Why a recording satisfies Article 18 without a transcript

The question

Article 18 of Directive (EU) 2019/1937 governs how an oral report has to be documented. A system that captures a spoken report as audio, anonymises it, and retains only that anonymised recording — with no transcript ever produced, and no step where the reporter checks, corrects, and signs a written version of what they said — needs to answer a specific question: does that design satisfy Art. 18, or does it fall short by skipping the transcript-and-signature step entirely?

The short answer is that it satisfies Art. 18, and the reasoning is textual rather than a matter of interpretation or policy preference. The recording is one of two options the Article offers as genuine alternatives, not a lesser substitute for a transcript — and the obligation to let the reporter check, correct, and sign only attaches, by the Article's own wording, to the other option.

Article 18(2): an explicit either/or, not a fallback

Where a recorded telephone line or another recorded voice messaging system is used for reporting, Art. 18(2) gives the entity a choice between two ways of documenting it:

"(a) by making a recording of the conversation in a durable and retrievable form; or (b) through a complete and accurate transcript of the conversation prepared by the staff members responsible for handling the report."

This is drafted as "one of the following ways" — a structural either/or, not a preferred method with a fallback. Recording and transcript sit at the same level. Provoxis's own voice channel is a recorded voice messaging system in exactly this sense (see voice reports and anonymisation, explained simply for the mechanics), so option (a) is the one that applies to it.

Where the check-and-sign duty actually attaches

Immediately after (a) and (b), Art. 18(2) adds:

"Legal entities in the private and public sector and competent authorities shall offer the reporting person the opportunity to check, rectify and agree the transcript of the call by signing it."

The object of that sentence is "the transcript" — not "the recording," and not "the documentation" generically. That's not an isolated word choice. The same pattern repeats identically in the two other paragraphs of Art. 18 that impose the same duty:

• Art. 18(3) (unrecorded lines): the entity may document the report as "accurate minutes of the conversation," and "shall offer the reporting person the opportunity to check, rectify and agree the minutes of the conversation by signing them."
• Art. 18(4) (in-person meetings): the entity may document the meeting by "(a) making a recording... or (b) accurate minutes," and "shall offer the reporting person the opportunity to check, rectify and agree the minutes of the meeting by signing them" — the same recording/ written-record either-or as (2), with the sign-off duty again naming only the written option.

Three separate paragraphs, each offering a recording-or-written-record choice or a written-record- only requirement, and each time the check-rectify-sign duty is worded to attach to the written product specifically. That consistency is the strongest evidence this is a deliberate drafting choice, not an oversight that happens to omit "recording" three times in a row.

It also makes sense on its own terms, not just as a textual pattern. The sign-off mechanism exists because a transcript or a set of minutes is someone else's rendering of what was said — prepared by "the staff members responsible for handling the report," in the Article's own words — and needs the reporter's confirmation that the rendering is accurate. A recording isn't a rendering of anything. It's the primary source itself, with nothing transformed or paraphrased for the reporter to check against. Requiring a reporter to "check, rectify and agree" their own unaltered recording would be a category error, not an omitted safeguard.

The German cross-check: HinSchG § 11

Germany's HinSchG, the national transposition of the same Directive, is worth checking independently rather than assumed to match — and it does, with one detail worth reading carefully rather than glossing over.

§ 11(2) governs telephone or other voice-transmission reports and offers the same structural choice Art. 18(2) does: with the reporter's consent, the entity may make either a durably retrievable audio recording ("Tonaufzeichnung") or a complete and accurate transcript ("Wortprotokoll") of the conversation. § 11(4)'s check-correct-confirm-by-signature duty then reads: "Der hinweisgebenden Person ist Gelegenheit zu geben, das Protokoll zu überprüfen, gegebenenfalls zu korrigieren und es durch ihre Unterschrift oder in elektronischer Form zu bestätigen" — the object is "das Protokoll," the transcript, exactly mirroring Art. 18(2)'s wording.

The detail worth reading carefully: § 11(4)'s next sentence adds "Wird eine Tonaufzeichnung zur Anfertigung eines Protokolls verwendet, so ist sie zu löschen, sobald das Protokoll fertiggestellt ist" — where a recording is used for the purpose of preparing a transcript, it must be deleted once that transcript is finished. Read in isolation, that could look like it prevents keeping a recording as a permanent record at all. Read against § 11(2)'s structure, it doesn't: the deletion duty is conditioned on the recording being used to produce a Protokoll — a working recording made so staff can later type up a transcript from it, then discarded once that transcript exists. Where a recording is instead retained as the chosen documentation under § 11(2)'s first alternative, no Protokoll is ever being prepared from it, so that conditional duty's precondition is never met. A design like Provoxis's — where the anonymised recording is the only record ever produced or kept, and no transcript is ever generated from it — doesn't fall within the sentence's scope on its own terms.

This reading hasn't been tested by German case law or regulatory guidance on this specific point, and it reflects the statute as enacted, not a court's or a data-protection authority's confirmation of it — worth treating as a strong textual argument going into legal review, not as a settled question.

Why this is an EU-only question

The UK has no equivalent record-keeping regime to check against. The Public Interest Disclosure Act 1998 (inserted into the Employment Rights Act 1996 as Part IVA) imposes no documentation mechanics for how an oral disclosure has to be recorded — there's no UK Article 18 to satisfy in the first place. This entire analysis is EU-specific by design, the same asymmetry covered in UK vs EU: what's actually required where.

Legal basis

• Art. 18(2), (3), (4), Directive (EU) 2019/1937 — the recording/transcript-or-minutes alternatives and the scope of the check-rectify-sign duty.
• Art. 9(2) — the definition of a "recorded voice messaging system" as an internal reporting channel, which Art. 18(2) documents.
• § 11 HinSchG — Germany's national transposition, cross-checked independently against the same structure.
• Employment Rights Act 1996, Part IVA, inserted by the Public Interest Disclosure Act 1998 — the absence of an equivalent UK record-keeping mandate.