# Whistleblower Channel Data Protection Assessment Template

## Channel Details

| Field | Value |
|-------|-------|
| Organisation | [Atlas Manufacturing Group] |
| Channel Platform | [ ] EQS Integrity Line [ ] NAVEX EthicsPoint [ ] WhistleB [ ] In-house [ ] Other: _____ |
| Jurisdictions | _________ |
| Assessment Date | [DD/MM/YYYY] |

## Compliance Checklist

| Requirement | Status | Notes |
|------------|:------:|-------|
| Anonymous reporting supported | [ ] Yes [ ] No | Required in FR, ES, IT |
| Identified reporting supported | [ ] Yes [ ] No | Primary mechanism |
| Encryption at rest (AES-256+) | [ ] Yes [ ] No | Art. 32 |
| Encryption in transit (TLS 1.3) | [ ] Yes [ ] No | Art. 32 |
| Access restricted to designated persons | [ ] Yes [ ] No | Art. 16(1) |
| Audit logging enabled | [ ] Yes [ ] No | Detect unauthorized access |
| Secure two-way feedback | [ ] Yes [ ] No | Art. 9(1)(b) |
| Separated from HR systems | [ ] Yes [ ] No | Prevent data leakage |
| DPIA completed | [ ] Yes [ ] No | Mandatory |
| Conflict of interest routing | [ ] Yes [ ] No | Reports about designated persons |
| Privacy notice provided to all employees | [ ] Yes [ ] No | Art. 13/14 |
| Data processing agreement with platform provider | [ ] Yes [ ] No | Art. 28 |

## Designated Persons

| Role | Name | Access Level |
|------|------|-------------|
| Primary Ethics Officer | _________ | Full report access |
| Deputy Ethics Officer | _________ | Full report access |
| Alternative (conflict routing) | _________ | Reports about Ethics Officers |

## Retention Configuration

| Jurisdiction | Applicable Law | Retention Period | Configured? |
|-------------|---------------|:---------------:|:-----------:|
| France | Loi Waserman + CNIL | 2 months | [ ] Yes [ ] No |
| Germany | HinSchG Art. 11 | 3 years | [ ] Yes [ ] No |
| Spain | Ley 2/2023 | 3 months | [ ] Yes [ ] No |
| Italy | D.Lgs. 24/2023 | 5 years | [ ] Yes [ ] No |

## Sign-Off

| Role | Name | Signature | Date |
|------|------|-----------|------|
| DPO | _________ | _________ | _________ |
| Chief Compliance Officer | _________ | _________ | _________ |