Skip to main content

NEWS

EU AI Office Whistleblowing Channel Announced

Published 24th November 2025

The EU AI Office has launched a whistleblowing channel dedicated to AI professionals—the first of its kind globally. This is excellent news. Below, please find our thoughts on this channel. We are basing this commentary on the public information posted on the Commission Website on the 24th November 2025. Please note that we have provided limited input on the drafting of this channel's policies. See our disclaimer statement at the end of this post.

Access The Channel Here

Contents

Share

Key Take-aways

The EU AI Office has launched a whistleblowing channel dedicated to AI professionals—the first of its kind globally.

In short:

  • What it is: The first AI-specialized whistleblowing channel globally.
  • What to report: “Information about any internal practices of AI model providers that may violate the obligations set out in the AI Act, or on any other activities that could endanger fundamental rights, health, or public trust, is welcome.”
  • Who can use it: Anyone who has gained access to the above information in a professional context, for instance as an employee, contractor, supplier, etc.
  • Key features: Anonymous reporting; seemingly strong confidentiality protections—however, no retaliation protection for reporting EU AI Act violations until Aug 2026; and insiders may already be protected if the violation they raise a concern about is covered under another EU law subject to the EU Whistleblower Directive.
  • U.S. insiders: May qualify for SEC protection (requires legal counsel).
  • Next step for insiders: If you suspect a violation, find pro bono legal counsel to consult with before your outreach. Visit aiwi.org/contact-hub for pro bono legal guidance.

Find here the FAQ of the whistleblowing channel and their confidentiality policy. 

What The Channel Does

The whistleblowing channel allows AI professionals to report violations of the EU AI Act directly to the EU AI Office, which will investigate and rectify any breaches.

Specifically, the EU AI Office reporting channel will: 

  • Offer advice on the whistleblowing process and appropriateness of the channel. 
  • Refer out-of-scope cases to appropriate member state channels.
  • Investigate EU AI Act violations and enforce compliance.
  • Provide updates to whistleblowers throughout the process.

Why This Matters

Our survey* of frontier AI insiders revealed that AI insiders urgently need a specialized channel for raising concerns—a clear “place to go” :

Anonymous frontier company insider 1: “Having an established, dedicated reporting channel would be extremely valuable—one where you could feel certain that sharing information through it is both authorized and appropriate.”

Anonymous frontier company insider 2: “[A dedicated channel] would help normalize and institutionalize whistleblowing, making it a routine and anticipated practice supported by standardized procedures.”

The EU AI Office is the first regulator globally to offer exactly this.

Expected Public Benefits

  • Direct effects: AI insiders now, for the first time ever, have a clear place to direct concerns they witness and see them addressed. Companies will need to educate their employees on the existence of this channel. This will lead to…
  • Stronger company internal whistleblowing channels: Stronger regulatory channels incentivize more independent, safer company internal whistleblowing channels. These contribute to effectively addressing and deterring misconduct. We have seen this in the EU and the US (Source).  
  • Template for Global AI Whistleblowing Channels: This channel sets precedent for AI whistleblowing channels globally—especially in the United States, where California’s Attorney General will introduce a whistleblower channel in line with SB53, or in the context of the envisioned AI Whistleblower Protection Act.
  • Allow AI insiders globally to validate concerns: Understanding whether ‘one should be concerned’ is not trivial in frontier AI. An expert-staffed channel now exists for anonymous evaluation of concerns, including the power to intervene where appropriate. 
  • Set precedent for other EU-level whistleblowing channels: Demonstration that EU-level bodies can commit to the EU Whistleblowing Directive, encouraging other EU-level bodies to follow suit.
  • Provide a template for US regulator AI whistleblowing channels.

*Survey by AIWI with frontier AI company insiders, 2025

What AI Insiders Should Know

  1. Familiarise yourself with the EU AI Act to recognize potential violations. As a starting point, examine Article 5, prohibited AI practices.  
  2. Seek legal counsel before reporting. Contact pro bono lawyers through aiwi.org/contact-hub to understand your protections. US-based insiders should note: you may be protected under the SEC whistleblower program when reporting to the EU AI Office, but this requires a separate procedure. Please contact AIWI for guidance or a (pro bono) lawyer directly for further details—you can find pro bono whistleblowing lawyers interested in AI under aiwi.org/contact-hub. Their legal expertise will be supplemented by AIWI’s AI expertise/ expert network.
  3. You do NOT need definite proof of a violation – and will receive feedback from the AI Office regardless: To be protected from retaliation under the EU Whistleblowing Directive (see below for context), you only need “reasonable grounds to believe” that the information reported was true at the time of reporting and may have constituted a violation of the law. Even if you do not qualify for protections, the EU AI Office seemingly takes confidentiality very seriously, evidenced by their strict confidentiality policy (see section below). This means the EU AIO can assess your concern and provide you with feedback regardless of whether your reports constitutes a violation of the law.
  4. Understand timing. EU retaliation protections for whistleblowers begin in August 2026. Until then, you will not have legal protection from retaliation in the EU but will rely solely on the EU AI Office’s confidentiality protections. (US-based employees may qualify for protections from the SEC, but this requires a separate procedure.)

Who Can Use This Channel

Anyone who gains access to “information about any internal practices of AI model providers that may violate the obligations set out in the AI Act, or on any other activities that could endanger fundamental rights, health, or public trust” in a professional context—including employees, contractors, and suppliers, per the EU Whistleblowing Directive.

Retaliation protections under the EU Whistleblowing Directive will be effective for individuals whose contracts are governed under EU law and if their disclosure otherwise qualifies for protection under the EU Whistleblowing Directive.

The Situation For International, e.g. US-based, Whistleblowers

Individuals working outside the EU can also use the EU AIO channel.

It is not uncommon for whistleblowing channels to be open internationally: The SEC whistleblower program, for instance, handed out 20% percent of whistleblower rewards to individuals outside the US in 2021 (Source). The EU AI Office (EU AIO) follows this model of encouraging international reports.

A California-based employee could hence use this channel, though they won’t receive EU retaliation protections. Why might they still report concerns to the EU AIO? For the same reasons that European whistleblowers approach the SEC (besides rewards, which the EU AIO does not offer):

  1. Strong confidentiality protections.
  2. Subject-matter expertise.
  3. Trust in enforcement capabilities.

The EU AIO confidentiality protections read well, and their specialized AI expertise may be uniquely suited to understanding and acting on reports.

In addition: US insiders might still be able to gain retaliation protection through the SEC whistleblower program if their information shows the company materially misled shareholders. Reporting to the EU AIO does not automatically forfeit this protection.

Important: Consult legal counsel before submitting. AIWI can connect you to pro bono lawyers with AI expertise—even anonymously—through aiwi.org/contact-hub.

What Makes This Channel Strong

This channel exceeds the standard for EU-level whistleblowing channels (e.g., the DMA/DSA channel). The EU AI Office voluntarily committed to the same confidentiality standards as those required for member state bodies under the EU Whistleblowing Directive—unprecedented for EU-level bodies.

Key features:

  • Anonymous, ISO-certified platform for secure two-way communication.
  • First EU-level channel committing to strict confidentiality under the EU Whistleblowing Directive:
  • Three dedicated staff members receive all reports.
  • The whistleblower’s consent is required to share identifying information with third parties.
  • Dedicated confidentiality policy with explicit commitments (Link.
  • Retaliation protections for “reasonable cause” suspicions—even if no actual violation occurred or if the EU AI Office isn’t the appropriate channel (protections provided by your employment jurisdiction). In some cases, protections only apply from August 2026.
  • Quick confirmation (7 days) and updates on results of investigation (3 months by default, up to 6 months) to whistleblowers committed by the EU AI Office, possibly including more frequent updates along the way.

We cannot verify these protections in practice, but the framework looks promising.

Current Limitations

  1. Retaliation protections don’t begin until mid-2026 for AI Act violations specifically. However:
  • Many AI Act violations may already fall under existing product safety laws—the EU AI Office can direct you to appropriate reporting channels covering those laws.
  • We would argue that the EU AI Act is already covered under the Whistleblowing Directive as the EU AI Act is a Product Safety Law – Product Safety Laws are already covered under the EU Whistelblowing Directive today.
  • Anonymity is the default, confidentiality protections appear strong. Risks from retaliation arise from a whistleblower’s identity becoming known.
  1. Non-EU individuals lack EU retaliation protections. However:
  • This mirrors successful models like the SEC, which actively encourages international whistleblowers through strong confidentiality.
  • US individuals may, in some cases, gain SEC whistleblower protections when reporting EU AI Act violations.
  1. Enforcement capability remains to be proven in practice.

What Matters Next

The EU AI Office must now implement its confidentiality processes and conduct planned trainings as outlined in their communications. We hope they will handle early cases with particular care.

Disclaimer

AIWI was a contributing stakeholder in developing the EU AI Office’s whistleblower channel. Our involvement was limited to providing subject-matter expertise during the communication and policy drafting phases. Our comments here align with our previous input to the EU AI Office and reflect our commitment to effective AI whistleblowing regulation globally.
Close Menu