The November 2012 FCPA Resource Guide emphasized that a confidential reporting hotline is one of the hallmarks of an effective FCPA compliance program.  However, operating such a hotline requires a company to collect personal data about employees.  Accordingly, maintaining a reporting hotline may conflict with applicable data privacy laws, particularly in non-U.S. jurisdictions.  How can companies both abide by data privacy laws and maintain a reporting hotline, consistent with best compliance practices?  This article addresses this question and, in doing so, offers guidance on setting up a hotline; processing and investigating complaints; and post-investigation procedures.