Partner interview with M3M, Poland: The growing importance of Whistleblowing Solutions in Cyber Security and Data Protection

The Polish company M3M specialises in helping organisations comply with regulations like RODO, the Whistleblower Protection Act, NIS2, and DORA, while ensuring robust data protection. In this article, founder Pawel Markiewicz explores the evolving role of whistleblowing solutions and their impact on cyber security and data protection.

Please introduce yourself and tell us about your company and your services

– My name is Pawel Markiewicz, and I am an entrepreneur specialising in cyber security and data protection. I run M3M, a company dedicated to helping organisations ensure compliance with regulations such as RODO, the Whistleblower Protection Act, NIS2, and DORA while effectively safeguarding their data.

– Our services include outsourcing Data Protection Officers (DPOs), supporting information security audits, and implementing innovative solutions like Data Security Platforms.

How do you see the current landscape for whistleblowing solutions in your industry?

– The current landscape of whistleblowing solutions in the data protection and cyber security industry is highly dynamic and constantly evolving. Increasing legal requirements and the growing need to foster a culture of ethics and transparency within organisations have made whistleblowing an increasingly significant topic.

Key aspects include:

• Increased awareness – Companies are increasingly recognising that whistleblowing systems are not just a legal requirement (e.g., the Whistleblower Protection Act) but also a tool for building trust and credibility. Properly implemented solutions can prevent major crises by addressing issues at an early stage.
  
  
• Technological support – Whistleblowing platforms utilise advanced technologies, such as data encryption and anonymous communication channels, to ensure the confidentiality and security of reported information.
  
  
• Data protection and trust – In the data protection industry, particular emphasis is placed on safeguarding whistleblower data and ensuring anonymity. Compliance with RODO and the secure storage and processing of reports are critical elements.
  
  

– Whistleblowing solutions have become a standard in the data protection industry, but their effectiveness relies on the right balance of technology, education, and fostering a culture of trust. Organisations that prioritise these areas not only reduce risks but also strengthen their market position as transparent and responsible entities.

Do you believe the EU-wide whistleblowing law will bring broader benefits to organisations or society as a whole?

– Yes, I believe the Whistleblower Protection Act provides significant benefits for both organisations and society.

Key benefits for organisations include:

• Early detection of problems – This allows organisations to identify potential threats, such as fraud or corruption, at an early stage and address them before they escalate.
  
  
• Building confidence – Transparent whistleblowing procedures enhance trust among employees, partners, and customers, boosting the organisation’s reputation.
  
  
• Regulatory compliance and risk minimisation – Adhering to whistleblowing regulations reduces the risk of financial penalties and reputational damage linked to misconduct.
  
  
• Improving organisational culture – Implementing whistleblowing systems promotes an ethical and transparent culture where employees feel responsible for the organisation’s collective wellbeing.
  
  

For society, the benefits include:

• Protecting the public interest – Whistleblower laws help uncover activities that could harm the public, such as financial fraud, labour rights violations, or environmental damage.
  
  
• Reducing corruption – Effective legislation combats corruption and fraud in both public and private sectors.
  
  
• Raising ethical standards – Encouraging responsibility and ethical behaviour in organisations contributes to higher business and societal standards overall.
  
  
• Whistleblower protection – These laws shield whistleblowers from retaliation, enabling them to report misconduct without fear of job loss or other repercussions.
  
  

– The Whistleblower Protection Act represents a significant step towards fostering a more ethical, transparent, and accountable workplace. When paired with education and advanced technologies, it can deliver tangible benefits to both organisations and society at large.

What are the most common reasons for your clients wishing to implement a whistleblowing system?

– The primary reason clients choose to implement whistleblowing systems is to comply with legal requirements. However, legal compliance is not their only motivation.

– Many clients also seek to minimise risks by enabling the early detection of potential problems. Additionally, implementing a whistleblowing system helps organisations build an ethical culture, protect their reputation, and foster trust among employees, partners, and stakeholders.

– Today, whistleblowing systems have evolved beyond being merely a legal necessity. They are now regarded as a strategic element of organisational management.

What concerns do your clients have about implementing a reporting channel, and how do you address these concerns?

– Clients often express various concerns about establishing an internal reporting channel for whistleblowers.

– The most common fear I have encountered is the potential abuse of the system. Clients worry that the reporting channel could be used for false accusations, leading to internal conflicts and misuse. I understand these concerns, but they can be mitigated through a well-designed procedure. This includes implementing filters at the initial stage of reviewing applications and providing staff with appropriate training.

– Another concern is the cost of implementation. However, software vendors typically offer flexible pricing models that cater to companies of different sizes. For example, access to our partner Whistlelink’s system, including maintenance, costs a very reasonable €99 per month.

– I have also encountered fears among whistleblowers that the system may not guarantee full anonymity, which could discourage them from reporting issues. In my experience, the technologies used in whistleblowing systems ensure complete anonymity and data protection, alleviating such concerns.

– The key to addressing these challenges lies in clearly communicating the benefits of implementing a whistleblowing system, providing robust technical and content support, and customising the solution to meet the specific needs of each organisation.

To learn more about M3M’s expertise and services, visit their website here.