Adapting under pressure: how whistleblowing platforms respond to evolving threats and regulations

Over the past 15 years, whistleblowing platforms have had to continuously adapt to a rapidly changing environment. Technical threats facing journalists and sources have intensified, including targeted malware, device compromise, and digital surveillance. At the same time, some legal frameworks governing whistleblowing have expanded, particularly in Europe with the introduction of the EU Whistleblower Protection Directive raising expectations about what secure reporting infrastructure and civic technologies should deliver in practice.
This panel examines how whistleblowing platforms themselves have evolved in response to these pressures, drawing on the experiences of the teams behind GlobaLeaks and SecureDrop. The discussion will focus on how real-world attacks, newsroom use, accessibility needs, and changing legal expectations have shaped platform design, security models, and journalist workflows.
Key themes and topics include:
> The evolution of threat models for whistleblowers and journalists over the past decade
> Handling unsafe or malicious submissions, including malware disguised as leaks
> Protecting journalists during the review of untrusted files
> How legal frameworks, especially the EU Whistleblower Protection Directive, have influenced platform adoption, design, and expectations
> The gap between legal protections and technical realities
> Accessibility for sources, including usability for non-technical users, language support, and assistive technologies
> Trade-offs between strong security guarantees and real-world usability
The session is aimed at journalists, editors, and newsroom technologists who want a clearer understanding of how whistleblowing infrastructure is adapting, and what those changes mean for investigative reporting today.
Moderated by Harlo Holmes.
Organised in association with Freedom of the Press Foundation.