---
title: "EU Whistleblower Directive — Directive (EU) 2019/1937 — KYE Protocol™ coverage"
description: "EU Whistleblower Directive — Directive (EU) 2019/1937 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/eu-whistleblower-directive/
lang: en
source: "KYE Protocol"
---

> EU Whistleblower Directive — Directive (EU) 2019/1937 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

EU Whistleblower Directive — Directive (EU) 2019/1937

# EU Whistleblower Directive — Directive (EU) 2019/1937 — 100% of in-scope requirements covered.

4 requirements · 3 in scope (3 enforced) · 1 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

**Source:** Directive (EU) 2019/1937 establishes common minimum standards for the protection of persons who report breaches of Union law. Article 9 requires internal reporting channels to acknowledge receipt within 7 days and to provide feedback within a reasonable timeframe (not exceeding 3 months); Article 11 requires diligent follow-up by a designated impartial person or department; Article 16 requires the identity of the reporting person to be kept confidential and disclosed only to authorised staff on a need-to-know basis; Article 19 prohibits any form of retaliation. KYE Protocol™ governs whether an AI-assisted intake-triage decision, an access to a reporter's identity, or a case disposition may PROCEED to a consequential action — under a named case-handler's authority, on a recorded need-to-know basis, with confidentiality evidence captured, a signed Evidence Pack™, and a contestability record. KYE™ does not investigate the report, judge the allegation, or decide whether wrongdoing occurred. · **License:** EU Directives are published by the Publications Office of the European Union; KYE™ registry paraphrases each requirement's intent and cites the official article identifier for mapping purposes only.

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| Confidentiality & need-to-know access to a reporter's identity | 1 | 1 | 0 | 0 | 0 | **100%** |
| Named-authority on the case disposition (acknowledgement / feedback clocks) | 1 | 1 | 0 | 0 | 0 | **100%** |
| Contestability & reconstruction of the handling | 1 | 1 | 0 | 0 | 0 | **100%** |
| Substantive investigation & whether the breach occurred | 1 | 0 | 0 | 0 | 0 | **0%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `eu-whistleblower-directive.confidentiality-need-to-know-access` | Access to a reporter's identity proceeds only under a recorded need-to-know named-authority decision | enforced | **audit\_events**: `kye.purpose.request.v1`, `kye.purpose.admissibility.v1`, `kye.evidence.decision_map.v1` **engines**: `internal`, `internal` **rule\_packs**: `kye:rule-pack:whistleblower-speakup` **dictionaries**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `eu-whistleblower-directive.case-disposition-named-authority` | A case disposition (close / escalate) under the acknowledgement / feedback clocks proceeds only under a recorded named-authority decision | enforced | **audit\_events**: `kye.purpose.admissibility.v1`, `kye.evidence.decision_map.v1`, `kye.evidence.pack.v1` **engines**: `internal`, `internal` **rule\_packs**: `kye:rule-pack:whistleblower-speakup` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md`, `constitution/13-RESILIENCE-LOOP.md` |
| `eu-whistleblower-directive.handling-contestability-reconstruction` | Contestability & reconstruction of the AI-assisted handling for a confidentiality or follow-up challenge | enforced | **audit\_events**: `kye.evidence.pack.v1`, `kye.replay.context_seal.v1`, `kye.replay.proof.v1` **engines**: `internal`, `internal` **rule\_packs**: `kye:rule-pack:whistleblower-speakup` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md`, `constitution/21-DELEGATED-AUDITABILITY.md` |
| `eu-whistleblower-directive.substantive-investigation` | Substantive investigation, assessment of the reported breach, and the remediation decision | out-of-scope | _(no enforcement cited)_ |

Canonical KYE™ surfaces referenced on this page: [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) · [KYE Protocol™](https://kyeprotocol.com/).