Implementing a Solid Whistleblowing Policy: A Guide

serious dialogue at work between employee and manager

In this article, we dive into what whistleblowing involves and why it's so crucial for businesses to have a solid whistleblowing policy in place.

What is whistleblowing?

Whistleblowing is when you report certain types of wrongdoing you've seen at work. It's about raising the alarm to prevent harm or fraud within the company.

This wrongdoing can include illegal activities, dangers to health and safety, or risks to the public interest. It's not about personal grievances but concerns that affect others.

Whistleblowing at work

At work, whistleblowing might look like this: you notice that safety measures are being ignored in your factory, putting everyone at risk. You decide to report this to your manager or through a special channel your company has set up for such concerns.

This act of reporting is whistleblowing. It's all about keeping the workplace safe and upholding the company's integrity.

Types of misconduct whistleblowing can uncover

Whistleblowing can bring to light various kinds of wrongdoing, such as:

  • Illegal activities or criminal offences
  • Failure to comply with legal obligations
  • Miscarriages of justice
  • Endangering people's health and safety
  • Damage to the environment
  • Covering up any of these issues

Why do you need a whistleblowing policy?

Having a whistleblowing policy isn't just a good practice; it's a crucial safety net for your business. Here are five reasons why:

1. Legal obligation:

Many countries have laws like the Public Interest Disclosure Act that protect whistleblowers. These laws make it a company's legal obligation to have channels for employees to raise concerns. Not having a policy could put you on the wrong side of the law.

2. Protect public interest:

Whistleblowing policies help ensure that activities harmful to the public interest are stopped. Whether it's about safeguarding public funds or preventing environmental damage, such policies allow employees to report issues that could affect the wider community.

3. Maintain health and safety:

The health and safety executive often highlights the importance of whistleblowing in preventing accidents and health risks. A policy encourages staff to report unsafe practices, helping to maintain a safe workplace.

4. Prevent unethical conduct:

A whistleblowing policy allows employees to report other unethical conduct anonymously. This can include financial fraud or misuse of company resources, helping to protect the company's assets and reputation.

5. Build trust:

By encouraging openness and transparency, a whistleblowing policy builds trust among employees. They know they have a safe way to report serious concerns without fear of unfair dismissal or retaliation. It shows that the company values integrity and is committed to addressing issues head-on.

What should a whistleblower policy include?

Creating a whistleblower policy is like building a safety net for your company. It's about making sure everyone feels safe to speak up if they spot something wrong, like a criminal offence or unsafe work conditions.

Let's walk through what needs to be included in this policy, using simple terms and aiming to keep things clear and helpful.

First off, your policy should clearly explain what whistleblowing is. It's not about personal complaints but about serious stuff that can harm people or the company, like illegal activities or unethical conduct. Here's what else you need to include:

How to raise a concern?

Tell your employees how they can report what they've seen or heard. This could be to their line manager, senior management, or even a prescribed person anonymously if they feel they can't talk to someone in the company.

What can be reported?

Define what types of issues should be reported. This includes criminal offences, dangers to health and safety, environmental risks, covering up wrongdoing, and any other unethical conduct on the company's premises or involving its staff.

Protection for whistleblowers

Your policy must make it clear that people who report issues in good faith, meaning they really believe what they're saying is true, are protected. They shouldn't face any disciplinary action, dismissal, or unfair treatment for speaking up.

You might also want to talk about a confidentiality clause, ensuring that the identity of the person raising the concern is kept secret if they request it.

Handling disclosures:

Explain how the company will deal with concerns raised. This includes looking into the issue promptly and fairly, deciding on the right action to take, and keeping the whistleblower informed (as much as possible without breaking confidentiality).

Support available:

Let your employees know where they can get further information or support, both within the company and externally. This could include contact details for regulatory bodies or advice organizations.

Legal framework:

Make sure to mention the whistleblowing law that applies, like the Public Interest Disclosure Act in the UK. This shows that your policy is backed up by law, giving it more weight and reassuring employees that they're protected.

What happens next?

Outline the steps that might be taken after an initial disclosure is made, including how decisions are made about investigating a report and what kind of actions could follow an investigation.

It's also good to mention that if someone's not happy with how their concern was handled, they might be able to take it to an employment tribunal or another relevant body.

Legal framework and compliance

In the UK, the legal framework and compliance for whistleblowing are primarily governed by the Public Interest Disclosure Act 1998 (PIDA), which protects employees who expose wrongdoing, illegal activities, or risks to public safety and interest within their organizations.

This act ensures that whistleblowers are safeguarded against unfair dismissal and detrimental treatment as a result of their disclosures.

The Act covers a wide range of potential issues that can be reported, including criminal offences, health and safety dangers, environmental risks, miscarriages of justice, legal breaches by the company, and cover-ups of any of these issues​​​​.

External reporting mechanisms

Not every problem can be solved inside the company. That's where external reporting mechanisms come in. They are like a plan B for when the usual way of doing things doesn't work out. Let's dive into why and when you might need to look outside your organization to get issues resolved.

Why use external mechanisms?

Sometimes, the inside route just doesn't cut it. Maybe the issue is too big, too sensitive, or involves someone high up in the company. In cases like these, going external can offer a fresh set of eyes and an impartial perspective. Plus, it can provide an extra layer of protection for you as the whistleblower.

When to go external?

  • Trust issues: If you don't trust that your company will handle your concern properly or if you've tried and nothing happened, it might be time to go outside.
  • Serious concerns: For really serious stuff—like illegal activities or big safety risks—it's often better to get external authorities involved.
  • Retaliation fears: If you're worried about getting in trouble for speaking up, external channels might offer more anonymity and protection.

Who to turn to?

  • Regulatory bodies: These are the official watchdogs for different industries. They can step in when a company is breaking the law or not following industry standards.
  • External advisors: Sometimes, independent charities or advisory services can offer guidance. They're like a listening ear when you're not sure what to do next.
  • Trade unions: If you're a member, your union can be a powerful ally. They know the ropes and can help you navigate your options.

The role of external mechanisms

These outside options aren't just about finding somewhere else to report problems. They're about making sure those problems get the attention they deserve.

By offering a way to escalate concerns, they ensure that no issue is too big, too complex, or too sensitive to be tackled. By protecting whistleblowers, they encourage more people to come forward, making workplaces safer and more transparent for everyone.

Compliance requirements for businesses

For businesses in the UK, complying with whistleblowing laws means implementing specific measures to protect and support whistleblowers. Key requirements include:

Establishing clear policies: Businesses should have clear, accessible whistleblowing policies that explain how employees can report concerns. These policies should outline the types of issues that can be reported, the procedures for making a disclosure, and the protections in place for those who do.

Protection against retaliation: Companies must ensure that employees who make disclosures in the public interest are protected from retaliation, including unfair dismissal, discrimination, or any form of disadvantage. The law offers strong protection for whistleblowers, making dismissal or detrimental treatment as a result of whistleblowing an automatically unfair action.

Handling disclosures appropriately: Employers must treat all disclosures seriously and confidentially, investigating them promptly and impartially. They are encouraged to provide feedback to the whistleblower about the outcome of the investigation, within the bounds of confidentiality and legal requirements.

Training and awareness: It's essential for businesses to provide training to all employees, including management, on the whistleblowing policy and procedures. Raising awareness ensures that employees understand how to report concerns and feel safe to do so.

Review and update policies: Regularly reviewing and updating the whistleblowing policy ensures it remains effective and compliant with any changes in the law or organizational structure.

Technology and anonymity in whistleblowing

The world of whistleblowing is evolving with technology, making it easier and safer for individuals to report wrongdoing without fear. Below, we explore how technology enhances anonymity and security for whistleblowers.

Digital platforms enhance anonymity

Digital tools and online platforms are at the forefront of protecting whistleblowers' identities. These technologies ensure that individuals can report issues such as suspected wrongdoing or possible malpractice without their identities being revealed.

Encryption and secure reporting channels play a critical role in this process, allowing whistleblowers to come forward with confidence.

Secure reporting channels

Secure reporting channels enable employees, contractors, and even external parties to safely disclose information about any misconduct. These platforms offer a direct line to those in charge or to external bodies like independent charities and prescribed persons.

This ensures that whistleblowing disclosures are taken seriously and that appropriate action is initiated.

Encouraging openness

Creating an environment where employees feel comfortable raising concerns is crucial. Employers are expected to respect confidentiality requests and provide support mechanisms, such as confidential helplines. This openness is vital for fostering a culture where issues are addressed promptly and effectively.

Data protection and security

With the exchange of sensitive information, data protection becomes paramount. Technology plays a key role in safeguarding personal details through strict adherence to data protection laws. This ensures that whistleblowers' information is secure and handled with the utmost care.

The role of technology in reporting

Technology not only makes it possible for individuals to report wrongdoing anonymously but also ensures that these reports reach the right people.

By facilitating the secure and confidential transmission of information, technology acts as a bridge between the whistleblower and the resolution of the issue.

Employee scheduling and Time-tracking software!

Employee scheduling and Time-tracking software!

  • Easy Employee scheduling
  • Clear time-tracking
  • Simple absence management
Try for free Request a demo


In wrapping up, it's clear that whistleblowing serves as a crucial tool in maintaining transparency, integrity, and safety in the workplace.

Whether through internal channels or external mechanisms, the goal is to ensure that concerns are raised and addressed appropriately, safeguarding both the individual and the public interest.

Remember, creating an environment where employees feel confident and protected in voicing concerns is not just about following laws; it's about fostering a culture of openness and accountability that benefits everyone.

Frequently Asked Questions

  • Yes, many external bodies and regulatory agencies allow for anonymous reporting. However, providing some contact information can help them follow up if they need more details to investigate your concern effectively.

  • If you face retaliation, you should report it immediately to your HR department, a trusted manager, or an external body like a trade union or legal advisor. Protection laws are in place to support whistleblowers against such treatment.

  • The investigation time can vary depending on the complexity of the issue reported and the organization handling the report. Some cases might be resolved quickly, while others require a thorough investigation that could take several months.

  • This depends on the policies of the organization or external body where you made the report. Some may allow withdrawal, but if the issue is of significant public concern, the investigation might proceed regardless of withdrawal.

Topic: Policies
Rinaily Bonifacio

Written by:

Rinaily Bonifacio

Rinaily is a renowned expert in the field of human resources with years of industry experience. With a passion for writing high-quality HR content, Rinaily brings a unique perspective to the challenges and opportunities of the modern workplace. As an experienced HR professional and content writer, She has contributed to leading publications in the field of HR.


Please note that the information on our website is intended for general informational purposes and not as binding advice. The information on our website cannot be considered a substitute for legal and binding advice for any specific situation. While we strive to provide up-to-date and accurate information, we do not guarantee the accuracy, completeness and timeliness of the information on our website for any purpose. We are not liable for any damage or loss arising from the use of the information on our website.