Now apply the national rule to a second decision. The system deletes every case five years after receipt, regardless of the country and any pending proceedings. Is that appropriate?

No. Identify the local rule, starting event and any limits or extensions. A uniform schedule may delete records too early or retain them too long. Document the decision by category, include copies and define who reviews a suspension of deletion, rather than keeping everything indefinitely.

National Legal Framework: Loi du 16 mai 2023 (Lanceurs d’alerte), transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.