Your company just crossed 50 employees in Spain: here are all the obligations that now apply
Complete guide to the obligations triggered when a Spanish company reaches 50 employees: whistleblowing channel, equality plan, works council, pay register and harassment protocol.
- REAF
- ICAM
- 5 Offices in Spain
- 25+ Years
- 30+ Jurisdictions
The problem
The 50-employee threshold is one of the most consequential milestones in Spanish labour and compliance law. Crossing it triggers a cascade of legal obligations that many growing companies discover only when a labour inspection arrives, a disgruntled employee mentions them in litigation, or an investor's due diligence team flags non-compliance as a deal risk. Ley 2/2023 (the Spanish Whistleblowing Law) mandates an internal reporting channel; the Equality Law requires a negotiated equality plan; the Workers' Statute requires a works council; transparency regulations require a pay register with gender breakdowns; and a harassment prevention protocol is legally required and actively enforced. Missing any one of these obligations can result in fines, invalidated dismissals, or lost public contracts. Companies that grow organically through multiple hiring waves often cross the threshold without anyone in the organisation realising the legal framework has changed.
Our solution
BMC's [labour compliance](/en/legal/labor-compliance) team has developed a specific compliance audit service for companies approaching or recently crossing the 50-employee threshold. We deliver a complete diagnostic of your current compliance status against all applicable obligations, identify any gaps, and manage the implementation of each requirement in the correct priority order — coordinating with employee representatives where negotiation is required.
How we do it
Compliance audit and obligation mapping
We review all existing policies, protocols, and documentation against the full set of obligations triggered at the 50-employee level. We deliver a structured report showing which obligations are met, which are missing, and the legal consequences and sanction exposure associated with each gap.
Whistleblowing channel implementation (Ley 2/2023)
We implement or review your internal reporting channel to ensure full compliance with Ley 2/2023: guaranteed informant confidentiality, seven-day acknowledgement deadline, three-month maximum response time, designated channel manager, and a non-retaliation policy. We can act as the external channel manager if the company prefers. We coordinate with our [criminal compliance](/en/legal/criminal-compliance) team to integrate the channel with the company's broader crime prevention programme.
Equality plan and pay audit
We negotiate and implement the mandatory equality plan with the employee representatives: gender equality diagnosis, work-life balance measures, pay equality audit, harassment prevention, and monitoring mechanisms. We establish the pay register by professional category and group with gender breakdown, ensuring both documents are registered with the relevant authorities.
Harassment protocol and works council
We draft the mandatory sexual harassment and gender-based harassment prevention and response protocol. We advise on the trade union election process to establish or renew the works council (comite de empresa) if not already in place, and we brief management on works council rights and consultation obligations.
We went from 48 to 67 employees in about four months due to a major project win. We had no idea we were suddenly non-compliant on five separate requirements. BMC conducted the audit in two weeks and had us fully compliant within three months. The peace of mind was invaluable, especially with an investor due diligence coming up.
The 50-employee threshold: a major shift in the regulatory framework
In Spanish labour and compliance law, headcount is not merely a statistic — it is a legal trigger. When a company’s workforce reaches 50 employees, it enters a significantly more demanding regulatory regime covering five main areas: employee representation, gender equality, pay transparency, internal reporting obligations, and harassment prevention.
Many companies that grow organically — through project wins, seasonal peaks, or gradual expansion — cross this threshold without a clear moment of recognition that the legal framework has changed. The cost of discovering the gap during a labour inspection, an employment tribunal claim, or an investor due diligence is always higher than the cost of proactive preparation.
The five principal obligations
1. Internal Reporting Channel (Ley 2/2023, Whistleblowing Law): The Spanish transposition of EU Directive 2019/1937 requires all companies with 50 or more employees to operate a functioning internal reporting channel. The channel must be confidential, managed by a designated responsible person, and capable of acknowledging reports within 7 working days and responding substantively within 3 months. The company may operate the channel internally or outsource its management to a third party such as BMC. Fines for missing or non-compliant channels reach up to 300,000 euros.
2. Equality Plan: Mandatory for companies with 50 or more employees since 2019 (with phased implementation completed by 2022). The plan must be negotiated with employee representatives, registered at the REGCON, and reviewed every four years. It encompasses a gender equality diagnostic, a pay audit, work-life balance measures, and a harassment prevention framework.
3. Works Council (Comite de Empresa): The Workers’ Statute requires the establishment of a works council — a multi-member elected employee representative body — in companies with 50 or more employees. The works council has information and consultation rights over a wide range of company decisions, including major restructurings, working condition changes, and collective redundancies.
4. Pay Register and Pay Audit: All companies must maintain a pay register showing average remuneration by professional group, level, and gender. Companies with 50 or more employees that have an equality plan must also carry out a pay audit verifying that no unjustified gender pay gaps exist for roles of equal value.
5. Harassment Prevention Protocol: Technically required for all companies regardless of size, the sexual harassment and gender-based harassment prevention and response protocol is in practice most actively enforced in companies with 50 or more employees, where labour inspectors specifically check for its existence and adequacy.
Integration with criminal compliance
Companies at this size level should also consider whether they need to implement or strengthen a criminal compliance programme. While not strictly mandated by employee headcount, a formal crime prevention model reduces the criminal liability of the legal entity itself — and its directors — in the event of offences committed by employees or managers. The whistleblowing channel required by Ley 2/2023 is typically integrated into this broader compliance framework.
At BMC we deliver integrated compliance programmes that address all these requirements coherently, avoiding the duplication of policies and documentation that results from addressing each obligation independently.
Frequently asked questions
Related services
Take the first step
Request a no-obligation consultation and discover what we can do for your business.