AMF Instruction DOC-2018-13: Whistleblower Reporting Channels, Confidentiality, and Protection

A new AMF instruction (DOC-2018-13), created on 22 January 2026, sets out procedures for collecting and processing reports from whistleblowers who report regulatory infringements within the AMF’s remit. The instruction summarises what information is made available on the AMF website and how reports are received, handled, and reviewed over time. 

The instruction explains that the AMF publishes a dedicated, clearly identifiable webpage describing its external whistleblowing procedure and the channels for reporting and follow-up. It also clarifies the confidentiality regime: identifying information is generally disclosed only with the whistleblower’s consent, but may be communicated to judicial authorities where reporting staff are legally required to report the facts; in such cases, the whistleblower is informed unless that could compromise proceedings. 

On reporting routes, the AMF sets up specific channels separate from its general communications: a recorded telephone line, a secure email/contact form, and a secure postal address. These channels allow anonymous reporting, enable the AMF to request clarification or additional information, and provide a timeline for transmitting the outcome of the report, with design features intended to ensure completeness, integrity, confidentiality, restricted access, and long-term storage. 

Reports can be submitted in writing (digital or paper), orally by recorded telephone, or via an in-person or videoconference meeting with specialist staff organised no later than twenty working days after the request is received. If a report arrives through other channels, the AMF must promptly transfer it—without modification—into the designated whistleblowing channels.

For record management, the AMF keeps a secure, confidential register of all reports, accessible only to specialised staff. An acknowledgement of receipt is sent within seven working days unless the whistleblower asks otherwise or acknowledging receipt could compromise confidentiality. The instruction also specifies how oral reports and meetings are recorded and stored on durable media, including options for audio recording or written reports that the whistleblower may check and approve when their identity is known. 

Finally, the instruction addresses whistleblower protections, retention, and review. Whistleblowers are directed to guidance on remedies under French law, and the AMF may assist, particularly by certifying whistleblower status in labour disputes. Reports, recordings, transcripts, and related data may be kept only as long as strictly necessary and proportionate, with personal data stored in compliance with GDPR. The overall procedures must be reviewed no later than three years after their last amendment. 

Source: Procedures for collecting and processing reports from whistleblowers | AMF