Austria's New Leniency & Whistleblower Rules, How to Run an Internal Investigation (2026 Practical Guide)

Last updated: 9 June 2026

Austria’s criminal-law and financial-crime landscape has shifted decisively between 2024 and 2026, making corporate leniency in Austria an immediate operational concern rather than a theoretical compliance exercise. A series of reforms, spanning the Bundeswettbewerbsbehörde (BWB) antitrust leniency programme, new criminal leniency instruments targeting corruption and white-collar offences, and strengthened whistleblower protections transposing EU requirements, have widened enforcement exposure for companies of every size. For directors and compliance officers, the central question is no longer whether to prepare for regulatory scrutiny but how quickly a forensically sound internal investigation can be launched and whether self-reporting or a leniency application will follow. This guide delivers the decision pathway, procedural checklists and step-by-step timings that Austrian boards and in-house counsel need in 2026.

Executive Summary and Decision Snapshot

Between 2024 and 2026, Austria has broadened the scope of its leniency programme beyond pure cartel enforcement, reformed criminal leniency mechanisms in line with OECD Anti-Bribery Convention recommendations, and tightened whistleblower obligations for employers. The practical effect is that more categories of corporate misconduct now fall within a structured incentive system that rewards early, voluntary cooperation, and penalises delay.

For boards confronting suspected misconduct, three immediate decisions must be made: (1) whether sufficient grounds exist to launch a formal internal investigation; (2) whether, and when, to contact the BWB, prosecutors or other competent authority to seek leniency or self-report; and (3) how to protect the company’s position, including managing privilege and documenting cooperation from day one.

Decision snapshot, three questions for the board:

• Is the suspected conduct within leniency scope? If it involves cartel behaviour, bid-rigging, corruption, bribery or related financial offences, the answer is likely yes.
• Are we first through the door? For BWB antitrust leniency, the first applicant providing decisive evidence can obtain full immunity; later applicants receive progressively smaller reductions.
• Can we preserve evidence and launch an investigation without alerting suspects prematurely? The internal investigation must be forensically sound and privilege-aware from the outset.

What Is Austria’s Leniency Programme, Scope and Who Qualifies

A leniency programme is a structured framework through which companies or individuals that have participated in illegal conduct, typically cartels or corruption, can obtain full immunity from, or a significant reduction in, penalties by voluntarily disclosing the conduct and cooperating with authorities. In Austria, the leniency programme operates at two levels: antitrust leniency administered by the BWB, and criminal leniency instruments applicable to corruption and broader white-collar offences.

Under the BWB’s leniency programme, undertakings involved in cartels, bid-rigging or other serious competition-law infringements may apply for immunity or a reduction in fines. According to the BWB’s official leniency guidelines, the first applicant that provides the authority with information and evidence enabling it to carry out a targeted inspection, or to find an infringement, may receive full immunity from fines. Subsequent applicants that provide significant added value to the investigation may qualify for reductions. The programme aligns with the European Competition Network (ECN) Model Leniency Programme, ensuring procedural consistency across EU member states.

Criminal leniency and self-reporting instruments, while historically less formalised in Austria than BWB antitrust leniency, have gained new importance following the OECD Anti-Bribery Convention Phase 4 evaluation and subsequent Austrian legislative responses. Industry observers expect these reforms to continue expanding the incentives for voluntary disclosure in anti-corruption cases.

Antitrust (BWB) Leniency vs Criminal Leniency Reforms

The distinction matters for corporate leniency in Austria because the procedural mechanics differ significantly. BWB antitrust leniency follows a well-documented process: applicants contact the BWB directly, may request a marker to preserve their place in the queue, and submit evidence within a defined timeframe. Criminal leniency for anti-corruption and bribery offences, by contrast, relies on prosecutorial discretion and the evolving framework recommended by the OECD Phase 4 evaluation. In practice, companies facing allegations that span both competition and corruption law, such as bid-rigging combined with bribery of public officials, may need to coordinate parallel applications to different authorities, a process that demands experienced external counsel from the outset.

Whistleblower Protections in Austria (2024–2026 Reforms)

Whistleblower protection in Austria has undergone substantial reform as part of Austria’s transposition of the EU Whistleblower Directive. These changes impose concrete obligations on employers and create rights for individuals who report suspected misconduct through designated channels.

Companies with 50 or more employees are required to establish internal reporting channels that allow workers to report breaches securely and, where possible, confidentially. These channels must be accessible, clearly documented in internal policies, and capable of acknowledging receipt of a report within seven days. The company must provide feedback to the whistleblower on follow-up actions within three months of acknowledgement.

Retaliation against whistleblowers is explicitly prohibited. Protections cover dismissal, demotion, intimidation, withholding of benefits and any other form of disadvantageous treatment linked to the act of reporting. The burden of proof in retaliation disputes is reversed: if a whistleblower demonstrates that they suffered a detriment after making a report, the employer must prove that the action was unrelated to the disclosure.

For compliance teams, the practical implications are significant:

• Policy documentation. Every in-scope employer must maintain a written whistleblower policy describing internal channels, procedures and protections.
• Channel design. Reporting channels must allow written and oral submissions, with an option for physical meetings on request.
• Confidentiality safeguards. The identity of the reporting person must be protected; access should be limited to specifically designated compliance personnel.
• Record-keeping. All reports and follow-up actions must be documented and retained in compliance with data-protection rules.
• External reporting. Where the internal channel fails or the whistleblower has reasonable grounds to believe internal reporting will be ineffective, reports may be made directly to competent external authorities.

Key takeaways:

• Employers with 50+ employees must have a functioning internal reporting channel.
• Retaliation is prohibited and the burden of proof shifts to the employer.
• Whistleblower reports often trigger the internal investigation process that precedes any leniency application.

Decision Matrix: When to Self-Report, When to Investigate Further

Corporate self-reporting in Austria is a strategic decision with irreversible consequences. Reporting prematurely, before facts are understood, can expose the company to liability without securing meaningful cooperation credit. Reporting too late risks losing first-mover advantage in a leniency programme or appearing obstructive to authorities.

The following decision factors should guide the board and general counsel:

1. Evidence strength. If initial indicators suggest serious, systemic misconduct, and documentary evidence is already accessible, early self-reporting is generally advisable to maximise leniency eligibility.
2. Who is implicated. Where senior management or board members are directly involved, independent external counsel must lead the investigation. Self-reporting should not proceed until conflicts of interest are managed.
3. Cross-border exposure. If the conduct involves multiple jurisdictions, coordination with foreign counsel is essential before any voluntary disclosure to Austrian authorities, because disclosure in one jurisdiction may trigger obligations elsewhere.
4. Ongoing regulatory proceedings. If the BWB or prosecutors have already initiated an investigation, the window for voluntary self-reporting narrows, but cooperation credit may still be available.
5. Third-party whistleblower reports. If the company is aware that a whistleblower has filed an external report, the clock is already running. Proactive engagement with authorities typically yields better outcomes than a defensive posture.

Scenario vignettes:

• Scenario A: Internal audit discovers irregular pricing communications with a competitor. No regulatory contact yet. Action: Launch internal investigation immediately; prepare leniency marker with BWB within days.
• Scenario B: A whistleblower reports suspected bribery of a foreign official. Action: Appoint external counsel; secure evidence; assess criminal leniency options before contacting prosecutors.
• Scenario C: The BWB has issued a dawn-raid warrant. Action: Cooperate fully during the raid; consult counsel on same day about cooperation credit and subsequent leniency application.
• Scenario D: A departing employee threatens to disclose alleged bid-rigging. Action: Investigate the substance of the allegation promptly; do not attempt to silence the employee; assess leniency position.
• Scenario E: Subsidiary in another EU member state is under investigation for related conduct. Action: Coordinate cross-border legal advice before any voluntary disclosure in Austria.

Internal Investigation Playbook, Step-by-Step Checklist and Templates

An internal investigation checklist tailored to Austrian law is the single most important tool a compliance team can deploy when misconduct is suspected. The investigation must be structured from day one to withstand regulatory scrutiny, preserve privilege where possible, and produce evidence that supports a credible leniency application. For additional background on white-collar investigation methodology, the techniques discussed in forensic-led approaches apply directly.

Planning and Scope

Define the investigation’s scope in writing before any evidence is collected. Identify the suspected conduct, the business units and individuals potentially involved, the relevant time period and the legal provisions at issue. Appoint independent external counsel, ideally a specialist in Austrian economic criminal law, to lead the investigation. Run conflict checks to confirm that counsel does not represent any individual who may be a subject of the investigation. Designate a small, senior investigation team with clear reporting lines to the board or audit committee.

Evidence Preservation and Forensic Steps

Issue a document-preservation notice (litigation hold) to all relevant custodians on the first day. This notice must cover electronic data, emails, messaging platforms, physical files and any cloud-stored documents. Engage forensic IT specialists to create verified copies of relevant devices and servers, maintaining a documented chain of custody throughout.

Witness Interviews, Scripts and Record-Keeping

Prepare an interview plan listing all individuals to be interviewed, the sequence (start with peripheral witnesses, not suspects) and the key topics for each. At the beginning of every interview, inform the witness that the interview is conducted on behalf of the company, that the company’s legal counsel is present to represent the company (not the individual), and that the content may be shared with authorities. Use open-ended questions. Do not coach or suggest answers. Record interviews in detailed contemporaneous notes; avoid full audio or video recording unless specifically advised by counsel, as Austrian procedural law may require disclosure of such recordings.

Privilege and Legal Risk Management

Legal professional privilege in Austria applies to communications between a client and their external lawyer (Rechtsanwalt) for the purpose of obtaining legal advice. However, in-house counsel communications are not protected to the same extent, a critical difference from some common-law jurisdictions. Work product prepared by or at the direction of external counsel is generally protected, but documents created independently by the company’s employees for business purposes are not. Best practice: route all investigation-related communications through external counsel, mark documents as privileged where appropriate, and maintain a privilege log.

Key takeaways:

• Issue a litigation hold on day one and engage forensic IT support immediately.
• External counsel should lead all witness interviews and investigation communications.
• In-house counsel communications have limited privilege protection in Austria, structure accordingly.

How to Prepare a Corporate Leniency Application in Austria, Evidence, Timing and Mechanics

The leniency application process differs depending on whether the matter falls under BWB antitrust jurisdiction or involves criminal self-reporting. For antitrust leniency, the BWB’s published guidelines provide a structured process. According to the BWB leniency page, applicants should contact the authority as early as possible, even before a complete evidence package is assembled, because the first applicant to provide information enabling a targeted inspection or finding an infringement may receive full immunity.

The BWB allows applicants to request a marker, a provisional placeholder that preserves their position in the leniency queue while they compile their full submission. The marker must be perfected by submitting the required evidence within the timeframe specified by the BWB. This mechanism, consistent with the ECN Model Leniency Programme, is particularly important in fast-moving investigations where competitors may also be considering applications.

For criminal leniency applications relating to anti-corruption or broader financial offences, the process is less standardised. The OECD Phase 4 evaluation of Austria recommended that Austrian authorities develop clearer guidance on voluntary disclosure and cooperation credit in bribery cases. Early indications suggest that prosecutors increasingly recognise proactive corporate self-reporting as a significant mitigating factor, but the precise mechanics, including the degree of reduction available, remain subject to prosecutorial discretion and continue to evolve.

Practical Interactions with Authorities and Parallel Procedures

Companies navigating corporate leniency in Austria frequently face parallel proceedings involving the BWB, criminal prosecutors, administrative authorities and, in cross-border cases, foreign regulators. Managing these interactions requires meticulous coordination.

Where both antitrust and criminal allegations arise from the same conduct (for example, bid-rigging that involves corruption of public procurement officials), separate applications or disclosures to the BWB and to prosecutors may be necessary. Information shared with one authority is not automatically shared with another, but companies should assume that statements made in one proceeding may become accessible to other bodies through mutual assistance mechanisms or voluntary cross-referencing.

In cross-border investigations, disclosure to Austrian authorities may trigger reporting obligations or legal consequences in other jurisdictions. EU-wide coordination mechanisms, including the ECN for competition matters, facilitate information sharing between national competition authorities. Companies should map their jurisdictional exposure before making any voluntary disclosure and ensure that external counsel in each relevant jurisdiction is aligned on timing and messaging.

Plea negotiations and settlements in Austrian criminal proceedings remain available in certain circumstances. The likely practical effect of recent reforms will be to increase the regularity with which prosecutors consider cooperation history when negotiating outcomes, but formal settlement frameworks comparable to those in the United States or the United Kingdom are not yet fully established in Austrian practice.

Director Obligations and Liability Mitigation, Practical Board Checklist

Director obligations under Austrian criminal law extend beyond mere oversight. Directors (Geschäftsführer, Vorstandsmitglieder) may face personal criminal liability for failure to prevent offences committed within the company, particularly where they knew or should have known about the misconduct and failed to act. For a broader discussion of governance challenges, see the analysis of challenges facing corporate governance globally.

Seven-point board action checklist:

1. Convene an emergency board or audit committee meeting upon receiving credible information of potential misconduct.
2. Appoint independent external counsel to lead the internal investigation, do not delegate to implicated individuals.
3. Issue a company-wide document-preservation notice immediately.
4. Assess whether the conduct falls within leniency scope (antitrust, criminal or both) and instruct counsel to evaluate self-reporting options.
5. Suspend or reassign implicated personnel where necessary to preserve evidence integrity, without prejudging guilt.
6. Document every board decision, the information available at the time and the reasons for each action taken.
7. Review directors’ and officers’ insurance coverage and notify insurers if required under the policy terms.

Templates, Annexes and Downloadable Assets

Effective compliance programmes depend on practical, ready-to-use tools. The following resources support the processes outlined in this guide and are available for download:

• Internal investigation checklist (PDF/Excel). A step-by-step checklist covering scope definition, evidence preservation, witness interview scheduling, privilege management and reporting, tailored to Austrian legal requirements.
• Whistleblower policy template. A model internal reporting policy meeting the requirements of Austrian whistleblower protection law, including channel design, confidentiality safeguards and retaliation prohibitions.
• Leniency application preparation checklist. A practical checklist for BWB antitrust leniency applications covering initial contact, marker requests, evidence assembly and cooperation obligations.
• Witness interview script template. Sample opening statements, question frameworks and record-keeping templates for use in internal investigation interviews.
• Board quick-brief template. A one-page briefing format for directors summarising the investigation status, key risks, recommended actions and leniency position.

To request access to these templates, speak to an Austrian criminal lawyer through our directory, or contact the compliance advisory team via the link below.

Conclusion

Austria’s 2024–2026 reforms have fundamentally changed the risk calculus for corporate leniency in Austria. The leniency programme administered by the BWB offers a well-defined pathway for antitrust matters, while criminal leniency instruments for corruption and financial offences continue to develop. Whistleblower protection obligations now require every employer above the threshold to maintain functioning internal reporting channels and robust retaliation safeguards. For directors and compliance officers, the message is clear: early preparation, forensically sound internal investigations and timely engagement with authorities are not optional, they are the baseline standard that regulators and courts will measure corporate conduct against. The companies that act decisively, document thoroughly and cooperate genuinely will be best positioned to mitigate both corporate and personal liability.

This article provides general legal information and does not constitute legal advice. Corporate leniency decisions involve complex, fact-specific analysis that requires qualified Austrian legal counsel. Readers are encouraged to seek professional advice tailored to their circumstances.

Sources

1. Bundeswettbewerbsbehörde (BWB), Leniency page
2. BWB, Leniency programme guidelines (Leitfaden Kronzeugen PDF)
3. European Commission, Leniency (Competition Policy)
4. Bundesministerium für Justiz (BMJ), OECD Anti-Bribery Phase 4 Report (Austria)
5. Global Investigations Review, Austria investigations guide (2026)
6. Wolters Kluwer / LegalBlogs, Austrian construction cartel analysis (March 2026)
7. Lexology, Cartel immunity overview / practice notes
8. Schindhelm, Criminal leniency reform note (Austria)
9. ECN Model Leniency Programme (PDF)