Can globaleaks be used for other use cases other than "whistleblowing"? E.g. in relation to EU CSDDD

[KristianAppell]

Hi everyone. I am new here and not a developer. But I have a client that uses GLOBALEAKS for the Spanish whistleblower law 2/2023. the question is, who can help to calibrate or adapt new rules and features that would reflect certain complaint categories and other rules? We want to cover the German LkSG and the future EU CSDDD. Thank you.

[karlludwigweise]

Hi @KristianAppell,

what do you mean with new rules and features? Not sure LkSG and EU CSDDD will require new features.

[evilaliv3]

Thank you so much for the question @KristianAppell

While GlobaLeaks was initially designed in the context of secure whistleblowing, particularly in relation to whistleblowing laws, the application has always been conceived as a generic reporting platform capable of supporting many different use cases.

Over the years, the GlobaLeaks team, in collaboration with community members, has applied the technology across a broad and growing set of internal and external reporting contexts, including (but not limited to):

• Whistleblowing for anticorruption and corporate compliance, especially in relation to the European Whistleblowing Directive
• Reporting of data breaches and privacy incidents, in the context of GDPR
• Reporting of gender-based violence
• Child safeguarding reports, in line with relevant regulations
• Reporting of code of conduct violations
• Reporting of human rights violations and war crimes
• Secure reporting for investigative journalism

In this sense, the LKSG use case (German Supply Chain Due Diligence Act) is a natural and important extension. Regulations like the LKSG explicitly require organizations to implement safe reporting channels, ensuring that potential reporters have a secure, trusted, and anonymous mechanism to file concerns.

Implementing LKSG compliance with GlobaLeaks does not require any development work, only configuration steps, which can be carried out easily:

• Create a dedicated reporting channel for LKSG topics, with data retention policies aligned with the regulation;
• Configure a tailored questionnaire to collect the information required for proper LKSG reporting;
• Set up dedicated users/recipients authorized to receive and process reports submitted through this channel.