Whistleblower Protection: Employer Obligations

TL;DR: Employees who make protected disclosures about wrongdoing have strong legal protections against retaliation in all seven jurisdictions. Employers who dismiss or victimise a whistleblower face uncapped compensation claims and potential criminal liability in some countries.

What You Need to Know

Whistleblowing — the act of disclosing information about wrongdoing within or related to an organisation — is protected by law across all seven countries covered in this guide. The breadth and strength of those protections vary, but the core principle is consistent: an employee who reasonably believes they are disclosing information in the public interest should not suffer any detriment as a result.

For employers, whistleblowing raises two distinct obligations. First, there is a reactive obligation: when a protected disclosure is made, the employer must not victimise the person who made it, and must handle the disclosure appropriately. Second, there is a proactive obligation: having a clear internal reporting mechanism — so that employees who have concerns feel able to raise them without going to an external regulator — is increasingly expected and, in some sectors, legally required.

Understanding both obligations is essential for any employer.

How It Works: A Practical Overview

What is a "Protected Disclosure"?

In the UK, a "protected disclosure" under the Employment Rights Act 1996 (as amended by the Public Interest Disclosure Act 1998, PIDA) is a disclosure of information that the worker reasonably believes, and reasonably believes is in the public interest to disclose, tends to show one or more of the following:

• A criminal offence
• A failure to comply with a legal obligation
• A miscarriage of justice
• A danger to the health or safety of any individual
• Damage to the environment
• The deliberate concealing of information about any of the above

Similar frameworks exist in Australia (the Public Interest Disclosure Act 2013 and state equivalents), Canada (the Public Servants Disclosure Protection Act for public sector workers), the US (sector-specific whistleblower statutes plus the Sarbanes-Oxley Act), France (the Sapin II law and 2022 updates), Sweden (Lag om skydd för personer som rapporterar om missförhållanden, in force 2021), and New Zealand (the Protected Disclosures Act 2022).

Internal Reporting Channels

Best practice — and a legal requirement in France and Sweden for organisations above certain size thresholds — is to establish a clear internal whistleblowing channel. This should:

• Be accessible and confidential
• Enable anonymous reporting if possible
• Have a clear process for investigating reports
• Guarantee protection from retaliation
• Be communicated to all employees

In France, the Sapin II law (as amended) requires organisations with 50+ employees to implement whistleblowing procedures. Under the EU Whistleblowing Directive (EU 2019/1937), implemented by France and Sweden, companies with 50+ employees must have formal internal reporting channels.

In the UK, there is no mandatory requirement for internal whistleblowing procedures (outside certain regulated sectors like financial services), but the Financial Conduct Authority and other regulators expect regulated firms to have them.

Protected from Detriment — Not Just Dismissal

Whistleblowing protection covers detriment — any detrimental treatment — not just dismissal. Detriment includes:

• Disciplinary action
• Demotion or loss of responsibilities
• Exclusion from meetings or opportunities
• Negative performance appraisals
• Harassment or hostile management
• Threats or pressure to retract the disclosure

In the UK, dismissal for making a protected disclosure is automatically unfair — there is no qualifying period and no cap on compensation. Awards in whistleblowing cases are frequently large and can include an uncapped compensatory element.

Managing the Disclosure

When a protected disclosure is received:

1. Do not identify or "out" the discloser unless they consent
2. Investigate seriously — do not dismiss the concern because of who raised it or how it was raised
3. Document your investigation and the steps taken
4. Provide feedback to the discloser on outcome if appropriate
5. Ensure no manager who is the subject of the disclosure is involved in handling it
6. Review your processes if wrongdoing is identified — remediation is evidence of good faith

Retaliatory action — however it is framed — will be scrutinised by tribunals and courts if the discloser brings a claim.

Country-by-Country Comparison

Common Mistakes to Avoid

1. Treating a whistleblowing disclosure as a grievance. If an employee raises concerns that amount to a protected disclosure, handling it only through the grievance process may fail to address the substantive public interest concern. Whistleblowing disclosures should be investigated under a separate, dedicated procedure.
2. Taking action against the employee while they are being "investigated." If a discloser is subject to a disciplinary process around the same time as making a disclosure, the timing alone can look retaliatory. Ensure any disciplinary action is genuinely independent of the disclosure and document why the action was taken and when it was initiated.
3. Failing to keep the disclosure confidential. Sharing the identity of a whistleblower unnecessarily — including informally among management — can constitute victimisation and is likely to damage your internal reporting culture. Confidentiality must be taken seriously.
4. Not responding to the substance of the concern. Even if the disclosure is ultimately found to be unfounded, the employer should be able to show that the concern was investigated seriously. Dismissing concerns without investigation leaves the employer exposed.
5. Retaliating through inaction. Promotion freezes, exclusion from team meetings, or being given less interesting work following a disclosure are all actionable detriments even though they don't involve an explicit adverse act. Ensure line managers understand that inaction against a whistleblower can be detriment as much as a positive act.

Next Steps: Get Started Today

Establish your whistleblowing documentation and procedures:

• Employment Checker — verify whistleblowing obligations by jurisdiction and sector
• Filing Deadlines — track regulatory reporting requirements

MmowW Scrib🐮 is a document preparation service, not a law firm. We do not provide legal advice. For advice specific to your situation, consult a qualified employment solicitor or attorney.

Frequently Asked Questions

Q: Does a disclosure have to be made to an external body to be protected?

A: No. In the UK and most jurisdictions, a disclosure made internally to the employer is fully protected — workers do not have to go to a regulator first. In fact, most whistleblowing frameworks encourage internal disclosure first. However, disclosures to external regulators and, in certain circumstances, to the press can also be protected if internal channels have been exhausted or are not appropriate.

Q: What if the employee's disclosure turns out to be wrong?

A: Protection is based on reasonable belief, not accuracy. An employee who genuinely believed their concern was valid and in the public interest is protected even if the concern turns out to be unfounded. Protection is only lost if the disclosure was made maliciously, in bad faith, or where the worker did not actually believe the information disclosed was true.

Q: Can I include a clause in a settlement agreement that prevents the employee from making future disclosures?

A: In the UK, settlement agreements cannot lawfully prevent future protected disclosures — any such clause is void. This is sometimes misunderstood by employers drafting settlement agreements. Non-disclosure clauses can cover commercial confidentiality but cannot silence public interest disclosures.

Loved for Safety. MmowW Scrib🐮 — Document preparation made simple across 7 countries.

Loved for Safety.