The obligation to notify the person responsible for the Internal Information System enters into force

Notification of the person responsible for the IIS to the AINPI: obligation, affected companies, and deadlines | Law 2/2023

On September 1, 2025, the Independent Whistleblower Protection Authority (AINPI) officially became operational—one of the pillars of Law 2/2023 of February 20, which regulates the protection of individuals who report regulatory breaches and aims to combat corruption.

It is important to note that all organizations subject to this obligation (those with more than 50 employees) must notify the AINPI of the appointment of the person responsible for the Internal Information System (IIS) by submitting a specific form available on its website.

The deadline for submitting this notification is two months and will start running once the procedure becomes available (which, for now, it is not). We also remind you that this notification must be submitted to the relevant regional authorities as well.