Notification is generally not mandatory for private companies.
However, the report must be clarified regardless of the scope of application of the Whistleblower Protection Act, otherwise there is a risk of liability. An internal investigation must be initiated with the help of (external) specialists, if necessary.