Whistleblower Protection Act (ZZPri), Articles 7 and 9, Recording of Oral and Telephone Reports
7. člen, 9. člen Zakona o zaščiti prijaviteljev (ZZPri)
In force since .
An interception and recording consent rule binding public and private bodies.
- Obligation class
- Consent, Governance
As of .
What it requires
- Enter each oral report in the register by an accurate record of its content (article 7, paragraph 2).no control in the NIST Privacy Framework
- Record an oral report as audio only with the whistleblower's consent, and document a report made by telephone by recording the call only after prior notice and with the whistleblower's consent (article 7, paragraph 2).NIST Privacy FrameworkCT.PO-P1
- Give the whistleblower the chance, if they wish, to check, correct and confirm with their signature the record of an oral report (article 7, paragraph 2).NIST Privacy FrameworkCT.PO-P3
- Set up an internal reporting channel, with a dedicated e-mail address and telephone number or other contact details, if you are a public- or private-sector entity with 50 or more employees (article 9, paragraphs 1 and 2).no control in the NIST Privacy Framework
These lines are LexLint's reading of the law's text, as of .
In the frameworks
- NIST Privacy Framework
- CT.PO-P1Policies, processes, and procedures for authorizing data processing (e.g., organizational decisions, individual consent), revoking authorizations, and maintaining authorizations are established and in place.
- CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Settledness
- As of
What this law does
Article 7, paragraph 2 of the Whistleblower Protection Act (Zakon o zaščiti prijaviteljev, ZZPri) requires an oral report to be entered in the register of reports by an accurate record of its content. Article 7, paragraph 2 allows an oral report to be recorded as audio also, with the whistleblower's consent. Article 7, paragraph 2 allows a report made by telephone to be documented by recording the call, after prior notice and with the whistleblower's consent.
Article 7, paragraph 2 gives the whistleblower the chance, if they wish, to check, correct and confirm with their signature the record of the oral report. Article 9, paragraph 1 requires an internal reporting channel to be set up by designating a dedicated e-mail address and telephone number or other contact details for receiving reports, measures to prevent disclosure of the whistleblower's identity, and a trusted person.
Article 9, paragraph 2 makes entities in the public and private sector with 50 or more employees obliged to set up an internal reporting channel. Article 33, paragraph 2 gives private-sector obliged entities with up to 249 employees until to set up their internal reporting channels. Article 35 provides that the Act takes effect on the fifteenth day after its publication in Uradni list, which was on .
When LexLint raises it
When your app profile says your app records calls or processes voice recordings.