Skip to content
KST Institute · Pristina — Western Balkans · EU-aligned infrastructure authority
Governance · KST-LEG-WB-2026

Whistleblowing Policy & Channel

A confidential channel for reporting breaches of law, ethics or the Institute's policies — aligned to EU Directive 2019/1937 (Whistleblower Directive) and the Kosovo Law on the Protection of Whistleblowers.

Document reference KST-LEG-WHISTLEBLOWING-2026
Last reviewed January 2026
Next review January 2027
Owner General Counsel
Status In force
01

Purpose

The Institute provides a secure channel for personnel, partners, suppliers and external stakeholders to raise concerns about wrongdoing, without fear of retaliation.

02

What to report

  • Breaches of law, including fraud, bribery, money-laundering and sanctions violations
  • Breaches of the Code of Ethics or other Institute policies
  • Threats to public interest, health, safety or the environment
  • Harassment, discrimination or abuse
03

How to report

  • Secure email. whistleblowing@kstinstitute.com — monitored only by the Ethics & Integrity Committee.
  • Dedicated web form. Available at contact.html with end-to-end encryption — anonymous reports accepted.
  • Registered letter. Marked "Confidential — Ethics & Integrity Committee" to the Institute's headquarters.
  • External channels. In line with EU Directive 2019/1937, reports may also be made to competent national authorities.
04

Confidentiality

The identity of the reporter and the content of reports are protected. Access is limited to the Ethics & Integrity Committee and authorised investigators, bound by confidentiality.

05

Non-retaliation

The Institute prohibits retaliation in any form — dismissal, demotion, reassignment, harassment, informal sanctions. Reports of retaliation are investigated with priority and treated as a breach of the Code of Ethics.

06

Handling process

  1. Acknowledgement. Within 7 days.
  2. Triage. Initial assessment by the Ethics & Integrity Committee.
  3. Investigation. By an independent investigator, internal or external.
  4. Feedback. Within 3 months, with an update on handling and (subject to confidentiality) on outcomes.
  5. Remediation. Disciplinary action, policy correction, or referral to authorities as appropriate.
Contact

Questions about this policy?

For questions related to this policy, contact the Institute directly or email the compliance team.

Work with KST Institute

Engage the Institute on your next infrastructure mandate.