Bottom line: Employees and contractors of AI companies receive legal protection from August 2026 when reporting EU AI Act violations to internal, external, or public channels.
Since August 2, 2026, violations of the EU AI Act are explicitly covered by the EU Whistleblowing Directive (2019). The directive establishes reporting channels and protection from retaliation for employees and other trusted persons within organizations.
The 2019 EU Whistleblowing Directive requires companies to establish internal reporting channels and mandates member states to provide external reporting channels through competent authorities. In justified cases, whistleblowers may also report directly to media or the public — for example in cases of acute danger or risk of retaliation. From August 2, 2026 onwards, these protection provisions explicitly apply to violations of the EU AI Act.
Protected parties include employees, contractors, suppliers, applicants, and former employees in a professional context. Example: An employee of a general-purpose AI (GPAI) model provider can safely report that a GPAI model with systemic risk has inadequate cybersecurity protection and thereby violates Article 55 of the AI Act. The protection extends to prohibitions on retaliation — including dismissal, salary reduction, or other disadvantages.
However, the Whistleblowing Directive does not automatically cover all AI-related matters. Many irregularities in the AI sector may already fall under existing protection provisions (e.g., violations of data protection or employment law). External support is offered by specialized organizations and national authorities providing free legal, psychological, and technical advice.
Source: ainews-dev.lumi-systems.io · Published May 23, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.5.2.