AMLA / AML Program (Thailand AMLO + FATF 40 Recommendations) → European Union (Whistleblower Directive 2019/1937) 🇪🇺
Directive (EU) 2019/1937 + 27 national transpositions + GDPR Art 6 + ISO 37002:2021 · European Commission + national supervisors (BfDI Germany, CNIL France, Garante Italy) · Internal channel ≥50 employees + 7-day ack + 3-month feedback + retaliation reverse burden of proof
AMLA / AML Program (Thailand AMLO + FATF 40 Recommendations) for European Union (Whistleblower Directive 2019/1937) falls under Directive (EU) 2019/1937 + 27 national transpositions + GDPR Art 6 + ISO 37002:2021 — authority European Commission + national supervisors (BfDI Germany, CNIL France, Garante Italy) · program Internal channel ≥50 employees + 7-day ack + 3-month feedback + retaliation reverse burden of proof.
Anti-Corruption & Investigations Bar — former DOJ Fraud Section trial attorneys, ex-SFO investigators, ISO 37001 lead auditors, ACFE-certified forensic accountants, NACC-registered consultants.
European Union (Whistleblower Directive 2019/1937) legal framework: Directive (EU) 2019/1937 + 27 national transpositions + GDPR Art 6 + ISO 37002:2021 — enforced by European Commission + national supervisors (BfDI Germany, CNIL France, Garante Italy) · program Internal channel ≥50 employees + 7-day ack + 3-month feedback + retaliation reverse burden of proof. EU Whistleblower Directive fully transposed in 27 states + firms ≥50 + GDPR + retaliation reverse burden.
Workflow: risk assessment → policy → training → DD → monitoring → audit → ISO 37001 → cooperation/disclosure.
AMLA / AML Program (Thailand AMLO + FATF 40 Recommendations) takes 90-240 working days at 385,000-1,485,000 บาท.
FCPA — 28 voluntary disclosures, 22 declinations + 6 NPAs (zero indictment 2018-2025).
Coverage
How it works
- 1
Map Directive (EU) 2019/1937 + 27 national transpositions + GDPR Art 6 + ISO 37002:2021
Thresholds + extraterritoriality + European Commission + national supervisors (BfDI Germany, CNIL France, Garante Italy) requirements.
- 2
Risk + policy
Risk assessment + ABC policy + WB channel under Internal channel ≥50 employees + 7-day ack + 3-month feedback + retaliation reverse burden of proof.
- 3
Training + DD
Role-based training + third-party DD + sanctions screen.
- 4
Audit + certification
Internal audit + ISO 37001 + management review.
- 5
Cooperation + disclosure
Voluntary disclosure + DPA/NPA/CJIP + monitor + remediation.
Frequently asked questions
Which law in European Union (Whistleblower Directive 2019/1937)?
Directive (EU) 2019/1937 + 27 national transpositions + GDPR Art 6 + ISO 37002:2021
Enforcing authority?
European Commission + national supervisors (BfDI Germany, CNIL France, Garante Italy)
Covered program?
Internal channel ≥50 employees + 7-day ack + 3-month feedback + retaliation reverse burden of proof
Country notes?
EU Whistleblower Directive fully transposed in 27 states + firms ≥50 + GDPR + retaliation reverse burden.
Timeline?
90-240 working days.
Extraterritorial reach?
FCPA = US person/USD/email. UKBA = UK nexus. Sapin II = French subsidiary. NACC = Thai entity.
Penalties?
FCPA = USD 2M/violation + disgorgement. UKBA §7 = unlimited fine. Sapin II = €1M AFA. NACC = 2× benefit + 10y prison.