Laws & regulations

Who is covered, what is required, and what happens if it is missing, law by law.

Requirements in your country

Choose your EU country to see an overview of the key legal requirements: use it as guidance, not as legal advice.

🦺 Statutory workplace risk assessment

Every EU country requires a written workplace risk assessment under the framework directive 89/391/EEC.

Known locally as: Risk assessment & safety statement

Cycle: Kept up to date; review on changes

📣 Whistleblower scheme

National law: Protected Disclosures (Amendment) Act 2022

An internal reporting channel is mandatory from 50 employees

External authority: Office of the Protected Disclosures Commissioner

🔐 GDPR (across the EU)

Every organisation must keep a record of processing activities (art. 30), have data processing agreements in place, and be able to report a personal data breach within 72 hours.

Working time recording (across the EU)

The CJEU's CCOO ruling (C-55/18) requires an objective, reliable and accessible system for recording daily working time, national implementation varies by country.

A guiding overview, not legal advice. Always check national legislation and official guidance.

Verkta covers these requirements automatically, try it free and get started in under 10 minutes.