{"id":42596603,"date":"2026-09-30T13:56:08","date_gmt":"2026-09-30T11:56:08","guid":{"rendered":"https:\/\/www.fma.gv.at\/?page_id=42596603"},"modified":"2026-10-01T12:17:29","modified_gmt":"2026-10-01T10:17:29","slug":"whistleblowing","status":"publish","type":"page","link":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/","title":{"rendered":"Welcome to the FMA&#8217;s Whistleblowing Reporting Centre"},"content":{"rendered":"<?xml encoding=\"utf-8\" ?><h3 class=\"wp-block-heading has-text-align-left\">An external reporting centre in accordance with the Protection of Whistleblowers Act (HSchG; Hinweisgeber:innenschutzgesetz)<\/h3><p class=\"wp-block-paragraph\"><strong>The most likely source for identifying irregularities in an entity is through employees or persons who were or are otherwise associated with the entity. Relevant information about such irregularities occurring in supervised entities form a useful source of information for the Austrian Financial Market Authority (FMA).<\/strong><\/p><p class=\"wp-block-paragraph\">By providing accordingly specific reports, you can ensure that irregularities and legal breaches may be brought to light and action taken. As a result, damages may be restricted or even prevented from occurring. <strong>By doing so, persons reporting such circumstances assume responsibility for the entity in question and for society, and therefore deserve a particular degree of protection against any form of adverse treatment that they might be threatened with for having made such a report.<\/strong><\/p><p class=\"wp-block-paragraph\">A special IT-based whistleblowing system has been operational at the Austrian Financial Market Authority (FMA) since 01 February 2014 that allows it to receive confidential information anonymously about possible instances of malpractice within the legal area of its supervision. In so doing, the FMA has not only created a central point of contact that is responsible for receiving reports, but has also established a secure tool and a special procedure to protect whistleblowers as well as persons who are affected by the report from the outset.<\/p><p class=\"wp-block-paragraph\">On 24 February 2023 the Protection of Whistleblowers Act (HSchG; <a href=\"https:\/\/www.ris.bka.gv.at\/Dokumente\/BgblAuth\/BGBLA_2023_I_6\/BGBLA_2023_I_6.html\" target=\"_blank\" rel=\"noopener\" class=\"external\">HinweisgeberInnenschutzgesetz<\/a>) was published in the Austrian Federal Law Gazette. The purpose of this law is to prove particular protection for whistleblowers while also ensuring their rights of information at national level.<\/p><div class=\"whistleblower-toggle-box\">\n    <div class=\"row\">\n        <div class=\"col-12\">\n            <h2>Is your report a case for the FMA?<\/h2>\n        <\/div>\n    <\/div>\n    <div class=\"row\">\n        <div class=\"col-md-6\">\n            <div class=\"box-inner\">\n                <div class=\"box-heading\">\n                    <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" viewbox=\"0 0 32 32\" fill=\"none\">\n                      <path d=\"M16 0C7.16342 0 0 7.16342 0 16C0 24.8366 7.16342 32 16 32C24.8366 32 32 24.8366 32 16C32 7.16342 24.8366 0 16 0ZM16 29.9355C8.34426 29.9355 2.06452 23.7384 2.06452 16C2.06452 8.34432 8.26161 2.06452 16 2.06452C23.6557 2.06452 29.9355 8.26161 29.9355 16C29.9355 23.6557 23.7384 29.9355 16 29.9355ZM25.1374 12.1961L13.4935 23.7465C13.19 24.0476 12.6998 24.0457 12.3987 23.7421L6.85819 18.1568C6.5571 17.8533 6.55903 17.3631 6.86258 17.062L7.41226 16.5168C7.71581 16.2157 8.206 16.2176 8.5071 16.5212L12.9572 21.0072L23.5017 10.5472C23.8053 10.2461 24.2955 10.248 24.5966 10.5515L25.1418 11.1012C25.443 11.4048 25.441 11.895 25.1374 12.1961Z\" fill=\"black\"><\/path>\n                    <\/svg>\n                    <h3>Should be reported to the FMA<\/h3>\n                <\/div>\n                <ol>\n<li>Financial services<\/li>\n<li>Financial products<\/li>\n<li>Financial markets<\/li>\n<li>Prevention of money laundering and terrorist financing<\/li>\n<li>Financial sanctions<\/li>\n<\/ol>            <\/div>\n        <\/div>\n        <div class=\"col-md-6\" data-nosnippet>\n            <div class=\"box-inner-two\">\n                <div class=\"box-heading\">\n                    <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" viewbox=\"0 0 32 32\" fill=\"none\">\n                      <path d=\"M1.0625 18.5625C0.38125 17.8813 0 16.9625 0 16C0 15.0375 0.38125 14.1187 1.0625 13.4375L13.4375 1.0625C14.1187 0.38125 15.0375 0 16 0C16.9625 0 17.8813 0.38125 18.5625 1.0625L30.9375 13.4375C31.6187 14.1187 32 15.0375 32 16C32 16.9625 31.6187 17.8813 30.9375 18.5625L18.5625 30.9375C17.8813 31.6187 16.9625 32 16 32C15.0375 32 14.1187 31.6187 13.4375 30.9375L1.0625 18.5625ZM17.1437 2.475C16.8438 2.16875 16.4312 2 16 2C15.5688 2 15.1563 2.16875 14.8563 2.475L2.475 14.8563C2.16875 15.1563 2 15.5688 2 16C2 16.4312 2.16875 16.8438 2.475 17.1437L14.8563 29.525C15.1625 29.8313 15.575 30 16 30C16.425 30 16.8438 29.8313 17.1437 29.525L29.525 17.1437C29.8313 16.8375 30 16.425 30 16C30 15.575 29.8313 15.1563 29.525 14.8563L17.1437 2.475ZM23.7062 14.7062L19.2062 19.2062C18.8187 19.5938 18.1813 19.5938 17.7938 19.2062C17.4062 18.8187 17.4062 18.1813 17.7938 17.7938L20.5875 15H15C13.8938 15 13 15.8938 13 17V20C13 20.55 12.55 21 12 21C11.45 21 11 20.55 11 20V17C11 14.7937 12.7937 13 15 13H20.5875L17.7938 10.2063C17.4062 9.81875 17.4062 9.18125 17.7938 8.79375C18.1813 8.40625 18.8187 8.40625 19.2062 8.79375L23.7062 13.2938C24.0938 13.6813 24.0938 14.3187 23.7062 14.7062Z\" fill=\"black\"><\/path>\n                    <\/svg>\n                    <h3>Not to be reported to the FMA<\/h3>\n                <\/div>\n                <p>Evasion of tax and social security contributions are <strong>not<\/strong> to be reported to the FMA, but should instead be reported to Austria&rsquo;s tax investigation unit.<\/p>\n                                <a class=\"btn phone-btn\" href=\"tel:+43050233553\">\n                    <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"16\" viewbox=\"0 0 16 16\" fill=\"none\">\n                      <path d=\"M15.4094 10.978L12.0221 9.52489C11.8274 9.44188 11.6111 9.42411 11.4055 9.47424C11.1999 9.52438 11.0161 9.63972 10.8815 9.80302L9.50332 11.4874C7.33562 10.4213 5.58186 8.66753 4.51572 6.49984L6.20013 5.12169C6.3634 4.98714 6.47873 4.80334 6.52887 4.59779C6.579 4.39224 6.56125 4.17598 6.47826 3.98136L5.0251 0.590679C4.93424 0.38042 4.77253 0.208675 4.56812 0.105327C4.3637 0.00197851 4.12953 -0.02643 3.90633 0.0250443L0.756271 0.753182C0.540946 0.801883 0.348665 0.922554 0.21117 1.09527C0.073676 1.26799 -0.00081079 1.48243 6.65717e-06 1.7032C6.65717e-06 9.61864 6.41576 16 14.2968 16C14.5184 16.0004 14.7334 15.9255 14.9067 15.7875C15.08 15.6494 15.2011 15.4566 15.2503 15.2406L15.975 12.0937C16.0264 11.8709 15.998 11.6372 15.8946 11.4332C15.7912 11.2293 15.6195 11.0682 15.4094 10.978ZM14.2781 15C6.95014 14.9906 1.0094 9.05301 1.00315 1.72507L4.11571 1.00631L5.55324 4.3623L3.2782 6.22171C4.79072 9.44676 6.54388 11.2062 9.78145 12.7249L11.6409 10.4499L14.9969 11.8874L14.2781 15Z\" fill=\"black\"><\/path>\n                    <\/svg>\n                    +43 (0) 50 233 553                <\/a>\n            <\/div>\n        <\/div>\n    <\/div>\n    <div class=\"row\">\n        <div class=\"col-12\">\n            <div class=\"fma-confirmation\">\n                <div class=\"fma-confirmation-toggle\">\n                    <input type=\"checkbox\" id=\"fma-confirm\" class=\"fma-confirmation-checkbox\" aria-controls=\"fma-communication\">\n\n                    <label for=\"fma-confirm\" class=\"fma-confirmation-label\">\n                        <span class=\"fma-confirmation-switch\" aria-hidden=\"true\">\n                            <span class=\"fma-confirmation-knob\"><\/span>\n                        <\/span>\n\n                        <span class=\"toggler-text\" data-nosnippet>\n                            Best&auml;tigen Sie hier, dass Ihre Meldung <strong>NICHT<\/strong>\n                            die Themen <strong>&ldquo;Steuern&rdquo;<\/strong>,\n                            <strong>&ldquo;Sozialversicherung&rdquo;<\/strong> bzw.\n                            <strong>&ldquo;pers&ouml;nliche Beschwerde&rdquo;<\/strong> betrifft.\n                        <\/span>\n                    <\/label>\n                <\/div>\n\n                <div id=\"fma-communication\" class=\"fma-communication\" hidden>\n                    <h3>The following communications channels are available for submitting a tip-off to the FMA:<\/h3>\n                    <ul>\n                        <li>\n                            <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"22\" height=\"24\" viewbox=\"0 0 22 24\" fill=\"none\">\n                              <path d=\"M11.5318 0.210938L11 0L10.4728 0.210938L0.960776 3.98438L0.0806254 4.33594L0.0256157 5.29688C-0.107324 7.63594 0.250238 11.2172 1.73549 14.7141C3.2345 18.2437 5.90704 21.7453 10.4178 23.7422L11 24L11.5822 23.7422C16.093 21.7453 18.7655 18.2437 20.2645 14.7141C21.7498 11.2125 22.1073 7.63594 21.9744 5.29688L21.924 4.33594L21.0438 3.98438L11.5318 0.210938ZM11 3.22031L19.0681 6.42188C19.0451 8.33906 18.6646 10.9594 17.5736 13.5234C16.3726 16.35 14.3372 19.0547 10.9954 20.7188V3.225L11 3.22031Z\" fill=\"black\"><\/path>\n                            <\/svg>\n                            <div class=\"text-wrap\">\n                                <h4>\n                                    <a class=\"external\" target=\"_blank\" href=\"https:\/\/whistleblowersoftware.com\/secure\/a08f18a5-0b35-4916-8b77-b414b7ccba7f?locale=de\">\n                                    IT-based whistleblowing system                                    <\/a>\n                                <\/h4>\n                                <p>For receiving anonymous reports and for anonymous communications, accessible via the FMA website<\/p>\n                            <\/div>\n                        <\/li>\n                        <li>\n                            <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"22\" height=\"22\" viewbox=\"0 0 22 22\" fill=\"none\">\n                              <path d=\"M21.3726 15.546L16.56 13.4834C16.3544 13.3958 16.1259 13.3774 15.9089 13.4308C15.692 13.4843 15.4982 13.6068 15.3569 13.7799L13.2256 16.3839C9.88072 14.8068 7.18888 12.115 5.61182 8.77012L8.21577 6.63883C8.38923 6.49775 8.512 6.304 8.56549 6.08691C8.61899 5.86982 8.6003 5.6412 8.51226 5.43568L6.44972 0.623098C6.35309 0.401551 6.18218 0.220665 5.96647 0.111631C5.75075 0.00259757 5.50375 -0.0277499 5.26806 0.0258218L0.799233 1.05709C0.571997 1.10956 0.369256 1.23751 0.224101 1.42005C0.0789458 1.60258 -5.23459e-05 1.82893 2.60232e-08 2.06215C2.60232e-08 13.0838 8.93336 22 19.9378 22C20.1711 22.0001 20.3976 21.9212 20.5802 21.776C20.7628 21.6309 20.8908 21.4281 20.9433 21.2008L21.9746 16.7319C22.0278 16.4951 21.9968 16.2471 21.887 16.0307C21.7771 15.8142 21.5952 15.6428 21.3726 15.546Z\" fill=\"black\"><\/path>\n                            <\/svg>\n                            <div class=\"text-wrap\">\n                                <h4>00800 249 900<\/h4>\n                                <p>Telephone calls are not recorded<\/p>\n                            <\/div>\n                        <\/li>\n                        <li>\n                            <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"22\" height=\"30\" viewbox=\"0 0 22 30\" fill=\"none\">\n                              <path d=\"M2.75 10.9864C2.75 6.5068 6.39948 2.79612 11 2.79612C15.6005 2.79612 19.25 6.5068 19.25 10.9864C19.25 13.6427 17.8865 16.899 15.8755 20.1379C14.2542 22.7476 12.3807 25.0777 11 26.668C9.61927 25.0777 7.75156 22.7534 6.12448 20.1379C4.11354 16.9049 2.75 13.6427 2.75 10.9864ZM11 0C4.92708 0 0 4.91651 0 10.9864C0 17.9359 6.88646 26.266 9.7625 29.4408C10.4385 30.1864 11.5615 30.1864 12.2375 29.4408C15.1135 26.266 22 17.9359 22 10.9864C22 4.91651 17.0729 0 11 0ZM9.16667 11.1845C9.16667 10.1534 9.98594 9.32039 11 9.32039C12.0141 9.32039 12.8333 10.1534 12.8333 11.1845C12.8333 12.2155 12.0141 13.0485 11 13.0485C9.98594 13.0485 9.16667 12.2155 9.16667 11.1845ZM15.5833 11.1845C15.5833 8.60971 13.5323 6.52427 11 6.52427C8.46771 6.52427 6.41667 8.60971 6.41667 11.1845C6.41667 13.7592 8.46771 15.8447 11 15.8447C13.5323 15.8447 15.5833 13.7592 15.5833 11.1845Z\" fill=\"black\"><\/path>\n                            <\/svg>\n                            <div class=\"text-wrap\">\n                                <h4>Orally<\/h4>\n                                <p>In person at the FMA&rsquo;s premises<\/p>\n                            <\/div>\n                        <\/li>\n                        <li>\n                            <svg aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"22\" height=\"17\" viewbox=\"0 0 22 17\" fill=\"none\">\n                              <path d=\"M0 0H22V3.1875L21.45 3.6125L11.825 11.05L11 11.6875L10.175 11.05L0.55 3.6125L0 3.1875V0ZM0 5.84375L11 14.3438L22 5.84375V17H0V5.84375Z\" fill=\"black\"><\/path>\n                            <\/svg>\n                            <div class=\"text-wrap\">\n                                <h4>In writing<\/h4>\n                                <p>Austrian Financial Market Authority, Whistleblowing point of contact, Otto-Wagner-Platz 5, 1090 Vienna<\/p>\n                            <\/div>\n                        <\/li>\n                    <\/ul>\n                <\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div><h2 class=\"wp-block-heading\"><div id=\"reference-6ac8e2d32ae0e\" class=\"reference\"><h2 class=\"reference-heading\"><span class=\"fa-solid fa-circle-info fa-fw\" aria-hidden=\"true\"><\/span>Further information and answers to frequently asked questions (FAQs)<\/h2><p><\/div><p><\/h2><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32ae55\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32ae55\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32ae55\">        <span>How are whistleblowers technically protected?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32ae55\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32ae55\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">To protect you as a whistleblower in a technically effective manner, we have made a communications platform available to allow you make reports anonymously. The security of communications is guaranteed thanks to the use of modern, certified encryption technologies.<\/p><p class=\"wp-block-paragraph\"><strong>We specifically use the high-security Whistleblower Software system.<\/strong> It has been certified in accordance with European data protection law, and prevents unauthorised access to stored data. The effectiveness of these security measures are regularly subject to and confirmed by independent audits and certifications.<\/p><p class=\"wp-block-paragraph\">Every report made through the whistleblowing system is encrypted, backed up using dedicated secured network routes and stored in an external data bank in a high-security data centre. It is not possible to technically trace messages back to their source, and personal data is not required to be entered at any point in the reporting process. You are able to remain completely anonymous.<\/p><p class=\"wp-block-paragraph\">The system we use also sets up a personal protected postbox, which allows you to communicate anonymously with the FMA, thereby ensuring that your anonymity is also preserved by technical means during such communications. As long as you do not enter any details that allow information to be traced back to you, the whistleblowing system also preserves your anonymity on a technical level for communications conducted using the postbox.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32ae81\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32ae81\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32ae81\">        <span>Conditions for protecting whistleblowers<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32ae81\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32ae81\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">If adequate grounds exist at the time of submitting the report based on the actual circumstances and the information available to you adequate grounds that substantiate that the reports you have made are true, and where they fall within the scope of the HSchG, then as a reporting person you are <strong>afforded legal protection.<\/strong><\/p><p class=\"wp-block-paragraph\">However, such protection under the HSchG only extends to a specific personal and material scope (Article&nbsp;2 and Article&nbsp;3 HSchG). This means that not all reporting persons are provided protection, and that not all thematic areas about which reports are made are covered by the HSchG, and therefore also do not fall under its scope of protection.<\/p><p class=\"wp-block-paragraph\">This means that protection under the HSchG is only afforded, if all conditions are met, i.e. if you are <strong>legally worthy of protection<\/strong> and fall under the <strong>protected group of persons<\/strong> (see &ldquo;Who is protected?&rdquo;, personal scope) and the report relates to a <strong>sector<\/strong> that is covered by the HSchG (see &ldquo;What can be reported&rdquo;, material scope).<\/p><p class=\"wp-block-paragraph\">Reports that are patently incorrect may trigger damages claims, and may be pursued by courts or as administrative offences.<\/p><p class=\"wp-block-paragraph\"><strong>Caution over your anonymity<\/strong>: Please note that your personal data, where they have become known, or are able to be found out, may in certain cases set out under law may be disclosed. In particular, the provisions of the Code on Criminal Procedure 1975 (StPO; Strafprozessordnung 1975) shall apply once an initial suspicion exists under criminal law pursuant to Article&nbsp;1 para.&nbsp;3 StPO.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32ae97\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32ae97\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32ae97\">        <span>Who is protected? (Personal scope of the HSchG)<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32ae97\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32ae97\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">Anyone who learns or learned of certain breaches in the course of their ongoing or previous professional activity may be a protected person under the HSchG.<\/p><p class=\"wp-block-paragraph\">Protected persons do not only include employees, but for example also include:<\/p><ul class=\"wp-block-list\">\n<li>applicants<\/li>\n\n\n\n<li>trainees<\/li>\n\n\n\n<li>volunteers<\/li>\n\n\n\n<li>the self-employed<\/li>\n\n\n\n<li>members of management bodies (e.g. administrative board or the supervisory board)<\/li>\n\n\n\n<li>temporary contracted workers<\/li>\n\n\n\n<li>contractors from (sub-)enterprises<\/li>\n\n\n\n<li>suppliers<\/li>\n<\/ul><p class=\"wp-block-paragraph\">Since the personal scope of the HSchG does not extend to cover all natural persons, and especially as its protective rules do not apply for all natural persons, when submitting your report that you we require to you state whether you learned of the breaches described in your report during the course of your ongoing or past professional activity. We request you to provide this information, so that we are able to assess whether your interests require protecting under the HSchG, so that we are able to make information available to you about the outcomes and follow-up measures.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32aea9\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32aea9\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32aea9\">        <span>What can be reported? (Material scope of the HSchG)<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32aea9\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32aea9\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">In particular, you may submit reports to the FMA about the following areas that are in the scope of protection of the HSchG:<\/p><ul class=\"wp-block-list\">\n<li>Financial services<\/li>\n\n\n\n<li>financial products and financial markets, as well as<\/li>\n\n\n\n<li>the prevention of money laundering and terrorist financing<\/li>\n\n\n\n<li>and related collective consumer protection issues.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32aebc\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32aebc\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32aebc\">        <span>What protection does the Protection of Whistleblowers Act (HSchG) provide?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32aebc\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32aebc\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">The HSchG grants protection against retaliatory measures for a natural person belonging to the personal scope listed in the law that occur in conjunction with a justified report (see &ldquo;When does a report constitute a justified report&rdquo;).<\/p><p class=\"wp-block-paragraph\">Protection against retaliatory measures in particular, but not exclusively relates to unfair dismissal, a temporary employment contract not being extended, being given a proof reference, disciplinary measures or have a licence removed.<\/p><p class=\"wp-block-paragraph\">The HSchG stipulates that measures that occur in retaliation for a justified report are legally invalid. In the event that you experience such a retaliatory measure as a reaction to your justified report, you are entitled to have such measures repealed, to the restoration of legal compliance, as well as in any case claims for damages for financial losses and any personal impairments sustained. In addition, you also have the right to confidential treatment of your identity. If this is not possible for any reason whatsoever, then you must be informed in advance that this is the case. Should you have further questions in this regard, you may address them to the FMA&rsquo;s whistleblowing point of contact.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32aecd\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32aecd\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32aecd\">        <span>When does a report constitute a justified report?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32aecd\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32aecd\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">A report is considered to be justified, if at the time of submitting the report based on the actual circumstances and the information available to you adequate grounds exist to substantiate that the report you have made is true, and falls within the scope of the HSchG.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32aedd\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32aedd\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32aedd\">        <span>From when does the protection provided by the Protection of Whistleblowers Act (HSchG) apply?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32aedd\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32aedd\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">The protection available under the HSchG applies from the time of submitting the report based on the actual circumstances and the information available to you provides adequate grounds to substantiate that the report you have made is true.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32aeee\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32aeee\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32aeee\">        <span>Handling classified information in a legal manner<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32aeee\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32aeee\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">You are protected by the HSchG if you submit information that is classified as &ldquo;confidential&rdquo;, &ldquo;secret&rdquo;, or &ldquo;top secret&rdquo; as a report as defined in the HSchG, if<\/p><ul class=\"wp-block-list\">\n<li>the justified report could not be pursued effectively without disclosing or analysing such information,<\/li>\n\n\n\n<li>if they are passed on in observance of the regulations for safeguarding classified information, especially Article&nbsp;7 of the Information Security Regulation (Informationssicherheitsverordnung) published in Federal Law Gazette II No. 548\/2003 as amended in Federal Law Gazette&nbsp;II No. 268\/2022, and<\/li>\n\n\n\n<li>you are able to assume that the whistleblowing point of contact is qualified to observe rules on safeguarding classified information, especially in the case of their being passed on to another internal or external body.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af1e\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af1e\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af1e\">        <span>What conditions exist for the waiving of liability for breaching of confidentiality requirements by submitting a report?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af1e\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af1e\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">A justified report that has been submitted in relation to internal as well as external reports while observing the provisions of the HSchG, and which discloses facts or information, which the reporting person is obliged to keep confidential based on a legal regulation or on the basis of a contract, does not breach  confidentiality requirements,<\/p><ul class=\"wp-block-list\">\n<li>where the report is justified,<\/li>\n\n\n\n<li>the reporting person has an adequate reason to assume that the report is necessary to uncover or prevent a legal breach, and<\/li>\n\n\n\n<li>no reasons for exclusion exist, for which this federal act does not apply.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">This Directive does <strong>not<\/strong> apply to the following:<\/p><ol start=\"1\" class=\"wp-block-list\">\n<li>the confidentiality requirements of legally regulated health professions;<\/li>\n\n\n\n<li>Information covered by the right to confidentiality of attorneys, notaries as well as those practising tax advising and related professions (Article 9 of the Lawyers Code (Rechtsanwaltsordnung), published in <a href=\"https:\/\/www.ris.bka.gv.at\/Ergebnis.wxe?Abfrage=BgblAlt&amp;Bgblnummer=96\/1868&amp;SkipToDocumentPage=True\" target=\"_blank\" rel=\"noopener\" class=\"external\">Reich Law Gazette No. 96\/1868<\/a>, Article&nbsp;37 of the Notarial Code (Notariatsordnung), published in <a href=\"https:\/\/www.ris.bka.gv.at\/Ergebnis.wxe?Abfrage=BgblAlt&amp;Bgblnummer=75\/1871&amp;SkipToDocumentPage=True\" target=\"_blank\" rel=\"noopener\" class=\"external\">Reich Law Gazette No. 75\/1871<\/a>, Article 80 of the Tax Advising and Related Professions Act 2017 (Wirtschaftstreuhandberufsgesetz 2017), published in <a href=\"https:\/\/www.ris.bka.gv.at\/eli\/bgbl\/I\/2017\/137\" target=\"_blank\" rel=\"noopener\" class=\"external\">Federal Law Gazette I No. 137\/2017<\/a>), including contractual agreements for maintaining confidentiality with partners or supervisory bodies of a law company as well as employees or assistants of lawyers, notaries or tax advisers;<\/li>\n\n\n\n<li>procurement procedures that are excluded from the following federal acts in relation to procurement:\n\n<ol start=\"1\" style=\"list-style-type:lower-alpha\" class=\"wp-block-list\">\n<li>procurement procedures that are excluded from the Purchase Contract Awards Act (Bundesvergabegesetz 2018), published in <a href=\"https:\/\/www.ris.bka.gv.at\/eli\/bgbl\/I\/2018\/65\" target=\"_blank\" rel=\"noopener\" class=\"external\">Federal Law Gazette I No. 65\/2018<\/a>, pursuant to Article&nbsp;9 para.&nbsp;1 nos.&nbsp;3, 4 and 5 as well as Article&nbsp;178 para. 1 nos. 3, 4 and 5 thereof,<\/li>\n\n\n\n<li>procurement procedures that are excluded from the Federal Procurement Act for Concessions 2018 (Bundesvergabegesetz Konzessionen 2018), published in <a href=\"https:\/\/www.ris.bka.gv.at\/eli\/bgbl\/I\/2018\/65\" target=\"_blank\" rel=\"noopener\" class=\"external\">Federal Law Gazette I No. 65\/2018<\/a>, pursuant to Article&nbsp;8 para.&nbsp;1 nos.&nbsp;2, 3 and 4 thereof,<\/li>\n\n\n\n<li>procurement procedures that are excluded from the Purchase Contract Awards Act for Defence and Security 2012 (Bundesvergabegesetz Verteidigung und Sicherheit 2012), published in <a href=\"https:\/\/www.ris.bka.gv.at\/eli\/bgbl\/I\/2012\/10\" target=\"_blank\" rel=\"noopener\" class=\"external\">Federal Law Gazette I No. 10\/2012<\/a>, pursuant to Article&nbsp;9 para.&nbsp;1 nos.&nbsp;1 and 5 thereof,<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>the application of the provisions of the Code on Criminal Procedure 1975 (StPO; Strafproze&szlig;ordnung 1975), published in <a href=\"https:\/\/www.ris.bka.gv.at\/Dokumente\/BgblPdf\/1975_631_0\/1975_631_0.pdf\" target=\"_blank\" rel=\"noopener\" class=\"external\">Federal Law Gazette no.&nbsp;631\/1975<\/a>, once an initial suspicion exists (Article 1 para. 3 StPO);<\/li>\n\n\n\n<li>information that is provided to clerics of a legally recognised church or religious society or registered religious denomination during a pastoral conversation.<\/li>\n<\/ol><p class=\"wp-block-paragraph\">These provisions regarding the disclosure of classified information (e.g. Information classified as &ldquo;confidential&rdquo;, &ldquo;secret&rdquo; or &ldquo;top secret&rdquo;) shall apply subject to the proviso that the report could not be objectively pursued further without passing on or evaluating this information, that it is passed on in the observance of the standards for protection classified information, and where the reporting person was able to assume, that the reporting centre that receives the report, is qualified to observe this standard.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af36\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af36\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af36\">        <span>To what extent is confidentiality guaranteed, and how is my identity protected?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af36\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af36\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">The FMA is required to protect your identity as the reporting person, which also appears for any information from which it is possible to deduce your identity. It is forbidden to disclose the content of the report or the identity of the reporting person to anyone other than the competent members of staff. Forwarding the report to the competent body is excluded from this rule.<\/p><p class=\"wp-block-paragraph\">By way derogation from this rule, your identity as well as the information from which your identity may be deducted, may only be disclosed, where an administrative authority, court, or the Public Prosecutor&rsquo;s Office (Staatsanwaltschaft) deems this to be essential within the scope of administrative proceedings or a proceedings in front of a court of law, or in the case of an investigation under the Code on Criminal Procedure (StPO; Strafprozessordnung). At the same time the danger you are placed in as the reporting person must be considered, and deemed to be proportionate with regard to the veracity and severity of the allegations raised.<\/p><p class=\"wp-block-paragraph\">Where doing so does not jeopardise the respective procedure, and where there is a possibility to contact you (such as through a personal mailbox), we are required to inform you prior to disclosure, and to presents the reasons for the disclosure in writing.<\/p><p class=\"wp-block-paragraph\">Business secrets that are disclosed on the basis of a report, are only allowed to be processed or disclosed for the purposes of that law and for the extent that is necessary.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af4b\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af4b\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af4b\">        <span>Are the persons affected by a report also protected?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af4b\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af4b\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">Protection is also given to persons affected by a report, since the provisions on disclosure, consideration of the threat caused and weighing up its proportionality are also equally valid for any person that is affected by a report.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af5f\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af5f\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af5f\">        <span>Data Protection<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af5f\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af5f\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">The processing of personal data contained in reports is permissible for the purposes of the HSchG. This covers personal data of<\/p><ul class=\"wp-block-list\">\n<li>whistleblowers,<\/li>\n\n\n\n<li>persons concerned as a result of a report,<\/li>\n\n\n\n<li>natural persons supporting the reporting persons in making the report,<\/li>\n\n\n\n<li>natural persons closely association to the reporting persons, who without assisting the report, could be affected by detrimental consequences of the report such as retaliatory measures, as well as<\/li>\n\n\n\n<li>persons affected by or involved in follow-up measures.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">Processing must<\/p><ul class=\"wp-block-list\">\n<li>be in the public interest for preventing or pursuing legal breaches and for making reports for this purpose and to check their veracity, and<\/li>\n\n\n\n<li>be limited to information that is required for determining the occurrence of and pursuing a legal breach.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">The following shall be authorised to process information:<\/p><ul class=\"wp-block-list\">\n<li>reporting persons regarding the information that is required for their report,<\/li>\n\n\n\n<li>internal and external bodies regarding the information that is submitted to them by a reporting person,<\/li>\n\n\n\n<li>authorities for processing information that was submitted to them as a consequence of a report, to the extent that the information is required for further investigations or for the initiation of a procedure.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">The named natural persons, the internal and external borders or authorities are also considered as controllers pursuant to Article 4 no. 7 of the General Data Protection Regulation (GDPR) or Article&nbsp;36 para.&nbsp;1 no.&nbsp;8 of the Data Protection Act (DSG; Datenschutzgesetz).<\/p><p class=\"wp-block-paragraph\">As long as and to the extent necessary for protecting the identity of a reporting person, a person pursuant to Article&nbsp;2 para.&nbsp;3 no.&nbsp;1 or no. 2 or pursuant to Article&nbsp;2 para.&nbsp;1 no.&nbsp;4 HSchG and for achieving the purposes stated in Article&nbsp;1 and para.&nbsp;2 no.&nbsp;1 HSchG, the rights listed in nos.&nbsp;1 to 7 of a natural person affected by a report and the rights of a legal person affected by a legal person affected by a report contained in nos.&nbsp;1 to 5 and 7 in the DSG shall not apply.<\/p><p class=\"wp-block-paragraph\">The purposes in particular include, for example, thwarting attempts to prevent, impede, frustrate or slow down reports or follow-up measures related to reports. Such protection is especially necessary for the duration of a procedure being conducted by an administrative authority or a court, or an investigative procedure under the Code on Criminal Procedure (StPO; Strafprozessordnung).<\/p><p class=\"wp-block-paragraph\">In this context the following rights shall not apply to a concerned legal person affected by a report:<\/p><ol start=\"1\" class=\"wp-block-list\">\n<li>The right to information (Article 43 DSG, Articles 13 and 14 GDPR),<\/li>\n\n\n\n<li>The right to access (Article 1 para. 3 no. 1 and Article 44 DSG, Article 15 GDPR),<\/li>\n\n\n\n<li>The right to access (Article 1 para. 3 no. 1 and Article 45 DSG, Article 16 GDPR),<\/li>\n\n\n\n<li>The right to erasure (Article 1 para. 3 no. 2 and Article 45 DSG, Article 17 GDPR),<\/li>\n\n\n\n<li>The right to restriction of processing (Article 45 DSG, Article 18 GDPR),<\/li>\n\n\n\n<li>The right to object (Article 21 GDPR) as well as<\/li>\n\n\n\n<li>The right to the communication of a personal data breach (Article 56 DSG and Article 34 GDPR).<\/li>\n<\/ol><p class=\"wp-block-paragraph\">Report pursuant to Article 37 DSG<\/p><p class=\"wp-block-paragraph\">Personal data<\/p><ol start=\"1\" class=\"wp-block-list\">\n<li>must be processed in a lawful and fair manner,<\/li>\n\n\n\n<li>must be collected for specific, clear and lawful purposes and not be processed in a way that is incompatible with such purposes,<\/li>\n\n\n\n<li>must correspond to the purpose of processing and be relevant and not be permitted to be excessive in relation to the purposes for which they are processed,<\/li>\n\n\n\n<li>must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate regarding the purposes for which they are processed, are erased or rectified without delay,<\/li>\n\n\n\n<li>must not be kept in a form for longer than is necessary for the purposes for which it is processed that permits identification of data subjects,<\/li>\n\n\n\n<li>must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.<\/li>\n<\/ol><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af84\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af84\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af84\">        <span>How does a report work?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af84\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af84\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">If you would like to submit a report (either stating your name or anonymously) then click on the link to the &ldquo;IT-based whistleblowing system&rdquo; in the section about communications channels for whistleblowing&rdquo; above.<\/p><p class=\"wp-block-paragraph\">First, you will be asked to read a brief information text. Please click on the respective links for further information. At the bottom of the first page of information you will find an orange button &ldquo;Neue Meldung erstellen&rdquo; (&ldquo;Create new report&rdquo;)  and a white button &ldquo;Meldung weiterverfolgen&rdquo; (&ldquo;Follow up report&rdquo;). Detailed instructions about submitting a report and following it up can be found directly in the whistleblowing system (<a href=\"https:\/\/whistleblowersoftware.com\/secure\/a08f18a5-0b35-4916-8b77-b414b7ccba7f\/a08f18a4-972e-4352-ad22-05510bfa5042\" target=\"_blank\" rel=\"noopener\" class=\"external\">Link to instructions<\/a> &ndash; available in German only).<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32af96\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32af96\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32af96\">        <span>What is a protected postbox, and how do I set it up?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32af96\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32af96\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">A separate protected postbox will be set up for you in our system. A secure password will be generated for you for accessing your postbox directly after you submit your report. It is essential that you store this password to be able to follow up your report. Please note that it is not possible to reset the password for security reasons. Make sure that you download the password or save it in a safe place.<\/p><p class=\"wp-block-paragraph\">This protected postbox is your personal channel for communicating with the FMA. You will also remain anonymous, provided that you do not enter any personal data, that allows you to be personally identified. Our whistleblowing system also uses suitable technical means to preserve your anonymity when communicate via your postbox.<\/p><p class=\"wp-block-paragraph\">We are able to make enquiries with you about the reported factual circumstances as well as to submit responses about your report via the protected postbox.<\/p><p class=\"wp-block-paragraph\">In the event that you already have a protected postbox, you will be directed to your postbox once you have entered your password via the &ldquo;Meldung weiterverfolgen&rdquo; (&ldquo;Follow up report&rdquo;) button. The whistleblowing system will also ensure that your anonymity is preserved by technical security means when you communicate via the postbox as long as you do not divulge any information that allows you to be personally identifiable.<\/p><p class=\"wp-block-paragraph\">If you lose your login information, then it is no longer possible to access your postbox and previous communications. If you subsequent submit a new report, please state the reference number and where possible some keywords from the original report, to allow us to try to match them.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32afae\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32afae\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32afae\">        <span>What procedure does the FMA follow after reports are made?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32afae\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32afae\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">The FMA&rsquo;s whistleblowing point of contact is the central point for receiving external reports through the IT-based whistleblowing system. The point of contact is staffed by persons with the necessary personal and professional qualifications, who have been specially trained for handling reports.<\/p><p class=\"wp-block-paragraph\">You may submit reports either in written form, e.g. via the FMA&rsquo;s IT-based whistleblowing system, or orally, by phone or in person (see the section on &ldquo;Channels of communication for whistleblowing&rdquo;). If you wish to make your report in person at the FMA&rsquo;s premises, then you have a right to be given an appointment within 14 days to discuss the report.<\/p><p class=\"wp-block-paragraph\">All reports are handled in a diligent, comprehensive, impartial, honest and confidential manner, and will be reviewed regarding their veracity. Further processing of the report may be stopped, if necessary once further information has been obtained, in the event that we conclude that the report:<\/p><ul class=\"wp-block-list\">\n<li>does not fall in the HSchG&rsquo;s material scope, or<\/li>\n\n\n\n<li>does not contain any indications that prove its veracity, or<\/li>\n\n\n\n<li>where it only clearly constitutes a very minor legal breach, or<\/li>\n\n\n\n<li>where the same information has already been submitted.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">You may submit additional information or correct reports made at any time. Blatantly false tip-offs will be rejected, where it is possible for us to establish contact. Where a report does not fall in the FMA&rsquo;s competence, then the information must be passed on to another reporting centre, where possible to do so. Where an option for communication exists, we are required to inform you about it.<\/p><p class=\"wp-block-paragraph\">Tip-offs that are within the FMA&rsquo;s scope of competence, will be forwarded by the whistleblowing point of contact to the respective specialist division. That division will then review the reported factual circumstances and take further steps accordingly. If the specialist division considers that supervisory measures are necessary, then they will be duly initiated.<\/p><p class=\"wp-block-paragraph\">You will only be afforded rights and protection under the Whistleblowers Protection Act (HSchG; Hinweisgeber:innenschutzgesetz) where you meet legal conditions (see &ldquo;Who is protected? (Personal scope of the HSchG)&rdquo;) This especially affects persons, who became aware of certain legal breaches during the course of their current or previous professional activity either at the entity in question or in relation to that entity. Where a protected person is able to be reached, we will generally inform you within three months of receipt of the report, or in justified instances within 6 months,<\/p><ul class=\"wp-block-list\">\n<li>about the findings we arrived at<\/li>\n\n\n\n<li>what follow-ups were taken or are intended to be taken<\/li>\n\n\n\n<li>or the reasons for not pursuing a report further.<\/li>\n<\/ul><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p><p class=\"wp-block-paragraph\"><div class=\"card\">  <div class=\"card-header\" id=\"heading-6ac8e2d32afc3\">    <h2 class=\"mb-0\">      <button class=\"btn btn-link btn-block text-left p-0 d-flex align-items-center justify-content-between\" type=\"button\" data-toggle=\"collapse\" data-target=\"#collapse-heading-6ac8e2d32afc3\" aria-expanded=\"false\" aria-controls=\"collapse-heading-6ac8e2d32afc3\">        <span>What are follow-ups?<\/span>        <i class=\"fa-solid fa-chevron-down text-primary\" aria-hidden=\"true\"><\/i>      <\/button>    <\/h2>  <\/div>  <div id=\"collapse-heading-6ac8e2d32afc3\" class=\"collapse\" aria-labelledby=\"heading-6ac8e2d32afc3\">    <div class=\"card-body\"><p><\/p><p class=\"wp-block-paragraph\">Follow-ups are the measures we have taken following and as a result of the report, such as reviewing the report&rsquo;s veracity, carrying out subsequent research and investigations, as well as instigating, initiation, conducting or ending a procedure or other measures for pursuing the breach further, for prosecution, or for restoring legal compliance.<\/p><p class=\"wp-block-paragraph\">    <\/div>  <\/div><\/div><p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>An external reporting centre in accordance with the Protection of Whistleblowers Act (HSchG; Hinweisgeber:innenschutzgesetz) The most likely source for identifying &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":84,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-42596603","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Welcome to the FMA&#039;s Whistleblowing Reporting Centre - FMA \u00d6sterreich<\/title>\n<meta name=\"robots\" content=\"index, follow, max-image-preview:large, max-video-preview:-1, nosnippet\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fma.gv.at\/en\/whistleblowing\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Welcome to the FMA&#039;s Whistleblowing Reporting Centre - FMA \u00d6sterreich\" \/>\n<meta property=\"og:description\" content=\"An external reporting centre in accordance with the Protection of Whistleblowers Act (HSchG; Hinweisgeber:innenschutzgesetz) The most likely source for identifying ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fma.gv.at\/en\/whistleblowing\/\" \/>\n<meta property=\"og:site_name\" content=\"FMA \u00d6sterreich\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-01T10:17:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fma.gv.at\/wp-content\/uploads\/2017\/05\/FMA_FB_Logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"925\" \/>\n\t<meta property=\"og:image:height\" content=\"524\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@FMA_AT\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"21 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/whistleblowing\\\/\",\"url\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/whistleblowing\\\/\",\"name\":\"Welcome to the FMA's Whistleblowing Reporting Centre - FMA \u00d6sterreich\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#website\"},\"datePublished\":\"2026-09-30T11:56:08+00:00\",\"dateModified\":\"2026-10-01T10:17:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/whistleblowing\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/whistleblowing\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/whistleblowing\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Welcome to the FMA&#8217;s Whistleblowing Reporting Centre\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/\",\"name\":\"FMA \u00d6sterreich\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#organization\",\"name\":\"FMA - Finanzmarktaufsicht\",\"url\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.fma.gv.at\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/FMA_Logo_Twitter_400x400.png\",\"contentUrl\":\"https:\\\/\\\/www.fma.gv.at\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/FMA_Logo_Twitter_400x400.png\",\"width\":400,\"height\":400,\"caption\":\"FMA - Finanzmarktaufsicht\"},\"image\":{\"@id\":\"https:\\\/\\\/www.fma.gv.at\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/FMA_AT\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Welcome to the FMA's Whistleblowing Reporting Centre - FMA \u00d6sterreich","robots":{"index":"index","follow":"follow","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1","snippet":"nosnippet"},"canonical":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/","og_locale":"en_US","og_type":"article","og_title":"Welcome to the FMA's Whistleblowing Reporting Centre - FMA \u00d6sterreich","og_description":"An external reporting centre in accordance with the Protection of Whistleblowers Act (HSchG; Hinweisgeber:innenschutzgesetz) The most likely source for identifying ...","og_url":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/","og_site_name":"FMA \u00d6sterreich","article_modified_time":"2026-10-01T10:17:29+00:00","og_image":[{"width":925,"height":524,"url":"https:\/\/www.fma.gv.at\/wp-content\/uploads\/2017\/05\/FMA_FB_Logo.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@FMA_AT","twitter_misc":{"Est. reading time":"21 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/","url":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/","name":"Welcome to the FMA's Whistleblowing Reporting Centre - FMA \u00d6sterreich","isPartOf":{"@id":"https:\/\/www.fma.gv.at\/en\/#website"},"datePublished":"2026-09-30T11:56:08+00:00","dateModified":"2026-10-01T10:17:29+00:00","breadcrumb":{"@id":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fma.gv.at\/en\/whistleblowing\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fma.gv.at\/en\/whistleblowing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fma.gv.at\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Welcome to the FMA&#8217;s Whistleblowing Reporting Centre"}]},{"@type":"WebSite","@id":"https:\/\/www.fma.gv.at\/en\/#website","url":"https:\/\/www.fma.gv.at\/en\/","name":"FMA \u00d6sterreich","description":"","publisher":{"@id":"https:\/\/www.fma.gv.at\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fma.gv.at\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fma.gv.at\/en\/#organization","name":"FMA - Finanzmarktaufsicht","url":"https:\/\/www.fma.gv.at\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fma.gv.at\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.fma.gv.at\/wp-content\/uploads\/2017\/05\/FMA_Logo_Twitter_400x400.png","contentUrl":"https:\/\/www.fma.gv.at\/wp-content\/uploads\/2017\/05\/FMA_Logo_Twitter_400x400.png","width":400,"height":400,"caption":"FMA - Finanzmarktaufsicht"},"image":{"@id":"https:\/\/www.fma.gv.at\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/FMA_AT"]}]}},"toolset-meta":[],"publishpress_future_action":{"enabled":false,"date":"2026-10-16 14:49:23","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"translation_priority","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/pages\/42596603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/comments?post=42596603"}],"version-history":[{"count":8,"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/pages\/42596603\/revisions"}],"predecessor-version":[{"id":42597173,"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/pages\/42596603\/revisions\/42597173"}],"wp:attachment":[{"href":"https:\/\/www.fma.gv.at\/en\/wp-json\/wp\/v2\/media?parent=42596603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}