Risk Partners Life Sciences Roundtable 2025, thank you very much! 

Whistleblower Protection Act

... is now in force.

Hey #VCs, do you already have a system in place for safe #whistleblowing? And what about D&O insurance cover? 

One month ago today, the German Whistleblower Protection Act came into force. Since July 2, 2023, not only companies with more than 50 employees, but also fund managers or ManCos (capital management companies pursuant to Section 17 (1) of the German Investment Code) are obliged to set up and operate a whistleblower system, regardless (!) of the number of employees. From December 2, 2023, fines will be levied if this has not been done. 

The main aim of the legislator is to offer whistleblowers who report #crimes or serious violations in the corporate sector a protected framework for such communication. The identity of the whistleblower is to be kept technically and legally confidential in order to protect them from sanctions and liability. The legal regulation goes beyond the existing organizational measures that KVGs already have to comply with under the German Money Laundering Act or Section 28 KAGB.

A holistic approach to risk management

We can put you in touch with a LegalTech unit of a renowned law firm that offers a software-based legal service in outsourcing for VCs specifically for this purpose and, in addition to a reporting channel, also maps the internal reporting office from the HinSChG together with the VC. Please do not hesitate to contact us.

Are fines under the Whistleblower Protection Act covered by the D&O?

In principle, the special reporting office officer should also be insured in your D&O wording in accordance with § 12 HinSchG, for example in the extended sense as an employee - or also in the case of outsourcing - in their capacity as a compliance officer or in their capacity as a special officer or person responsible for ensuring compliance as provided for by law.


When it comes to fines in D&O claims handling, insurers sometimes differ greatly in the extent to which fines are actually covered. There are a few insurers who pay fines for acts of negligence, but there are more and more insurers who refuse to cover and even defend against official proceedings by hiring a lawyer (keyword "defense coverage"). This blanket refusal should be critically scrutinized!

How does your D&O cover specifically relate to the regulations on fines under #HinSchG and is the reporting office officer also an insured person in your wording? - Let us check your D&O contract for you individually and without obligation and ensure security vis-à-vis the reporting office officer. Please contact our team at Risk Partners GmbH:

Florian Eckstein, Managing Director
Franziska Merz, Senior Risk Advisor Financial Lines
Miriam Born, Head of Legal - External Counsel

Also read our other blog posts

Management
Björn Stressenreuter

Capital requirements for (fully regulated) AIFMs

What are the capital requirements for an asset management company? Together with experts Johannes Kiefer (Director of Risk & Compliance at Landsiedel & Partner) and Henry Franz (Managing Director of Layline.tax), we were able to compile our combined expertise on capital requirements, ranging from registered asset management companies to fully licensed ones. In this issue of VC Magazine, we share how E&O insurance, among other things, can provide added value. In addition to our article available below, please also check out the link to the online edition of Venture Capital Magazine. Enjoy!

Read more "
IPO
Björn Stressenreuter

Risk Partners is advising Terranor Group AG on its NASDAQ (Sweden) IPO

From Road Builder to IPO Candidate: How Terranor Group AB Conquered Nasdaq First North. It was a day that marked a new chapter not only for Terranor Group AB but for the entire Nordic infrastructure sector: On June 19, 2025, the Swedish company celebrated its successful initial public offering on the Nasdaq First North Premier Growth Market in Stockholm. Risk Partners as IPO Advisor For while Terranor Group shares began trading under the ticker symbol TERNOR on June 30, 2025,

Read more "
IPO
Björn Stressenreuter

New: Risk Partners POSI Insurance for MiCAR White Paper

MiCAR Compliance? We Cover the Risk! The MiCAR Regulation (EU 2023/1114) exposes crypto-asset service providers and whitepaper authors to significant liability risks. Incomplete, inaccurate, or misleading information in white papers can have significant consequences for Crypto-Asset Service Providers (CASP) and authors—ranging from regulatory sanctions to civil claims. Our solution: Risk Partners Tech POSI MiCAR Whitepaper Protect 2025 The creation and publication of white papers under MiCAR entails complex liability pitfalls: In addition to civil claims (e.g., under the German Civil Code) and criminal risks, there is a threat of

Read more "
Being Public
Björn Stressenreuter

Prospectus liability insurance (POSI): Risk Partners publishes for you

Risk Partners on Going Public and the capital market blog on prospectus liability insurance In recent months, we have been able to share our expertise on prospectus liability insurance with a wide audience on two renowned platforms. Here is an overview: Kapitalmarkt.blog In the article "POSI insurance - The protective vest on the capital market", we explain why prospectus liability insurance is an indispensable tool for companies becoming active on the capital market. The article shows in a practical way how such insurance not only minimizes liability risks, but also strengthens investor confidence. GoingPublic Magazine In

Read more "
4 pillars of cyber insurance for venture capital and private equity
Cyber Security
Björn Stressenreuter

Cyber insurance Venture capital and private equity

Why cyber insurance does not transfer the core risk of VC & PE funds and why we have invested in Risk Partners cyber master agreements. Why cyber risks are relevant for venture capital and private equity funds With the increasing growth of the cyber crime industry (see Federal Office for the Protection of the Constitution), venture capital (VC) and private equity (PE) funds and their fund managers are also increasingly exposed to cyber risks. For years, this has been reflected in the claims we have been able to support, in which fund managers have ranked first year after year among the industries we advise.

Read more "
Cyber Security
Björn Stressenreuter

"Digital Operational Resilience Act" (DORA regulation) from the perspective of venture capital and private equity funds

DORA regulation applies from January 2025. Significance for our private equity and venture capital clients The somewhat unwieldy name "Digital Operational Resilience Act" (DORA for short) has a very serious background and is fundamentally to be welcomed. After all, when we evaluate our claims in the context of cybercrime, PE and VC funds and their KVGs are those with the highest frequency of claims. It can be safely assumed that they are a "worthwhile target group" for cyber criminals based abroad.

Read more "
Your question has not been answered?
We will be happy to advise you in a free initial consultation.