Design a comprehensive whistleblower policy and organizational ethics framework covering reporting channels, investigation procedures, anti-retaliation protections, compliance training, and a code of conduct that builds a culture of integrity and accountability.
## ROLE You are an ethics and compliance program designer with expertise in whistleblower protection systems, corporate integrity programs, and regulatory compliance frameworks. You have built ethics programs for organizations subject to Sarbanes-Oxley, Dodd-Frank, the EU Whistleblower Directive, and industry-specific regulations. You understand the intersection of legal requirements, organizational culture, and practical implementation that determines whether an ethics program genuinely prevents misconduct or merely exists on paper. ## OBJECTIVE Design a comprehensive whistleblower policy and ethics framework that creates safe, accessible reporting channels, ensures thorough and impartial investigations, protects reporters from retaliation, and builds an organizational culture where ethical behavior is expected, recognized, and reinforced at every level. ## TASK ### Step 1: Organization & Regulatory Context Define the ethics program scope: - Organization name: [ORGANIZATION_NAME] - Industry: [INDUSTRY] - Employee count: [NUMBER_OF_EMPLOYEES] - Geographic presence: [COUNTRIES_AND_REGIONS] - Public or private: [PUBLIC / PRIVATE] - Regulated industry: [YES_SPECIFY_REGULATORS / NO] - Existing ethics program: [NONE / BASIC / MATURE] - Recent ethics incidents: [ANY_KNOWN_ISSUES_OR_CONCERNS] - Union workforce: [YES / NO] - Board oversight structure: [AUDIT_COMMITTEE / COMPLIANCE_COMMITTEE / FULL_BOARD] - Applicable whistleblower laws: [SOX / DODD_FRANK / EU_DIRECTIVE / STATE_LAWS / OTHER] Identify all applicable whistleblower protection laws based on jurisdiction, industry, and organizational characteristics. Map specific legal requirements that must be incorporated into the policy. ### Step 2: Whistleblower Policy Design Create the core whistleblower policy document: **Scope & Coverage** - Define who can report: employees, contractors, temporary workers, interns, board members, vendors, customers, and former employees - Define reportable concerns: financial fraud, accounting irregularities, bribery and corruption, safety violations, discrimination, harassment, environmental violations, data breaches, regulatory violations, conflicts of interest, and retaliation - Clarify the distinction between whistleblower reports, HR complaints, and routine grievances - Address anonymous reporting: permitted, encouraged, and limitations on investigation when anonymous **Reporting Channels** Design multiple accessible reporting mechanisms: **Internal Channels** - Direct supervisor reporting (with bypass option for supervisor-related concerns) - Compliance officer or ethics hotline: [DESIGNATED_COMPLIANCE_CONTACT] - HR department escalation path - Senior management and executive reporting - Audit committee or board-level reporting for financial and executive misconduct - Ombudsperson program (if applicable for [ORGANIZATION_SIZE]) **External Channels** - Third-party ethics hotline: telephone, web portal, and mobile app access - Available [24/7 / BUSINESS_HOURS] in [LANGUAGES_NEEDED] - Vendor recommendation based on [ORGANIZATION_SIZE]: EthicsPoint, NAVEX Global, Convercent, or similar - Integration with case management for tracking and resolution **Regulatory Channels** - Acknowledge employees' right to report directly to regulatory agencies - Identify relevant agencies: SEC, OSHA, DOJ, state attorneys general, EU supervisory authorities - Clarify that internal reporting is encouraged but not required before external reporting - Address Dodd-Frank and EU Directive protections for external reporting ### Step 3: Investigation Procedures Establish thorough, impartial investigation protocols: **Intake & Assessment** - Report receipt acknowledgment timeline: within [3/5] business days - Initial assessment criteria: credibility, severity, urgency, and jurisdictional considerations - Triage framework: prioritize by potential harm, legal exposure, and ongoing nature of conduct - Preliminary determination of investigation scope and resources needed - Conflict of interest screening for investigators **Investigation Process** - Investigator selection: internal compliance team, legal department, or external investigators based on complexity and conflict considerations - Investigation planning: scope definition, evidence preservation, witness identification, and timeline establishment - Evidence collection: document review, electronic evidence, financial analysis, and physical evidence - Witness interviews: preparation, documentation, confidentiality reminders, and anti-retaliation warnings - Subject interviews: timing, rights notification, representation considerations, and documentation **Investigation Standards** - Impartiality and independence requirements - Confidentiality protocols: need-to-know basis, information compartmentalization - Documentation standards: interview notes, evidence logs, analysis memoranda - Legal privilege considerations and attorney involvement triggers - Chain of custody for physical and electronic evidence **Resolution & Outcomes** - Investigation findings report: factual findings, policy violation determination, and root cause analysis - Recommendation framework: disciplinary action, process improvements, training, and monitoring - Disciplinary action consistency: ensure proportional responses aligned with precedent - Remediation tracking: corrective actions, implementation verification, and effectiveness assessment - Reporter notification: inform the reporter of investigation completion and general outcome (within confidentiality limits) - Case closure documentation and record retention ### Step 4: Anti-Retaliation Protections Build robust protections for reporters: **Prohibited Retaliation** Define retaliation broadly to include: - Termination, demotion, suspension, or reduction in hours - Threats, intimidation, harassment, or hostile work environment - Reassignment to less desirable positions or locations - Denial of promotion, training, or development opportunities - Negative performance evaluations not supported by documented performance issues - Exclusion from meetings, projects, or teams - Compensation or benefit reductions - Any other adverse action that would dissuade a reasonable person from reporting **Protective Measures** - Documentation of reporter's current position, performance, and compensation at time of report - Manager notification that the employee has engaged in protected activity (without revealing report content) - Increased HR monitoring of employment decisions affecting reporters for [12/24] months - Requirement for compliance review before any adverse employment action against a known reporter - Independent review process if the reporter believes retaliation has occurred **Retaliation Response** - Expedited investigation of retaliation complaints - Interim protective measures during investigation (workload adjustments, reporting line changes) - Disciplinary action against retaliators up to and including termination - Remediation for retaliation victims: restoration of position, back pay, and damages - Board-level reporting of confirmed retaliation cases ### Step 5: Code of Conduct & Ethics Framework Build the broader ethics infrastructure: **Code of Conduct** Draft a comprehensive code covering: - Core values and ethical principles specific to [ORGANIZATION_NAME] - Conflicts of interest: definition, disclosure requirements, and management procedures - Gifts and entertainment: monetary thresholds, approval requirements, and prohibited categories - Bribery and corruption: zero-tolerance policy, facilitation payment prohibition, and third-party due diligence - Financial integrity: accurate books and records, expense reporting, and internal controls - Confidential information: protection obligations, insider trading prevention, and social media guidelines - Fair dealing: competition, customers, suppliers, and competitors - Workplace respect: anti-discrimination, anti-harassment, and inclusion - Health and safety: workplace safety, substance abuse, and violence prevention - Environmental responsibility: compliance and sustainability commitments - Political activities and lobbying: personal vs. organizational, contribution policies - Use of company assets: technology, intellectual property, and physical resources **Decision-Making Framework** Provide employees with a practical ethics decision-making model: - Is it legal? Does it comply with all applicable laws and regulations? - Is it consistent with our policies? Does it align with the code of conduct? - Is it right? Would you be comfortable if it were reported publicly? - Is it fair? Does it treat all stakeholders with respect and fairness? - If unsure, who should you ask? Escalation contacts and resources ### Step 6: Training & Communication Program Design the ethics education system: **Training Curriculum** - New hire ethics orientation: code of conduct, reporting channels, and key policies - Annual ethics refresher: scenario-based training with real-world examples from [INDUSTRY] - Role-specific training: managers (investigation basics, anti-retaliation), finance (fraud prevention), procurement (anti-bribery), HR (harassment prevention) - Board and executive training: tone at the top, governance responsibilities, and fiduciary duties - Training delivery: online modules, in-person workshops, and micro-learning for reinforcement - Assessment and certification: quiz-based verification and completion tracking **Ongoing Communication** - Ethics awareness campaigns: quarterly themes, poster campaigns, newsletter content - Leadership messaging: CEO and board communications reinforcing ethical culture - Ethics recognition program: acknowledge employees who demonstrate ethical leadership - Ethics metrics reporting: hotline activity, investigation outcomes, training completion, and culture survey results ### Step 7: Program Governance & Continuous Improvement Establish oversight and evolution mechanisms: **Governance Structure** - Chief Ethics and Compliance Officer role and reporting line - Ethics committee composition and meeting cadence - Board audit committee oversight and reporting requirements - Regulatory examination preparation and cooperation protocols **Program Effectiveness Assessment** - Annual ethics culture survey with benchmarking - Hotline metrics analysis: report volume, category trends, resolution times, and substantiation rates - Investigation quality reviews and process audits - Regulatory development monitoring and policy update triggers - External program assessment every [2/3] years - DOJ Evaluation of Corporate Compliance Programs alignment check Deliver the complete policy document, code of conduct, investigation procedures manual, and training plan as implementation-ready documents with all bracketed fields for organizational customization.
Or press ⌘C to copy
Replace these placeholders with your own content before using the prompt.
[ORGANIZATION_NAME][INDUSTRY][NUMBER_OF_EMPLOYEES][COUNTRIES_AND_REGIONS][ANY_KNOWN_ISSUES_OR_CONCERNS][DESIGNATED_COMPLIANCE_CONTACT][ORGANIZATION_SIZE][LANGUAGES_NEEDED]