Whistleblower System Design (HinSchG)

Overview

Draft legally compliant procedural rules (Verfahrensordnung) for internal reporting channels required under Germany’s Whistleblower Protection Act (HinSchG). The skill covers the full lifecycle — from creating a new set of procedural rules to validating an existing document against all mandatory HinSchG provisions.

Mandatory for all German companies with 50 or more employees since December 2023.

Example Chat

You: Create a Verfahrensordnung for our internal reporting channel. We are a mid-sized manufacturing company with 180 employees, no existing whistleblower system. We want to use an external ombudsperson (law firm) and an anonymous digital reporting portal.

Agent: I’ll create the procedural rules for your internal reporting channel. Let me start by loading the HinSchG requirements and using the template as a base…

(The agent copies the template, fills in company-specific details, configures the ombudsperson section, adds the digital portal as the anonymous reporting channel, and runs both validation tools.)

Agent: The Verfahrensordnung is ready. Both compliance checks pass — all 13 mandatory sections are present, timelines are correctly specified (7 days acknowledgement, 3 months feedback), and the 3-year deletion mandate is properly documented. I’ve left placeholders for contact details and the portal URL that you’ll need to fill in.

Output Excerpt

## 4. Verfahrensablauf

### 4.1 Eingang und Eingangsbestätigung

Die interne Meldestelle bestätigt der hinweisgebenden Person den
Eingang der Meldung **innerhalb von 7 Tagen** nach Eingang
(§17 Abs. 1 S. 2 HinSchG).

### 4.4 Rückmeldung

Die interne Meldestelle gibt der hinweisgebenden Person **innerhalb
von 3 Monaten** nach der Eingangsbestätigung eine Rückmeldung über
die ergriffenen oder geplanten Folgemaßnahmen sowie deren Gründe
(§17 Abs. 2 S. 1 HinSchG).

Validation Tools

The skill includes two extension tools that run automated compliance checks:

• hinschg_compliance_checker — Scans the procedural rules draft against all 13 mandatory HinSchG sections (§§2, 8, 10–17, 36). Reports missing sections and unfilled placeholders.
• anonymity_protocol_verifier — Validates anonymity and confidentiality provisions, checks the 3-year data deletion mandate (§11), and verifies the two legally required timelines (7-day acknowledgement, 3-month feedback). Flags incorrect retention periods.

Getting Started

Add your source materials to the project workspace, then activate the Whistleblower System Design (HinSchG) skill. The agent will guide you through the process step by step.