Frequently Asked Questions
How to Report a Concern
OneTrust provides a list of incident types that it recommends you choose for your report and you always have the option of typing in your own incident type.
Any employee, member, contractor, or third party who finds themselves in a situation that may raise legal or ethical issues or that is identified in the code of conduct, may report concerns.
It is your preference and makes no difference whether you make your report through the website or by phone. The call center agents will follow the same steps for filing a report that you would go through on the website, and either way, your concern will be received confidentially, anonymously (if you choose), and routed to only specific individuals within OneTrust and our outside legal counsel who are responsible for evaluating the information you provided.
What to Expect in the Reporting Process
If you witness or experience issues in the following areas, please reach out.
- Bribery or corruption
- Conflicts of interest
- Fraud or financial misconduct
- Discrimination or harassment
- Health and safety violations
- Environmental violations
- Misuse of company resources
- Violations of company policies or procedures
- Protection of privacy or personal data
- Any other activity that could harm OneTrust, its employees, customers, or stakeholders
- Your concern is taken seriously.
-
You are treated with dignity and respect.
-
You are not required to identify yourself.
-
Your communication is confidential.
-
Your incident report will be received by Convercent and sent to the Ethics & Compliance team at Onetrust.
-
OneTrust handles all incident reports according to its internal investigatory procedures.
-
Your concern is addressed and you are kept informed during the investigation.
-
You are contacted when the investigation is complete and informed as to whether the findings are substantiated or unsubstantiated.
-
You will not be retaliated against for good faith reporting.
Convercent is a company that OneTrust acquired and is the platform we continue to use until OneTrust Hotline platform is released. The platform allows you to submit concerns or incidents, while easily maintaining anonymity, fostering an atmosphere where every voice is heard.
Your incident report is NOT automatically sent to law enforcement. If OneTrust is required by law or otherwise, your incident report will then be submitted to law enforcement.
In all instances, every effort will be made to ensure that information relating to a reported incident is kept confidential and communicated on a need-to-know basis only. Below are the different levels of anonymity you may select:
-
Remain completely anonymous: You will not reveal your name or contact information. Your identity is completely protected on the incident report.
-
Remain anonymous toward OneTrust: You are comfortable revealing your name and contact information to Convercent, but not to OneTrust. Convercent may contact you confidentially to gather additional information about the report yet will not reveal your identity at any time to your organization.
-
Share my name and information: You do not care about anonymity. You choose to reveal your name and identity to both OneTrust and to Convercent.
All reports submitted are routed to only specific individuals within OneTrust and outside legal counsel who are responsible for reviewing and evaluating the specific category of information that you provided. Each of these recipients has vast experience in reviewing matters and conducting investigations in a thorough, impartial, and confidential manner.
Retaliation against anyone for reporting or participating in the investigation of any complaint is prohibited. Anyone found to have engaged in retaliation is subject to disciplinary action. If at any time you believe you have been subject to retaliation for raising a concern or for participating in the investigation of a concern raised, please immediately report it so it can be properly investigated.
Following Up on a Concern
You'll be able to create a personal password, which you can use to check the status and updates of the report after it's been submitted. You won't be able to change anything, but you will be able to add additional details using the private case message board that is automatically created with a report.