Top of main content

HSBC Whistleblowing arrangement in France

As part of HSBC's Conduct Framework, our speak-up culture encourages all our people to raise concerns in confidence protected from any form of retaliation. As well as employees, we also welcome any eligible person willing to raise a concern in order to protect our interests.

Who can raise a concern using HSBC France Whistleblowing arrangement?

You can raise an internal alert if you are:

  • an employee
  • an ex-employee, as long as the information you report was collected when you worked at HSBC 
  • being hired, as long as the information you report was collected during your hiring
  • an intern
  • a volunteer
  • a leader
  • a shareholder or HSBC partner
  • an external or occasional collaborator, like a consultant
  • a supplier
  • a subcontractor or co-contractor
  • someone with general meeting voting rights
  • a member of the administrative, management or supervisory body of HSBC legal entities in France

How does HSBC France Whistleblowing arrangement work?

Within our internal arrangement, several communication channels are available for whistleblowers.

If you're eligible, you can raise your concerns directly with your line manager or compliance, or with human resources if it's a personal grievance.

Whenever possible, we encourage you to use these channels as a first step. However, there may be times when these channels aren't the best option, depending on what you're reporting.

You can also use HSBC Confidential, our global whistleblowing channel. This lets you raise concerns about behaviours including (list is not exhaustive):

  • inappropriate personal behaviour
  • market abuse
  • mistreatment of a client
  • fraud
  • theft
  • corruption
  • non-compliance with competition law
  • creating a dangerous working environment
  • intimidation and harassment
  • discrimination and concealment of facts or misconducts

If HSBC Confidential isn't the best channel to deal with your report, we may discuss the matter with you and redirect you to an alternative channel.


Reported misconducts will be subject to internal investigation conducted by independent and competent experts. At the end of the investigation, we'll provide you the feedback as permissible as we can about the outcome of the case.


You raise concerns anonymously, but we encourage you to leave us your contact details to help us complete our investigation.


All reports and their records are confidential. HSBC Confidential and the people processing and investigating your report are the only ones who will know your identity. 

Information that could identify you will only be disclosed with your permission, unless we're legally required to share such information with the judge.

Sometimes, it may not be possible for us to conduct our investigation without revealing your identity. If this is the case, we'll discuss it with you and make sure you agree before moving forward.



You can always make an internal, external or public whistleblowing report safely, without fear of retaliation.

This protection also applies to facilitators, third parties and legal entities you're associated with, own or work for.

Voluntary information

We can only accept HSBC confidential reports relating to:

  • a crime or misdemeanour like corruption, fraud and embezzlement, harassment, discrimination, etc.
  • a breach or attempted concealment of a breach of any international standard, law or regulation
  • a threat or harm to the public interest
  • an attack on human rights and fundamental freedoms, the health and safety of people and the environment, resulting from the activities of HSBC in France and its subsidiaries as well as those of its subcontractors or suppliers
  • any situation wich could generate a significant financial or reputational risk for the bank. Reports in this category will be reviewed on a case-by-case basis to determine whether or not they should be processed via the alert system

The internal alert system complies with the provisions of the General Data Protection Regulations (GDPR). It has been validated by the Data Protection Officer of HSBC Continental Europe.

To stay protected, the whistle-blower or person who raises the report must act in good faith and without direct financial compensation.

How to raise a concern?

You can alert us in 2 ways:

1. Online

Complete our online form. This is hosted by NAVEX Global, an external third party.

To avoid any compatibility issues, please use a Microsoft Edge or Google Chrome internet browser when submitting your report.

2. By phone

Call us 24/7 on 0 800 91 24 79. This service is also provided by NAVEX Global

If you make your report orally, you can ask for a video or physical meeting. It must take place no later than 20 working days after we receive your request.

However you choose to raise your concerns with us, the information we collect will be kept confidential at all times.

We always encourage our people to use our internal channels before going to any external channels set up by public authorities.

In any event, whistle-blowers will not lose the protection they enjoy if they decide to use external channels first.

Personal data clauses

To see how we process your personal data through HSBC Confidential, check the HSBC personal data protection charter. This charter applies to all personal data relating to your professional situation (employees, job applicants, retirees, interns, etc.), processed by entities of the HSBC Group in France acting as data controllers. It explains how we use this data, who we share it with and what steps we take to ensure its confidentiality and security.

To get updates and share your ideas, join us.