Business obligations, registers and licences · Czechia and Slovakia
Whistleblowing and internal reporting systems
Businesses with at least 50 employees must have an internal system for reporting wrongdoing, with a responsible person, time limits and whistleblower protection. We implement it to meet Slovak and Czech law while remaining practical: clear procedures for real situations without unnecessary bureaucracy. We can also take on investigations as an external person.
- Lawyer admitted to both the Czech and Slovak Bars
- External responsible person service also available
- Prices agreed upfront
What we'll do for you
A system that exists only on paper, that nobody knows or uses, will not withstand inspection. We implement a working system so that when a report arrives, you know exactly what to do and by when.
Select an item to see the details.
-
Assessing obligations
We establish whether you are an obliged entity under Slovak Act No. 54/2019 Z. z., Czech Act No. 171/2023 Sb. or both, and exactly what applies to you.
-
Internal policy
A policy covering all required elements — reporting methods, investigation, confidentiality, record-keeping and measures against retaliation.
-
Reporting channel
We establish practical methods for receiving reports in writing, electronically and in person, with at least one channel continuously available and the whistleblower's identity protected.
-
Responsible person
We train your internal responsible person or take on their duties externally to the extent permitted by law, with the benefit of a lawyer's independence and professional confidentiality.
-
Investigating reports
We acknowledge receipt and investigate within statutory time limits, propose measures and prepare materials for management, including sensitive cases that may lead to a criminal complaint or termination of employment.
-
Training
Short, clear training for management and employees so people understand and trust the system.
Deliverablea functioning reporting system — internal policy, reporting channel and arrangements for investigating reports within statutory time limits
How it works
Does this process fit your matter? Describe it to the attorney →
- Assessmentday 0
We establish your obligations in Slovakia and the Czech Republic and propose the scope of the system.
- Implementing the system
We prepare the policy and documentation, establish the reporting channel and explain the procedure to employees.
- Operation
The system operates internally with our support, or with us as the external person receiving and investigating reports.
- Maintenance and reporting
Records, time limits and updates when the law or company structure changes.
No-obligation enquiry
Ready to start?
Send us an enquiry. We reply within 24 hours with a price confirmation and next steps. The first 30-minute consultation is free and commits you to nothing.
- 1Send your enquiry via this form
- 2Within 24 h you get a price confirmation and plan
- 3We start work only after your approval
Not keen on calls or email? Message us on WhatsApp →
Prefer to book a time right away? Book a consultation →
Or email us about this matter.
What clients ask
Didn’t find your question? Ask us directly →
When must a business have a reporting system?
In Slovakia, employers with at least 50 employees must have one, as must employers in selected sectors regardless of employee numbers, including financial services, transport safety and the environment. Public authorities are covered from 5 employees (§ 10(1) of Act No. 54/2019 Z. z.). In the Czech Republic, obliged entities include an employer with at least 50 employees as at 1 January, unless it is an obliged entity under Czech anti-money laundering law subject to a special regime (§ 8(1) of Act No. 171/2023 Sb.). This AML exception often causes confusion: a company that believes it is outside the requirement may fall within it through another route. We assess precisely whether and to what extent it applies to you.
Can an external company investigate reports?
Yes. Slovak law expressly allows receipt and acknowledgment of reports to be outsourced by contract, and employers with fewer than 250 employees, other than public authorities, may also outsource the investigation itself (§ 10(2) of Act No. 54/2019 Z. z.). Czech law permits another person to operate the internal reporting system, without affecting the obliged entity's responsibility (§ 8(2) of Act No. 171/2023 Sb.). For groups, Czech obliged entities with no more than 249 employees may share a system or use one established by another obliged entity (§ 8(3)), allowing one reporting line to serve several companies. As lawyers, we add statutory confidentiality and independence from internal company relationships.
What time limits apply to a report?
In Slovakia, receipt must be acknowledged within 7 days and the investigation outcome generally communicated within 90 days of acknowledgment (§ 10(6) and (8) of Act No. 54/2019 Z. z.). In the Czech Republic, acknowledgment is also due within 7 days, but assessment of the report's merits has a stricter baseline of 30 days from receipt. In factually or legally complex cases, this can be extended by 30 days at a time, no more than twice, and the whistleblower must be informed in writing before the period expires (§ 12(2) and (3) of Act No. 171/2023 Sb.). Businesses operating in both countries therefore cannot simply copy the Slovak process into the Czech Republic: the Czech baseline is three times shorter. We configure the system to track time limits by country.
Must we also accept anonymous reports?
The two countries must be distinguished. The Slovak system also provides for anonymous reports. Czech Act No. 171/2023 Sb. does not generally require them to be accepted or recorded under the statutory regime; a business may establish a broader voluntary channel. If the identity of an initially anonymous whistleblower becomes known to a person who could expose them to retaliation, protection under § 4(3) applies. We assess the separate AML regime independently. The internal policy will set the rules for receiving and investigating reports.
An employee reported a problem and management wants to dismiss them. What now?
Care is needed: whistleblowers are protected against retaliation, and penalising someone for reporting can be costly. Obtain a legal assessment before taking employment action. We help distinguish legitimate employment grounds from prohibited retaliation.
How much do implementation and administration cost?
Implementation is a one-off charge based on the company's size. The external person service is usually covered by a monthly retainer. We confirm both prices in advance and adhere to what we have agreed.
Legal Q&A
Common questions on this topic
-
Do we need an internal whistleblowing system?
Yes, if you employ at least 50 people; public authorities are covered from five employees, and employers in financial services, transport safety or environmental services regardless of size. The system requires a designated responsible person, published reporting channels, an internal policy and a register of reports. Receipt must be acknowledged within seven days and investigation results communicated within 90 days. The Whistleblower Protection Office may impose a fine of up to EUR 50,000, or EUR 100,000 for employers with at least 250 employees.
Read the answer -
Who is a beneficial owner, and how are they identified?
A beneficial owner is always an individual, never a company. In a company, this particularly includes anyone with a direct or indirect interest of at least 25% in voting rights or registered capital, the right to appoint or remove statutory or supervisory bodies, control by other means, or entitlement to at least 25% of the economic benefit. If no such individual can be identified, senior management, meaning the statutory body, is treated as the beneficial owner.
Read the answer -
What happens if we are not registered in RPVS or miss annual verification?
The consequence is more than a fine. If beneficial owner verification is missing, the public-sector counterparty is not in default when it withholds performance for that reason, so it may lawfully withhold payment of your invoice. False or incomplete data can bring a company fine equal to the economic benefit obtained, or otherwise EUR 10,000–1,000,000, and EUR 10,000–100,000 for the statutory representative. The two-year re-registration ban arises in the sanction cases governed by Section 13a, not after every voluntary deletion.
Read the answer
Further reading
AML amendment: goAML registration by 30 November 2026 and stricter beneficial owner verification
AML amendment Act No. 73/2026 Z. z. has applied since 1 June 2026. Obliged entities must register in the Financial Intelligence Unit’s goAML system by 30 November 2026 and must not rely solely on the register of legal entities when verifying beneficial owners.
Read more →
Conflicts of interest in public procurement: when bidders risk exclusion
A former employee on the contracting authority’s side, a designer included in the bid or personal links to the committee: Public Procurement Office guidance No. 3/2026 explains which connections create conflicts and when exclusion follows. Potential influence, disclosure and mitigation are decisive.
Read more →
MiCA CASP authorisation: preparing your application to NBS
Crypto-asset services in the EU require CASP authorisation, and Slovakia’s transitional period for former crypto trade licences ended on 30 December 2025. Delegated Regulation (EU) 2025/305 defines the NBS application requirements, and subsequent changes restart assessment.
Read more →