Module Learning Objective

define the RCN role and the conditions needed to perform it

1. Regulatory Concept & Core Standards

In this video we will work through a concrete decision: define the RCN role and the conditions needed to perform it. The aim is to explain the criterion used and apply it to a workplace situation. We will start with the concept, move to the procedure and finish with a case to solve. The compliance officer, known as the RCN, monitors programme implementation and needs effective working conditions. This does not replace operational owners or management. The course organises the role through responsibilities, information, priorities and monitoring evidence.

The RGPC provides for an RCN drawn from senior management or an equivalent position, with the public- and private-sector interpretations explained by MENAC. The function requires independence, decision-making autonomy and access to necessary internal information. Appointment must include resources. The RCN role is not automatically equivalent to managing every report.

National rule: The RGPC provides for a compliance officer (RCN) with independence, decision-making autonomy and access to the necessary internal information. The appointment must meet the legal requirements and applicable guidance. The RCN role does not automatically include managing every report.

2. Practical Implementation & Procedure

Prepare an appointment document and role description. Identify scope, management access, resources and interaction with other functions. Consult Guidance No 1/2025 when assessing the chosen person. Check conflicts and effective capacity. An appointment without time, information or support may fill the role only on paper. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A company appoints an RCN but requires permission from the audited department before accessing necessary records. This prevents independent oversight. Management revises information routes and defines functional access without unrestricted access to reporting data. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Is formal appointment sufficient if the RCN cannot obtain necessary information? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Effective working conditions must exist. Access must suit the role and respect confidentiality and data protection. The organisation should document how it resolves obstacles.

One mistake to avoid is: assigning a title without autonomy, resources or functional access to information.

Which document, responsible person and evidence from your entity demonstrate application of this rule?

Confirm the scope and applicable source. Record the decision, who can approve it and the evidence required. Application in this lesson should support the following objective: define the RCN role and the conditions needed to perform it Distinguish the legal duty from the organisational method chosen by the entity.

National Legal Framework: Lei n.º 93/2021 & RGPC (DL 109-E/2021), transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.