AGG Complaints Office: 6-Step Workflow
TL;DR
- 6-step workflow: intake, documentation, investigation, measures, feedback, re-evaluation
- § 13 AGG: obligation to set up a complaints office — employees may complain to the competent bodies of the establishment, the complaint must be examined and the outcome communicated (§ 13(1))
- Publication: the Act and information about the competent body must be made known within the establishment (§ 12(5) AGG)
- No statutory processing deadline: the week figures in the six steps are practice rhythms, not deadlines under the AGG
- Practical interface with the HinSchG: § 8 HinSchG binds only the reporting offices under the HinSchG — recommendation: align the level of confidentiality with it where the reporting office and the AGG complaints office are merged
- Confidentiality in AGG proceedings follows from the GDPR/§ 26 BDSG and § 12 AGG, not from § 8 HinSchG
- Damages under § 15 AGG plus employment-law consequences for those who discriminate
- Deadline under § 15(4) AGG: 2 months to assert a claim for damages
- Austria: the GlBG contains no obligation to set up an internal complaints office; the available routes are the GAW and the GBK, and a complaint is protected by § 13 and § 27 GlBG respectively
Main article: § 22 AGG reversal of the burden of proof — statistical indications, presumptive facts and how the employer rebuts the presumption.
Legal basis: what § 13 AGG regulates
§ 13(1) of the German General Equal Treatment Act (AGG) gives employees the right to complain to the competent bodies of the establishment, the company or the public authority if they consider themselves disadvantaged on one of the grounds listed in § 1 AGG; the complaint must be examined and the outcome communicated to the complainant. Subsection 2 leaves the rights of the employee representative bodies unaffected. In addition, § 12(5) AGG requires the Act and the information about the body competent for complaints to be made known within the establishment — without that publication the channel remains unused in practice.
§ 13 AGG is not to be confused with § 12 AGG: § 12(1) to (3) governs the employer's organisational and protective duties, § 13 the right to complain and the handling of the individual complaint. The workflow below combines both. It describes the German legal position; for Austria, see the separate section further down. The week and day figures in the headings of the six steps are throughout practice rhythms from case handling — the AGG contains no processing deadline for the complaints procedure.
| Point | Statutory requirement | Reference |
|---|---|---|
| Right to complain | Employees may complain to the competent bodies of the establishment, the company or the public authority | § 13(1) AGG |
| Examination and communication | The complaint must be examined and the outcome communicated | § 13(1) AGG |
| Employee representative bodies | Their rights remain unaffected | § 13(2) AGG |
| Publication | Make the Act and information about the competent body known within the establishment | § 12(5) AGG |
| Duty of protection and prevention | Necessary and preventive measures, notice of unlawfulness; training counts as fulfilment | § 12(1) and (2) AGG |
1. Intake + acknowledgement (days 0-2)
Step 1 is the documented acceptance of the complaint, its initial classification and the feedback to the complainant. Acknowledgement of receipt within 2 days. Initial classification: characteristic under § 1 AGG. Assure confidentiality.
What to do: record the date of receipt, the channel of receipt and the wording of the complaint — including for an oral complaint, then as a file note. The initial classification assigns the facts presented to one of the grounds listed in § 1 AGG (race or ethnic origin, gender, religion or belief, disability, age, sexual identity) and to a form of disadvantage under § 3 AGG: direct disadvantage, indirect disadvantage, harassment or sexual harassment.
Why: § 13(1) AGG requires the complaint to be examined and the outcome communicated. In practice it has proved useful to document the handling from the moment of receipt and to treat the clarification of competence as the first processing step. The classification must not be misused as a pre-filter: § 7(1) and (2) AGG prohibits disadvantage even where the acting person merely assumes that a protected ground is present. A complaint therefore does not fail at this point because the characteristic is in fact not present in the complainant.
Practice: the 2 days are a practical value, not a statutory deadline. An assurance of confidentiality should reach only as far as it can be maintained in the further procedure — the limits are set out in the section on documentation and data protection.
2. Triage + investigation plan (week 1)
Step 2 determines the scope and direction of the investigation and secures the evidence before it is lost. Plausibility check. Secure evidence. Hearing plan: who, when, with whom.
What to do: secure correspondence, chat and email threads, calendar entries, selection and appraisal documentation as well as the circle of possible informants, and set out the investigation plan in writing — with the responsible person, the order of hearings and the escalation level. Where the complaint is directed against an algorithmically supported selection decision, the selection logs and the documentation of the human review form part of the records to be secured.
Why: the state of the evidence later determines the employer's position. Where the reversal of the burden of proof under § 22 AGG applies (see step 4), the employer must positively establish that no infringement occurred. The threshold for indicative facts is low: statistical anomalies in selection rates or documented bias findings may already count as an indication. Evidence that was not secured at the outset is missing in proceedings.
Practice: triage should also clarify whether the same set of facts is additionally to be treated as a report under whistleblower protection law — see the section on the HinSchG interface.
3. Hearings (weeks 2-4)
Step 3 clarifies the facts through hearings and produces the records on which the later assessment relies. Complainant + where applicable the accused person + witnesses. Minutes taken under the four-eyes principle.
What to do: conduct the hearings in the planned order, have every hearing accompanied by two people, and submit the record to the person heard for review and counter-signature. In the letter to witnesses, expressly name the protection against reprisals. Only what is necessary for clarification is collected — the principle of data minimisation under Art. 5(1)(c) GDPR also applies to hearing records.
Why: harassment within the meaning of § 3(3) and (4) AGG — the violation of dignity through a hostile environment as well as sexual harassment — is typically a situation of one person's word against another's; the quality of the records determines how robust the outcome is. The prohibition of victimisation in § 16(1) AGG expressly also covers supporting persons as well as witnesses; naming that protection in the letter increases the willingness to testify and at the same time documents the employer's own protective measure under § 12 AGG.
Practical recommendation: summary records with core statements quoted verbatim have proved superior to pure verbatim transcripts — they are available faster and are counter-signed more readily.
4. Assessment (weeks 5-6)
Step 4 assesses the state of the evidence against the standard of § 22 AGG and determines whether the complaint is substantiated. Examine the evidence. § 22 AGG: is an indication sufficient? What is the employer's evidentiary position? External advice in complex cases.
What to do: answer two questions separately. First: are the facts available sufficient as indications within the meaning of § 22 AGG? Second: can the employer, where the presumption applies, provide the counter-evidence — that is, positively establish that there was no infringement of the provisions protecting against disadvantage? The outcome is reasoned in writing, not merely stated.
Why: the allocation of the burden of proof under § 22 AGG is asymmetric: the threshold for indications is low, the counter-evidence to be provided is full proof. Anyone unable to reconstruct the selection or appraisal logic of a case cannot furnish that proof. That is precisely why the assessment is the point at which the quality of steps 2 and 3 pays off or backfires.
Practical recommendation: use three outcome categories rather than two — substantiated, not substantiated, not ascertainable. The third category is more honest than a forced decision and makes it possible to take protective measures without making a finding that the evidence does not support.
5. Measures + communication (weeks 7-8)
Step 5 translates the outcome into measures and discharges the duty to communicate under § 13(1) AGG. Recommendation on measures to HR/management. Measures may include: training, transfer, disciplinary proceedings, dismissal. Inform the complainant and the accused person of the outcome.
What to do: the recommendation on measures is submitted to the decision-making level in writing and with reasons. For the case of an infringement of the prohibition of disadvantage, § 12(3) AGG expressly names a warning, reassignment, transfer or dismissal as suitable measures; § 12(1) and (2) additionally requires necessary and preventive measures and makes clear that suitable training of employees counts as fulfilment of that duty.
Why: communicating the outcome is the second half of § 13(1) AGG; if it is omitted, the procedure is formally incomplete, even where action was taken internally. What is communicated is the outcome of the examination; for the specific personnel measure against an accused person, data minimisation under Art. 5(1)(c) GDPR applies alongside — here the interest in information must be weighed against the protection of personality rights.
Practical recommendation: communicate orally and in writing, with the date and the reasons for the outcome on file.
6. Lessons learned (week 8+)
Step 6 evaluates the closed case at organisational level and connects it to the employer's duty of prevention. Anonymised lessons-learned documentation. Update training material. Statistics for the internal annual report.
What to do: document the case in anonymised form, extend the training content to cover the constellation that became visible in the procedure, adjust the rules of procedure of the complaints office where gaps have shown, and check whether the publication under § 12(5) AGG is still current — for example after a change in the staffing of the competent body.
Why: under § 12(2) AGG, suitable training of employees counts as fulfilment of the duty of protection under § 12(1). A complaint case provides the concrete occasion to move that training to real constellations within the organisation instead of general examples. Anonymisation at the same time protects those involved, whose data in the procedure may fall within special categories under Art. 9(1) GDPR.
Practical recommendation: keep indicators such as case numbers, distribution of characteristics and processing duration for the internal annual report.
Documentation and data protection in the complaints procedure
A complaint file under § 13 AGG regularly contains data that Art. 9(1) GDPR makes subject to a general prohibition of processing (exceptions under subsection 2), and beyond that requires a legal basis under Art. 6(1) GDPR, supplemented in the employment context by § 26 of the German Federal Data Protection Act (BDSG). This concerns, among other things, information on racial and ethnic origin, on religious or philosophical beliefs, health data as well as data concerning sex life or sexual orientation.
Three consequences for file management follow from this. First, data minimisation under Art. 5(1)(c) GDPR: what is collected is what is necessary for clarification — hearing records are not character portraits. Second, access restriction: keep the complaint file separate from the personnel file and maintain a named, documented circle of persons authorised to access it. Third, the ability to respond: requests under Art. 15 to 22 GDPR must be answered without undue delay and in any case within one month of receipt; under Art. 12(3) GDPR the period may be extended by 2 further months, and the extension must be communicated with reasons within one month.
Practical recommendation: before the first case, determine who has access, where the file is kept and who answers data subject requests. These three determinations can no longer be made calmly once a procedure is under way.
Interface with the reporting office under whistleblower protection law
The complaints office under § 13 AGG and the reporting office under whistleblower protection law are two different institutions with different legal bases — they can be merged organisationally, but each then continues to follow its own rules. The obligation to set up a reporting office is tied in both countries to a threshold of 50 — in Germany to as a rule at least 50 employees, in Austria to 50 or more employees or public servants; the references are given in the table.
What matters in practice is the material scope: whether a specific allegation of discrimination is additionally to be treated as a report under whistleblower protection law depends on the respective national catalogue and must be examined case by case. The German catalogue in § 2(1) of the German Whistleblower Protection Act (HinSchG) covers criminal offences, infringements subject to a fine insofar as the provision breached serves to protect life, limb or health or the rights of employees or their representative bodies, as well as numerous listed legal provisions. The Austrian catalogue in § 3(3) of the Austrian Whistleblower Protection Act (HSchG) is narrower and essentially covers the listed EU areas plus the corruption offences under §§ 302 to 309 of the Austrian Criminal Code (StGB).
| Point | Germany (HinSchG) | Austria (HSchG) |
|---|---|---|
| Obligation to set up | as a rule at least 50 employees § 12(1) sentence 1, (2) HinSchG | 50 or more employees or public servants § 3(1), § 11(1) HSchG |
| Acknowledgement of receipt | after 7 days at the latest § 17(1) no. 1 HinSchG | without undue delay, after 7 calendar days at the latest § 9(1) HSchG |
| Feedback to the reporting person | within 3 months of the acknowledgement of receipt § 17(2) HinSchG | at the latest 3 months after receipt of the report § 13(9) HSchG |
| Confidentiality of identity | the identity may become known exclusively to the competent and supporting persons § 8(1) HinSchG | protection of identity also for information from which it can be derived; prohibition of disclosure to unauthorised persons § 7(1) and (2) HSchG |
| Choice of channel | free choice between internal and external reporting office; obstructing reports is prohibited § 7(1) and (2) HinSchG | protection covers reports to internal and external bodies § 6(1) HSchG |
| Penalty | up to EUR 50,000 for obstructing a report, a reprisal or a breach of confidentiality; up to EUR 20,000 for the absence of an internal reporting office § 40(2) to (6) HinSchG | up to EUR 20,000, in the event of repetition up to EUR 40,000, inter alia for obstruction, retaliation or a breach of confidentiality § 24 HSchG |
Practical recommendation: anyone merging the two offices should set the higher level of confidentiality under whistleblower protection law as the internal standard and make visible on the intake form which procedure the reporting person is choosing. As a matter of law it remains the case that § 8 HinSchG binds the reporting offices under the HinSchG, not the AGG complaints office.
Legal consequences and deadlines under German law
A complaint case that is not handled, or handled badly, takes effect through the claims under § 15 AGG and through the prohibition of victimisation in § 16 AGG. The bases of claim and their limits are shown in the table. As an order of magnitude, compensation for non-material damage is in practice put at one to three gross monthly salaries (§ 15(2) AGG); the amount depends on the individual case.
The prohibition of victimisation in § 16(1) AGG covers, in addition to the complainant, supporting persons as well as witnesses. For the complaints office this means: after the procedure has been concluded, transfers, withdrawal of duties or changes in appraisals affecting those involved require reasons.
| Subject | Deadline or amount | Reference |
|---|---|---|
| Assertion of a claim under § 15(1) or (2) AGG | 2 months, in writing; the period starts, for an application or promotion, on receipt of the rejection, otherwise on becoming aware of the disadvantage; a different arrangement by the parties to a collective agreement is possible | § 15(4) AGG |
| Assertion of civil-law claims | 2 months | § 21(5) AGG |
| Compensation for non-material damage where a person is not hired | at most 3 monthly salaries where the person would not have been hired even under a selection free of disadvantage | § 15(2) AGG |
| Compensation for material damage | no upper limit; does not apply where the employer is not responsible for the breach of duty | § 15(1) AGG |
| Request by a data subject under Art. 15 to 22 GDPR concerning the complaint file | 1 month from receipt, extendable by 2 months in case of complexity or number | Art. 12(3) GDPR |
| Handling of the complaint itself | no statutory deadline in the AGG — the timing of the six steps is a practice rhythm | § 13 AGG |
The external point of contact in Germany is the Federal Anti-Discrimination Agency (Antidiskriminierungsstelle des Bundes), established at the Federal Ministry for Family Affairs, Senior Citizens, Women and Youth: anyone who considers that they have been disadvantaged on one of the grounds listed in § 1 AGG may turn to it; it provides independent support, informs about claims, arranges advice and seeks an amicable settlement (§§ 25, 27 AGG).
Austria: GlBG, GAW and GBK instead of § 13 AGG
Austria (AT): the AGG applies only in Germany. In Austria, protection against discrimination is governed by the Austrian Equal Treatment Act (GlBG). The GlBG contains no statutory obligation to set up an internal complaints office such as that under § 13 AGG; those affected may turn to the Ombud for Equal Treatment (GAW) or initiate proceedings before the Equal Treatment Commission (Gleichbehandlungskommission, GBK). Internal complaints are nevertheless protected: under § 13 GlBG (Part I) and § 27 GlBG (Part II) respectively, no one may be dismissed without notice, given notice or otherwise disadvantaged in response to a complaint within the company or to proceedings to enforce the principle of equal treatment — this also applies to witnesses, informants and supporting persons. Claims are governed by § 12 GlBG (Part I) and § 26 GlBG (Part II), the deadlines by § 15 and § 29 GlBG — not by the two-month deadline of § 15(4) AGG. The 6-step workflow described above remains useful in Austria as a voluntary practice standard.
Two further differences shape case handling in Austria. First, the standard of proof: the person affected must establish the facts of discrimination on a prima facie basis; it is then for the defendant party to prove that, weighing all the circumstances, another motive was more probable or that a ground of justification exists. Second, the legal consequences: instead of a cap, the GlBG works with minimum amounts. Outside the company, too, the allocation of tasks is cut differently — the Ombud for Equal Treatment advises and supports, the Equal Treatment Commission conducts its own proceedings. References and amounts are shown in the table.
| Subject | Provision | Reference |
|---|---|---|
| Protection after an internal complaint | no dismissal without notice, notice of termination or other disadvantage in response; also applies to witnesses, informants and supporting persons | § 13 GlBG (Part I) § 27 GlBG (Part II) |
| Standard of proof | prima facie showing by the person affected, then counter-evidence by the defendant party | § 12(12) GlBG § 26(12) GlBG |
| Claims | compensation for pecuniary loss and compensation for the personal impairment; at least one month's remuneration where the position would have been obtained under a selection free of discrimination; up to EUR 500 where the damage consists solely in the application not being considered | § 12 GlBG § 26 GlBG |
| Harassment | at least EUR 400; for sexual harassment at least EUR 720 | § 12 GlBG § 12(11) GlBG |
| Deadlines | failure to establish an employment relationship or promotion not granted: 6 months from the rejection, before the courts; dismissal without notice or notice of termination: challenge within 14 days; harassment: Part I 1 year, Part II 6 months; remuneration and benefit-in-kind claims: three-year limitation period under § 1486 of the Austrian Civil Code (ABGB) | § 15 GlBG § 29 GlBG |
| External support | Ombud for Equal Treatment: advice and support, independent investigations, recommendations; alongside this the proceedings before the Equal Treatment Commission | § 3 GBK/GAW Act |
Frequently asked questions
Who may act as the complaints office under § 13 AGG?
Three options with different effects: 1) head of HR — the most common, but problematic where the complaint is directed against HR or against line managers. 2) Compliance officer / data protection officer — neutral, but often lacking AGG expertise. 3) External body (law firm, specialised consultancy) — the highest level of confidentiality; the costs depend on the size of the establishment, the volume of cases and the scope of services and are to be clarified through quotations. Recommendation for SMEs with 50-250 employees: HR and compliance jointly, with an escalation workflow to an external body in the event of conflicts. In highly sensitive cases (allegations against the management board): external is strongly recommended (practical recommendation, not a statutory obligation). Documentation: letter of appointment + notice in the break room/intranet. The Act itself speaks in § 13(1) AGG of the 'competent bodies of the establishment, the company or the public authority'.
What deadline does the complaints office have for handling a complaint?
The AGG is silent on deadlines; the following practice rhythms have proved useful: 1) acknowledgement of receipt within 2 working days. 2) Initial statement + investigation plan within 14 days. 3) Outcome + recommendation on measures within 6-8 weeks. For structural questions: up to 12 weeks. Background: if an infringement is confirmed, the employer must take suitable measures such as a warning, reassignment, transfer or dismissal under § 12(3) AGG — delayed handling delays precisely this response. Practical tip: anchor escalation levels with deadlines in the rules of procedure of the complaints office, with a monthly status report to management. Important for internal communication: these values are practice rhythms, not statutory deadlines — unlike, for example, the two-month deadline of § 15(4) AGG for asserting claims.
Is the complaints office confidential in the same way as the HinSchG reporting office?
No, NOT to the same extent. § 13 AGG contains no duty of confidentiality: it governs solely the employees' right to complain as well as the duty to examine the complaint and communicate the outcome (subsection 1); subsection 2 leaves the rights of the employee representative bodies unaffected. Confidentiality in the AGG complaints procedure follows from data protection law (Art. 5, Art. 9 GDPR, § 26 BDSG) and from the employer's duty of protection and care under § 12 AGG. The confidentiality requirement in § 8 HinSchG, by contrast, expressly binds only the reporting offices under the HinSchG and does not cover AGG complaints offices. Difference in practice: HinSchG whistleblower: the identity may become known exclusively to the persons competent for receiving reports and follow-up measures and to the persons supporting them (§ 8(1) HinSchG). AGG complainant: the identity is typically communicated to HR and line managers for the investigation. Where anonymity is desired: offer a combined reporting office (HinSchG + AGG) — the whistleblower chooses the procedure. Important: employees who complain are protected against reprisals — the legal basis is the prohibition of victimisation in § 16 AGG, which also covers supporting persons and witnesses, not an application by analogy of § 36 HinSchG (which protects only reporting persons under the HinSchG).
What happens if the complaint appears unfounded?
Handle and document it nonetheless — no premature rejection. Workflow: 1) results of the investigation in writing. 2) Reasons for taking no measures given to the complainant (orally + in writing). 3) Commit to reopening the case where new findings emerge (a rule of procedure of the complaints office, not a statutory right). 4) Possibility of escalation to the Federal Anti-Discrimination Agency (https://www.antidiskriminierungsstelle.de). Important: do not confuse an 'unfounded complaint' with an 'abusive' one — even where there was no discrimination, the complainant enjoys AGG protection against reprisals. Purely vexatious complaints (where proven): damages here do NOT follow from § 38 HinSchG — that provision obliges solely the reporting person to compensate the damage arising from an intentional or grossly negligent report or disclosure of incorrect information under the HinSchG and is applicable to AGG complaints under § 13 AGG neither directly nor by analogy. Where an AGG complaint is knowingly untrue or vexatious, claims arise from general law (§ 280(1) in conjunction with § 241(2) BGB, §§ 823, 826 BGB) as well as from employment-law sanctions (warning, dismissal); very rare in practice.
Must the complaints office be made known within the establishment?
Yes. § 12(5) AGG requires the Act and the information about the body competent for complaints to be made known within the establishment. In practice this means: a notice or intranet page with the name, role and contact details of the competent body, inclusion in onboarding — and updating the publication when the staffing changes.
What data may the complaint file contain?
Only what is necessary for clarification — and for part of it a special standard applies. Information on racial and ethnic origin, on religious or philosophical beliefs, health data as well as data concerning sex life or sexual orientation are subject under Art. 9(1) GDPR to a general prohibition of processing with narrow exceptions under subsection 2; it is precisely these categories that regularly appear in AGG complaints. Every processing operation additionally requires a legal basis under Art. 6(1) GDPR, supplemented in the employment context by § 26 BDSG, and is subject to data minimisation under Art. 5(1)(c) GDPR. Practice: keep the complaint file separate from the personnel file, designate and document the persons authorised to access it by name, and limit hearing records to the facts. Where a person involved requests information under Art. 15 GDPR, the one-month period of Art. 12(3) GDPR applies, which may be extended by two months.
Are witnesses protected in the complaints procedure?
Yes, in Germany as in Austria — on a different legal basis. In Germany, under § 16(1) AGG the employer may not disadvantage employees because they have exercised rights under that section or because they have refused to carry out an instruction infringing that section; the same expressly applies to persons who support the employees or who testify as witnesses. In Austria, under § 13 GlBG (Part I) and § 27 GlBG (Part II) respectively, no one may be dismissed without notice, given notice or otherwise disadvantaged in response to a complaint within the company or to the initiation of proceedings to enforce the principle of equal treatment; there, too, witnesses, informants and supporting persons are covered. Practice: name the protection in the letter to informants and give separate reasons for, and document, personnel measures affecting those involved after the procedure has been concluded.
What applies where the complaint is directed against an AI-supported selection decision?
The workflow remains the same, but securing the evidence in step 2 becomes more demanding. Under § 22 AGG, indications suggesting a disadvantage on one of the grounds listed in § 1 AGG suffice to reverse the burden of proof; statistical anomalies in selection rates or documented bias findings may already count as such an indication. The employer must then positively establish that no infringement occurred — which is barely achievable without selection logs and without documented human review. Added to this is the information side: on 27 February 2025, in Case C-203/22 (Dun & Bradstreet Austria), the Court of Justice of the European Union held that, in the case of automated individual decisions within the meaning of Art. 22 GDPR, data subjects may demand meaningful information about the logic involved under Art. 15(1)(h) GDPR and that a blanket invocation of trade secrets is not sufficient. In practical terms this means for step 2: vendor contracts without rights to information and audit make clarification difficult in the event of a complaint.
Does an internal complaints office in Austria replace the Equal Treatment Commission?
No — the routes stand side by side. The GlBG contains no statutory obligation to set up an internal complaints office such as § 13 AGG; the routes laid down in the Act are the Ombud for Equal Treatment, which under § 3 GBK/GAW Act is responsible for advising and supporting persons who have been discriminated against and may conduct independent investigations and issue recommendations, as well as the proceedings before the Equal Treatment Commission. Claims themselves are asserted under § 12 GlBG (Part I) and § 26 GlBG (Part II) respectively, with the deadlines of §§ 15 and 29 GlBG. An internal body set up voluntarily nevertheless has an effect: a complaint within the company triggers the protection against disadvantage under §§ 13 and 27 GlBG respectively, and the case is clarified internally before it is dealt with externally.
Sources
- German General Equal Treatment Act (AGG), §§ 12 (employer protective measures, subsection 5 publication), 13 (right to complain), 15 (damages), 15(4) (two-month cut-off period), 16 (prohibition of victimisation), 22 (reversal of the burden of proof), gesetze-im-internet.de/agg
- AGG, additionally §§ 1 (protected grounds), 3(1) to (4) (forms of disadvantage, harassment), 7(1) and (2) (prohibition of disadvantage), 12(1) to (3) (protective and preventive measures, training, measures in the event of infringements), 15(1) and (2) (damage, compensation, three-month cap), 21(5) (deadline for civil-law claims), 25 and 27 (Federal Anti-Discrimination Agency), gesetze-im-internet.de/agg
- German Whistleblower Protection Act (HinSchG), § 8 (confidentiality requirement for reporting offices), § 36 (prohibition of reprisals for reporting persons), § 38 (damages following a false report — obliges the reporting person alone) — applies only to reporting offices or reports under the HinSchG, and for the AGG complaints office solely as practical guidance, gesetze-im-internet.de/hinschg
- HinSchG, additionally § 2(1) (material scope), § 7(1) and (2) (choice of channel, prohibition of obstruction), § 12(1) sentence 1 and (2) (internal reporting office from as a rule 50 employees), § 17(1) no. 1 and (2) (7 days, 3 months), § 40(2) to (6) (fines depending on the infringement), gesetze-im-internet.de/hinschg
- Austria: Austrian Equal Treatment Act (GlBG), §§ 12 and 26 (claims), 13 and 27 (prohibition of disadvantage after a complaint), 15 and 29 (deadlines); Ombud for Equal Treatment (GAW) and Equal Treatment Commission (GBK), ris.bka.gv.at
- Austria: Austrian Equal Treatment Act (GlBG), additionally § 12(11) (minimum amount for sexual harassment), § 12(12) and § 26(12) (prima facie showing and counter-evidence); § 1486 ABGB (three-year limitation period for remuneration and benefit-in-kind claims); GBK/GAW Act § 3 (tasks of the Ombud for Equal Treatment), ris.bka.gv.at
- Austria: Austrian Whistleblower Protection Act (HSchG), §§ 3(1) and 11(1) (internal whistleblowing system from 50 employees or public servants), § 3(3) (material scope, §§ 302 to 309 StGB), § 6(1) (protection), § 7(1) and (2) (protection of identity), § 9(1) (7 calendar days), § 13(9) (3 months), § 24 (administrative penalty), ris.bka.gv.at
- Regulation (EU) 2016/679 (GDPR), Art. 5(1)(c) (Data Minimisation), Art. 6(1) (legal bases), Art. 9(1) and (2) (special categories of personal data), Art. 12(3) (one-month period for data subject requests, extension by two months), Art. 15(1)(h) and Art. 22 (automated individual decisions), eur-lex.europa.eu
- German Federal Data Protection Act (BDSG), § 26 (employee data protection), gesetze-im-internet.de/bdsg_2018
- Federal Anti-Discrimination Agency — advice + escalation, antidiskriminierungsstelle.de
- Court of Justice of the European Union, judgment of 27 February 2025 — C-203/22 (Dun & Bradstreet Austria): right to information about the logic of automated decisions under Art. 15(1)(h) GDPR