Knowledge centre

Portuguese Law 93/2021 and whistleblowing channels.

Practical guides on scope, deadlines, internal and external channels, anonymity and documentation. The information links to official sources and is kept separate from UNOVOX commercial claims.

UNOVOX editorial teamReviewed 10 August 2026Informational content

Start with the essentials

Five questions before choosing a platform.

The framework depends on the entity’s nature, size and activity. These guides help prepare the assessment but do not replace legal advice applied to the specific case.

01 · SCOPE

Who must operate a channel?

General criteria for legal entities, the public sector and entities in specific sectors.

02 · DEADLINES

What do 7 days and 3 months mean?

Acknowledgement of receipt and communication of planned or adopted measures.

03 · ROUTES

Internal or external channel?

Differences between the organisation’s channel and competent authorities.

04 · IDENTITY

Anonymous or identified reports?

Confidentiality, anonymity and continuity of communication.

05 · OPERATION

What documentation is needed?

Policies, procedures, records and responsibilities for operating the channel.

TOOL

Informational checker

Three questions for an initial indication and links to the sources.

From law to operation

Technology does not replace the internal procedure.

The organisation needs to define who receives, how it assesses, when it communicates, how information is protected and how decisions are documented. The platform brings these moments into an operational process.

See how UNOVOX organises cases

UNOVOX reports for annual, periodic and case documentation

Framework summary

What should be confirmed during implementation.

Entity and scope

The obligation should not be inferred from headcount alone. Public or private status, sector, activity and other applicable rules may change the framework.

Intake and follow-up

The channel must support secure submission and follow-up. Procedures need to cover receipt, assessment, communication and appropriate measures.

Confidentiality and access

The law requires protection of identity or anonymity and prevention of access by unauthorised persons. Organisations must combine technical controls with internal rules.

Records and retention

Reports and associated information must be documented and retained under the applicable requirements, also considering any judicial or administrative proceedings.

Official sources: Portuguese Law 93/2021 — Diário da República and the MENAC FAQ. Last editorial review: 10 August 2026.