Responding to requests and reporting duties

1. Regulatory Concept & Core Standards

In this video we will consolidate a skill: distinguish case follow-up from institutional reporting. Use the case to test what you would do in a similar situation. We will explain the proposed response step by step so that you can understand each choice and recognise when more information would be needed. External reporting has its own recipients, stages and duties. RPO helps determine the appropriate route, while competent authorities act within their remit. The course distinguishes an individual report, institutional statistics and public disclosure.

After reporting there may be clarification requests, referrals and outcome information. Separately, some entities have statistical or administrative duties. Each flow needs its own source, owner and timetable. Absence of a national reporting duty does not prevent proportionate, restricted internal quality indicators.

Apply the following rule: Portuguese RGPC is not Polish law. For public-finance entities consider management-control requirements; for public procurement consider the applicable Pzp provisions. The risk matrix, audit, training and gifts-policy methods in these courses are organisational recommendations unless a specified provision imposes a duty on the particular entity. Public-administration duties must not be transferred automatically to every private company.

2. Practical Implementation & Procedure

Classify requests by purpose and competence. Confirm authenticity, deadline and necessary data. Record the response and keep evidence. For statistics, define consistent categories with sufficient aggregation. For individual cases, use the designated secure method. Review official contacts and procedure versions periodically. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

An authority requests specified transactions. The team considers adding identities of every reporting person, but review limits the reply to the authorised request. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does an official letter justify any additional disclosure? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Respond according to the basis and need. Extra information does not become necessary simply because the recipient is an authority.

One mistake to avoid is: turning management reporting into general distribution of whistleblowing cases.

Now apply the national rule to a second decision. The team presents all integrity tools as mandatory in every country. How should the explanation change?

Separate Polish legal duties, their conditions and recommended practice. Management-control standards address the relevant public sector. A private risk or gifts policy needs a purpose and owner, but does not become an obligation under Portuguese RGPC. Every claim of a duty requires a specific basis.