Whistleblowing system for a hospital: a warning about patient safety
In a hospital a report about a bypassed procedure is not a complaint about a colleague but information about a risk to a patient. The Act gives the nurse protection and the hospital a duty to respond in time. The channel must get the case above the ward before something happens that cannot be undone.
The situation
A nurse sees a ward procedure being bypassed and none of the doctors reacting. Raising it directly would mean a conflict with the consultant who sets her rota.
How it works
The report goes to the people named in the procedure, bypassing the ward. The system tracks the statutory seven-day acknowledgement, so the case cannot sit in a drawer. The response comes before an event that cannot be undone.
- Early warning
- Statutory deadlines
- Anonymity
In this scenario 4
What the Act says in this situation
Public health, product safety (including medical devices) and personal data protection are in the catalogue of breaches in Article 3(1) of the Whistleblower Protection Act. A hospital, as a healthcare provider usually employing hundreds of people, including doctors on contracts who also count towards the threshold, is obliged to have an internal reporting procedure. A public hospital is additionally covered by the category of constitutional rights and freedoms in relations with public authorities.
A nurse, a resident doctor, an orderly and a technician on a contract are whistleblowers within the meaning of Article 4. Protection against retaliation covers, among other things, an unfavourable change to working hours and being passed over for training, which are precisely the tools by which disapproval is expressed in a hospital.
Medical professional secrecy excludes the information it covers from the Act (Article 5), but it does not exclude a report about a breach of a safety procedure; the subject of the report is the practice of the ward, not the data of a specific patient.
What to watch when implementing
- A route that bypasses the ward. The case handler cannot be the consultant in charge or the ward sister of the ward the report concerns. The procedure should designate someone outside the medical line or a quality officer with powers independent of the medical director.
- Reporting from a phone during a shift. The form must save a draft and allow it to be completed after the shift, with no time limit.
- The 7-day deadline in an organisation that works on shifts. The case handler may be on leave or on sick leave. Acknowledgement and escalation must work independently of a single person: a deputy in the system, not in the memory of the secretariat.
- Minimisation of patient data. A report about a procedure may contain patient data that is not needed. The Act allows 14 days to delete data irrelevant to the case, with the history kept in the log.
Features that make the difference
- Statutory deadlines counted automatically with escalation to the supervising person when the handler does not respond (case handling).
- Permissions per case and working teams: a ward's case handled by the quality team, invisible to that ward's management (compliance and permissions).
- Anonymity and conversation via case number and PIN: the nurse answers questions without revealing which ward she is from (confidentiality).
- Audit log and a case PDF with anonymisation: for an inspection by the National Health Fund (NFZ), the voivode or the Patient Ombudsman you show the register, not an assurance.
- Authorisation repository: a contract doctor on the committee has a written authorisation with confirmation of receipt, as Article 8 requires.
Frequently asked questions
Does a doctor on a contract count towards the 50-person threshold?
Yes. The number of persons performing paid work includes persons performing work on a basis other than an employment relationship, provided they do not employ others for that work. A doctor running a sole practice on a contract with the hospital enters the count.
Is a report to the NFZ or the Patient Ombudsman an external report?
An external report within the meaning of the Act is made to the Commissioner for Human Rights or the public authority competent to take follow-up actions. The body supervising the hospital may be such an authority. The whistleblower does not have to report internally first; the internal channel is meant to be faster and safer, not mandatory.
More on deadlines in the article Statutory deadlines: 7 days, 3 months and the register.
From the knowledge base
- Statutory deadlines: 7 days, 3 months and a register kept for 3 years When the 7 days for acknowledgement and 3 months for feedback start, what if the whistleblower gives no address, 14 days for a meeting, 3-year retention.
- Retaliation and whistleblower protection: what an employer must not do The Act's list of retaliatory actions, protection conditions, reversed burden of proof, compensation of at least the average wage, facilitator protection.
A procedure is a document. A channel is the system that carries it out.
sygnadesk counts the deadlines, keeps the register and protects the reporter’s identity the way the knowledge base describes. See how it would look in your organisation.