French Corporate Environment Not So Whistleblower-Friendly
Client Alert | less than 1 min read | 01.09.06
It appears that the French government has a very different philosophy from that of the U.S. government when it comes to employee whistleblowers. As the attached article (http://www.crowell.com/pdf/Newsroom/ DataProtection_Dhont.pdf) discusses in depth, far from seeking to encourage and reward whistleblowing, French law is affirmatively concerned that the practice may abuse individuals' privacy and data-protection rights, with the result that in the past year, French regulators and courts have struck down Sarbanes-Oxley-inspired efforts by several American companies to implement ethics hotlines for their French employees, and the most recent French regulatory guidance permits such hotlines only under limited circumstances, and with appropriate safeguards to prevent defamation and protect privacy.
Contacts
Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Client Alert | 10 min read | 09.11.26
Mining, Indigenous Consultation Rights, and Investment Treaty Protection
Client Alert | 2 min read | 09.11.26
New ISOO Guidance Directs Federal Agencies to Provide More CUI Guidance to Contractors
Client Alert | 4 min read | 09.10.26
European Commission Publishes Landmark Guidelines on Exclusionary Abuses by Dominant Companies

