Is a Whistleblowing Policy a legal requirement for UK employers?

There is no general statutory requirement in the Employment Rights Act 1996 or the Public Interest Disclosure Act 1998 for all employers to have a written Whistleblowing Policy. However, certain categories of employer are required to have one. In the financial services sector, the Financial Conduct Authority (FCA) rules (SYSC 18.3 and 18.4) require firms to have appropriate internal procedures for handling workers' disclosures and to inform UK-based employees of the FCA whistleblowing service. NHS bodies are required under their standard contract to have a whistleblowing policy. Public sector organisations are expected to have whistleblowing arrangements in place as a matter of good governance. For all other employers, ACAS strongly recommends having a written Whistleblowing Policy as part of good employment practice. A written policy demonstrates an organisation's commitment to transparency and ethical conduct, provides workers with a clear process for raising concerns, and helps protect the organisation from liability by showing that it has taken reasonable steps to address wrongdoing. The absence of a policy may also be taken into account by an Employment Tribunal when assessing claims of detriment or unfair dismissal connected to whistleblowing.

What is a qualifying disclosure under the Employment Rights Act 1996?

Under s.43B(1) of the Employment Rights Act 1996, a qualifying disclosure is a disclosure of information which, in the reasonable belief of the worker making it, is made in the public interest and tends to show one or more of the following: (a) that a criminal offence has been committed, is being committed, or is likely to be committed; (b) that a person has failed, is failing, or is likely to fail to comply with any legal obligation to which they are subject; (c) that a miscarriage of justice has occurred, is occurring, or is likely to occur; (d) that the health or safety of any individual has been, is being, or is likely to be endangered; (e) that the environment has been, is being, or is likely to be damaged; or (f) that information tending to show any of the above has been, is being, or is likely to be deliberately concealed. The worker does not need to prove that the wrongdoing occurred — a reasonable belief is sufficient. The public interest requirement, introduced by the Enterprise and Regulatory Reform Act 2013 s.17, was considered by the Court of Appeal in Chesterton Global Ltd v Nurmohamed [2017] EWCA Civ 979, which held that a disclosure can be in the public interest even where the worker also has a personal interest in the matter, provided the worker has a reasonable belief that the disclosure serves the public interest.

What protection does a whistleblower have against dismissal and detriment?

The Employment Rights Act 1996 provides two principal protections for workers who make protected disclosures. First, under s.47B, a worker has the right not to be subjected to any detriment by any act, or any deliberate failure to act, by their employer done on the ground that the worker has made a protected disclosure. Detriment includes any action that puts the worker at a disadvantage, such as denial of promotion, unfavourable changes to duties, disciplinary action, suspension, bullying, or isolation. Second, under s.103A, an employee who is dismissed shall be regarded as unfairly dismissed if the reason or principal reason for the dismissal is that the employee made a protected disclosure. This is known as automatic unfair dismissal — there is no minimum qualifying period of continuous employment to bring a claim (unlike ordinary unfair dismissal, which requires two years under s.108), and compensation is uncapped. The burden of proof differs depending on the type of claim: for s.47B detriment claims, the burden is on the employer to show the ground on which the act or deliberate failure to act was done; for s.103A dismissal claims, the burden is on the employer to show the reason for dismissal where the employee has sufficient evidence to raise the inference.

Who are prescribed persons and when can a worker disclose to them?

Prescribed persons are external bodies and regulators listed in the Prescribed Persons Order 2014 (SI 2014/2418), made under s.43F of the Employment Rights Act 1996. Under s.43F, a qualifying disclosure made to a prescribed person is a protected disclosure if the worker reasonably believes that the relevant failure falls within any description of matters in respect of which the person is prescribed, and that the information disclosed and any allegation contained in it are substantially true. Prescribed persons include the Health and Safety Executive (for health and safety matters), the Financial Conduct Authority and Prudential Regulation Authority (for financial services), the Care Quality Commission (for health and social care), the Environment Agency (for environmental matters), the Information Commissioner's Office (for data protection), HM Revenue and Customs (for tax matters), the Serious Fraud Office (for serious fraud), the National Crime Agency (for organised crime), and many others. The full list is maintained by the Department for Business and Trade. Workers do not need to exhaust internal procedures before making a disclosure to a prescribed person, though employers may encourage internal reporting first. Under the Prescribed Persons (Reports on Disclosures of Information) Regulations 2017, most prescribed persons are required to publish annual reports on the number of disclosures received and the actions taken.

Can a worker be disciplined for making a whistleblowing disclosure that turns out to be wrong?

No, provided the worker had a reasonable belief that the information disclosed tended to show one of the categories of wrongdoing listed in s.43B of the Employment Rights Act 1996 and that the disclosure was made in the public interest. The protection under Part IVA of the ERA 1996 does not require the worker to prove that the wrongdoing actually occurred. It is sufficient that the worker reasonably believed, at the time of making the disclosure, that the information tended to show wrongdoing. This means that a worker who raises a genuine concern in good faith is protected even if the concern is subsequently found to be unfounded after investigation. Disciplining a worker for raising a concern that was made in good faith and in the reasonable belief that it was in the public interest would itself constitute a detriment under s.47B and could give rise to a claim in the Employment Tribunal. However, the protection does not extend to workers who make disclosures that they know to be false at the time of making them. An employer may take disciplinary action, up to and including dismissal, against a worker who deliberately makes a false or malicious allegation. The distinction between a genuine but ultimately unfounded concern and a deliberately false allegation is critical and must be carefully assessed.

Whistleblowing Policy (UK) — United Kingdom

Create a comprehensive Whistleblowing Policy (Public Interest Disclosure Policy) for England and Wales, compliant with the Employment Rights Act 1996 Part IVA as inserted by the Public Interest Disclosure Act 1998. This template covers qualifying disclosures (criminal offences, legal obligation failures, health and safety dangers, environmental damage, miscarriages of justice, and deliberate concealment), internal and external reporting channels, prescribed persons under the Prescribed Persons Order 2014, confidentiality protections, the statutory right not to be subjected to detriment (s.47B ERA 1996), protection against automatic unfair dismissal (s.103A ERA 1996), investigation procedures, anonymous reporting, false allegations, and record-keeping. Suitable for private and public sector employers of all sizes. Fill in your organisation's details, preview in real time, and download as PDF or Word.

What Is a Whistleblowing Policy (UK)?

A Whistleblowing Policy is a formal workplace document that establishes the procedures and protections for workers who wish to report suspected wrongdoing, malpractice, or illegal activity within or connected to an organisation. In England and Wales, the legal framework for whistleblowing protection is found primarily in the Employment Rights Act 1996 (ERA 1996) Part IVA, which was inserted by the Public Interest Disclosure Act 1998 (PIDA 1998) and subsequently amended by the Enterprise and Regulatory Reform Act 2013.

The purpose of a Whistleblowing Policy is to provide workers with a clear, accessible, and confidential process for raising concerns about wrongdoing, and to assure them that they will not suffer any detriment for doing so. The policy identifies the categories of concern that may be raised (known as qualifying disclosures), the persons to whom disclosures should be made, the process for investigating disclosures, and the statutory protections available to whistleblowers.

Under s.43B of the ERA 1996, a qualifying disclosure is a disclosure of information which, in the reasonable belief of the worker, is made in the public interest and tends to show that one or more specified types of wrongdoing has occurred, is occurring, or is likely to occur. These types of wrongdoing are: criminal offences, failure to comply with a legal obligation, miscarriages of justice, danger to the health or safety of any individual, damage to the environment, and the deliberate concealment of information relating to any of these matters.

The statutory protections for whistleblowers are among the strongest in UK employment law. Under s.47B of the ERA 1996, workers have the right not to be subjected to any detriment by their employer on the ground that they have made a protected disclosure. Under s.103A, an employee who is dismissed because they made a protected disclosure is automatically treated as having been unfairly dismissed, without any qualifying period of employment and with uncapped compensation. These protections apply to employees, workers, agency workers, and certain other categories of person defined in s.43K of the ERA 1996.

When Do You Need a Whistleblowing Policy (UK)?

A Whistleblowing Policy is needed by any organisation that employs or engages workers in England and Wales, regardless of its size, sector, or corporate structure. While the Employment Rights Act 1996 and the Public Interest Disclosure Act 1998 do not impose a general statutory obligation on all employers to maintain a written Whistleblowing Policy, the absence of such a policy carries significant legal, reputational, and operational risks.

In the financial services sector, the Financial Conduct Authority (FCA) has made whistleblowing arrangements mandatory. Under SYSC 18 of the FCA Handbook, firms authorised by the FCA must have appropriate internal procedures for handling disclosures by workers and must appoint a Senior Manager as the firm's whistleblowers' champion. NHS organisations are required under the NHS Standard Contract to have Freedom to Speak Up arrangements that include a named guardian and a written policy.

For private sector employers outside of regulated industries, ACAS strongly recommends having a written Whistleblowing Policy as part of good employment practice. The Equality and Human Rights Commission (EHRC) and the Chartered Institute of Personnel and Development (CIPD) also recommend that all employers adopt a clear whistleblowing procedure. A well-drafted policy serves multiple purposes: it provides a structured process for receiving and investigating concerns, reassures workers that they can raise issues without fear of retaliation, helps the organisation identify and address wrongdoing early, and demonstrates the organisation's commitment to transparency and accountability.

The policy is particularly important in organisations where the risk of wrongdoing is elevated, including those handling public funds, those operating in highly regulated sectors, those with complex supply chains, and those with a significant number of workers in safety-critical roles. It is also essential for organisations that are tendering for public contracts, as many procurement frameworks now require bidders to demonstrate that they have adequate whistleblowing arrangements.

What to Include in Your Whistleblowing Policy (UK)

A legally effective and operationally useful Whistleblowing Policy for England and Wales should contain several key elements, each grounded in the statutory framework of the Employment Rights Act 1996 Part IVA and supporting legislation.

A clear statement of purpose that explains what whistleblowing is, why the organisation values it, and the commitment of the organisation to protecting workers who raise concerns in good faith. The statement should make explicit that the policy covers all categories of qualifying disclosure under s.43B of the ERA 1996 and that it applies to employees, workers, contractors, agency workers, and other relevant persons.

A definition of qualifying disclosures that accurately reflects the six categories of wrongdoing set out in s.43B(1) of the ERA 1996: criminal offences, failure to comply with legal obligations, miscarriages of justice, danger to health and safety, environmental damage, and deliberate concealment of any of the foregoing. The policy should make clear that the worker needs only a reasonable belief, not proof, that the wrongdoing has occurred or is likely to occur.

Detailed internal reporting procedures that identify a designated whistleblowing officer by name, title, and contact details, together with an alternative contact for situations where the designated officer is the subject of the concern or is unavailable. The policy should also specify whether a confidential reporting hotline or anonymous reporting channel is available.

Information about external reporting options, including the right to make a protected disclosure to a prescribed person under s.43F of the ERA 1996 and the Prescribed Persons Order 2014. The policy should list the prescribed persons most relevant to the organisation's sector and activities and provide a reference to the full list maintained by the Department for Business and Trade.

A clear statement of the protections available to whistleblowers, including the right not to be subjected to detriment under s.47B and the right not to be unfairly dismissed under s.103A of the ERA 1996. The policy should define what constitutes detriment and should state that any person who subjects a whistleblower to retaliation will themselves be subject to disciplinary action.

A detailed investigation procedure that sets out the steps the organisation will take upon receiving a disclosure, including acknowledgment timescales, appointment of an investigator, the right of the whistleblower to be accompanied at meetings, communication with the whistleblower during and after the investigation, and the actions the organisation may take based on the findings.

Confidentiality protections that explain how the organisation will protect the identity of the whistleblower and the circumstances in which disclosure of their identity may be necessary. A section on anonymous disclosures, if the organisation accepts them, should address the limitations of anonymous reporting.

A policy on false or malicious allegations that distinguishes clearly between genuine concerns that are not ultimately substantiated (which are protected) and deliberately false or malicious allegations (which may result in disciplinary action). Record-keeping obligations, a review schedule, and approval details complete the essential elements.

What Is a Whistleblowing Policy (UK)?

When Do You Need a Whistleblowing Policy (UK)?

What to Include in Your Whistleblowing Policy (UK)

Frequently Asked Questions

Related Documents

Equality, Diversity and Inclusion Policy (UK)

Employee Handbook Acknowledgment (England & Wales)

Employment Contract (England & Wales)

Grievance Letter (UK)

Settlement Agreement (England & Wales)