Whistleblower Policy (Nigeria)

A Whistleblower Policy in Nigeria establishes the obligations and procedures governing the conduct it regulates.

The Federal Ministry of Finance launched the Nigerian Whistleblowing Programme in December 2016, which established a national reporting portal and a reward scheme under which qualifying whistleblowers may receive 2.5% to 5% of the value of recovered funds as a financial incentive for reporting government corruption, tax evasion, and financial crimes. The EFCC (Establishment) Act 2004, which established the Economic and Financial Crimes Commission (EFCC) as Nigeria's primary anti-corruption and financial crimes agency, provides a framework for reporting financial crimes to the EFCC and obliges financial institutions to report suspicious transactions under the Money Laundering (Prevention and Prohibition) Act 2022.

The Securities and Exchange Commission of Nigeria (SEC) Corporate Governance Code 2018 requires all publicly listed companies and large public interest entities to establish whistleblower reporting mechanisms as part of their corporate governance framework. The Financial Reporting Council of Nigeria (FRCN) Code of Corporate Governance 2018 similarly requires boards of directors to confirm the implementation of anti-corruption and whistleblower policies. The Independent Corrupt Practices and Other Related Offences Commission (ICPC) Act 2000 provides additional protections for persons who report public sector corruption to the ICPC.

Protection against retaliation for whistleblowers in Nigeria is provided under the general law of contract (where an employee's contract prohibits victimisation) and, for employees in the public sector, under Section 39 of the ICPC Act 2000, which protects witnesses who assist anti-corruption investigations. The Labour Act (Cap L1, LFN 2004) and the National Industrial Court of Nigeria provide remedies for employees who are victimised by their employer for making protected disclosures.

The legal framework governing the Whistleblower Policy (Nigeria) in Nigeria draws on several key statutes and regulatory bodies. Under Nigerian law, the Companies and Allied Matters Act 2020 (CAMA) regulates corporate entities through the Corporate Affairs Commission (CAC). The Labour Act (Cap L1 LFN 2004) and the National Industrial Court of Nigeria (NICN) govern employment disputes. The Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Commission (NDPC) protect personal data. The Federal Inland Revenue Service (FIRS) administers tax obligations under the Companies Income Tax Act. The Federal High Court and state High Courts have jurisdiction over civil matters. Parties executing a Whistleblower Policy (Nigeria) in Nigeria should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Companies and Allied Matters Act (CAMA) 2020 sets the foundational requirements.

A Whistleblower Policy is required for Nigerian companies operating in sectors with significant regulatory oversight, and recommended for all companies as part of good corporate governance.

A whistleblower policy is required for companies listed on the Nigerian Exchange Group (NGX), which must comply with the SEC Nigeria Corporate Governance Code 2018 and the NGX Listing Rules, both of which require a formal whistleblower and reporting mechanism as a condition of listing and continued listing.

A whistleblower policy is needed for banks, insurance companies, pension fund administrators, and other financial institutions regulated by the Central Bank of Nigeria (CBN), the National Insurance Commission (NAICOM), or the National Pension Commission (PenCom), as the respective regulators' governance codes require whistleblower reporting channels.

A whistleblower policy is required for companies bidding for public sector contracts with Nigerian federal or state government ministries, departments, and agencies (MDAs), many of which now require evidence of anti-corruption compliance policies — including whistleblower mechanisms — as part of procurement due diligence under the Public Procurement Act 2007.

A whistleblower policy is needed for Nigerian subsidiaries of multinational corporations subject to the UK Bribery Act 2010, the US Foreign Corrupt Practices Act (FCPA), or other foreign anti-bribery legislation that require adequate procedures to prevent bribery and corruption in all jurisdictions of operation.

A whistleblower policy is required for any company implementing an ISO 37001 Anti-Bribery Management System certification — a standard increasingly required by international clients of Nigerian service companies — which mandates a confidential reporting mechanism for bribery concerns.

Parties in Nigeria should prepare a Whistleblower Policy (Nigeria) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Nigerian law, the Companies and Allied Matters Act 2020 (CAMA) regulates corporate entities through the Corporate Affairs Commission (CAC). The Labour Act (Cap L1 LFN 2004) and the National Industrial Court of Nigeria (NICN) govern employment disputes. The Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Commission (NDPC) protect personal data. The Federal Inland Revenue Service (FIRS) administers tax obligations under the Companies Income Tax Act. The Federal High Court and state High Courts have jurisdiction over civil matters. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A Nigeria Whistleblower Policy must contain the following essential elements to be effective and compliant with SEC Nigeria, FRCN, and EFCC/ICPC requirements.

Policy Statement and Purpose: A clear statement of the company's commitment to ethical conduct, legal compliance, and integrity, and the purpose of the whistleblower policy — to provide a safe, confidential channel for reporting genuine concerns about misconduct, consistent with the Nigerian Whistleblowing Programme 2016 and the SEC Nigeria Corporate Governance Code 2018.

Scope — Reportable Concerns: A description of the categories of conduct that may be reported under the policy, including: fraud, corruption, or bribery (reportable to EFCC under the EFCC Act 2004); financial irregularities and false accounting; money laundering (reportable under the Money Laundering (Prevention and Prohibition) Act 2022); health, safety, and environmental violations; breaches of the company's code of conduct; and violations of the Nigeria Data Protection Act 2023 or other applicable law.

Who May Report: Confirmation that all employees, directors, contractors, suppliers, customers, and members of the public may make a report under the policy.

Reporting Channels: The specific channels through which reports may be submitted — including a dedicated confidential hotline number, a secure web portal, an email address, and a postal address for written reports — and the name or title of the designated Whistleblowing Officer or Ethics Officer responsible for receiving and investigating reports.

Confidentiality: A commitment to maintain the confidentiality of the reporter's identity to the fullest extent practicable, and an explanation of the limited circumstances in which disclosure may be required (for example, by court order or regulatory requirement). Anonymous reporting options should be described.

Protection Against Retaliation: An express prohibition on any form of retaliation, victimisation, demotion, dismissal, or harassment against any employee or other person who makes a report in good faith, consistent with the ICPC Act 2000, Section 39 and the Labour Act (Cap L1, LFN 2004). The remedies available to a victimised reporter — including reinstatement, compensation, and referral to the National Industrial Court — should be stated.

Investigation Process: A description of how reports will be acknowledged (typically within 5 working days), investigated, and resolved — including the role of the Audit Committee of the Board under the SEC Nigeria Corporate Governance Code 2018, the escalation path for serious allegations, and the timeframe for completing investigations.

False Reports: A statement that knowingly false or malicious reports will be treated as a disciplinary matter, to deter abuse of the reporting mechanism.

Additional compliance elements for a Whistleblower Policy (Nigeria) used in Nigeria include: Under Nigerian law, the Companies and Allied Matters Act 2020 (CAMA) regulates corporate entities through the Corporate Affairs Commission (CAC). The Labour Act (Cap L1 LFN 2004) and the National Industrial Court of Nigeria (NICN) govern employment disputes. The Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Commission (NDPC) protect personal data. The Federal Inland Revenue Service (FIRS) administers tax obligations under the Companies Income Tax Act. The Federal High Court and state High Courts have jurisdiction over civil matters. Forms-legal.com provides this template as a starting point for Nigeria-compliant documentation.