Whistleblowing
Whistleblowing allows workers to raise concerns about wrongdoing in the workplace without fear of retaliation. UK law offers strong protections to individuals who make protected disclosures, and employers must understand their legal obligations, have effective policies in place and respond appropriately to concerns.
Key Whistleblowing Obligations for Employers
Employers should:
- have a written whistleblowing policy that meets legal standards
- communicate the policy clearly to all staff
- ensure whistleblowers are protected from detriment or dismissal
- investigate disclosures promptly and fairly
- take appropriate action where wrongdoing is established
- protect confidentiality where possible
Effective handling of whistleblowing reduces legal risk and demonstrates commitment to ethical business conduct.
What Is Whistleblowing?
Whistleblowing occurs when an employee or worker makes a protected disclosure about wrongdoing in the workplace. A protected disclosure is a disclosure of information that, in the reasonable belief of the worker, tends to show that one or more of the following has occurred, is occurring, or is likely to occur:
- A criminal offence
- Breach of any legal or regulatory obligation
- Miscarriage of justice
- Danger to health and safety
- Damage to the environment; or
- Deliberate concealment of any of the above
To qualify for protection, the disclosure must be made in good faith and to the correct person or body.
Who Is Protected?
Protection under whistleblowing law applies to a broad range of workers, including:
- employees
- agency workers
- contractors
- trainees and apprentices
- some volunteers
People raising concerns must have a reasonable belief that the information tends to show wrongdoing. Even if the information turns out to be incorrect, protection can still apply where the reasonable belief test is met.
How Protected Disclosures Must Be Made
A protected disclosure can be made:
- internally, to the employer or a nominated officer
- externally, to a prescribed person or body (e.g., regulator)
- sometimes to other persons if the circumstances justify it
Employers should encourage internal reporting to allow timely investigation and response, while ensuring employees know how and where to report concerns.
Employer Duties – What You Must Do
Respond Promptly and Fairly
When notified of a concern:
- acknowledge receipt as soon as possible
- assess whether the concern could be a protected disclosure
- investigate impartially and without unreasonable delay
- keep the whistleblower informed of process and outcomes
- maintain confidentiality where feasible
Avoid Detrimental Treatment
It is unlawful to subject a whistleblower to detriment because they made a protected disclosure. Detrimental treatment can include:
- demotion
- exclusion from meetings or decisions
- bullying or harassment
- unfavourable changes to duties or hours
Dismissal of a whistleblower may also be automatically unfair if it is “because of” the disclosure.
Investigation of Whistleblowing Concerns
When a concern is raised:
- Preliminary assessment: determine whether the matter falls within whistleblowing protection
- Plan the investigation: identify relevant documents, witnesses and risk areas
- Gather evidence: interview witnesses and review documentation
- Analysis: evaluate whether the concern is substantiated
- Outcome and action: decide on appropriate remedial steps and communicate with the whistleblower
Separate the investigative function from those implicated in the concern to ensure impartiality.
Confidentiality and Anonymity
Employers should protect a whistleblower’s identity where possible, consistent with the need to conduct a meaningful investigation. Confidentiality encourages reporting and reduces fear of retaliation.
Anonymous disclosures can still be investigated where practicable, but employers should balance anonymity with the need for specific information to investigate properly.
External Reporting and Prescribed Persons
In some cases, disclosures are made to prescribed external bodies (e.g., regulators). External reporting is a valid route where internal mechanisms are unsuitable, have been exhausted, or the disclosure involves wrongdoing that should be notified to a regulator.
Employers should be aware that external disclosures can trigger scrutiny from regulators or enforcement bodies.
Common Legal Risks for Employers
Employers face legal risk where:
- there is no written whistleblowing policy
- reports are ignored or not investigated
- workers who raise concerns suffer detriment
- confidentiality is breached
- disciplinary action follows a protected disclosure
- retaliation occurs
Tribunals take a strict approach to whistleblowing protection, and awards for successful claims can include compensation for financial loss, injury to feelings and aggravated damages in some cases.
Practical Steps for Employers
To manage whistleblowing effectively:
- Draft or review a whistleblowing policy aligned with current law
- Communicate the policy to all staff and include it in induction materials
- Train managers on how to handle disclosures impartially
- Designate a responsible officer or team for receiving reports
- Keep clear records of concerns, investigations and outcomes
- Conduct regular audits of your whistleblowing framework
How We Support Employers
Whistleblowing complaints are complex and sensitive. Our employment solicitors help employers with:
- drafting compliant whistleblowing policies and procedures
- training HR and management on handling disclosures
- advising on investigations and risk mitigation
- defending claims for detriment or unfair dismissal
