Whistleblower Policy (Philippines)

A Whistleblower Policy in the Philippines sets out the rules the organisation expects to be followed and the standards against which conduct will be judged.

The SEC Code of Corporate Governance for Publicly Listed Companies (MC No. 19-2016) requires PLCs to establish a mechanism for reporting and addressing concerns of employees and other parties regarding unethical practices, violations of the Code of Ethics, and violations of the corporate governance policy — effectively mandating a whistleblower or integrity reporting program. The SEC's revised governance code (MC No. 16-2020 for public companies) reinforces this requirement.

In the public sector, the Office of the Ombudsman (OMB) at ombudsman.gov.ph administers the primary anti-corruption reporting mechanism, with jurisdiction over public officials under the Ombudsman Act (Republic Act 6770, 1989). Whistleblowers reporting corruption to the Ombudsman may seek protection under the Witness Protection Program administered by the Department of Justice (DOJ) under RA 6981, which provides state witnesses with security, immunity from prosecution, and financial assistance.

The Anti-Money Laundering Act (RA 9160, as amended) provides a specific whistleblower protection: Section 9(c) of RA 9160 (as amended by RA 10365) protects covered persons and their officers and employees from criminal, civil, and administrative liability for making reports to the AMLC in good faith, even if the reported transaction subsequently proves not to be a money laundering activity.

The legal framework governing the Whistleblower Policy (Philippines) in Philippines draws on several key statutes and regulatory bodies. Under Philippine law, the Civil Code of the Philippines (Republic Act No. 386) governs contractual obligations. The Revised Corporation Code (Republic Act No. 11232) regulates corporate entities through the Securities and Exchange Commission (SEC). The Labor Code of the Philippines (Presidential Decree No. 442) and Department of Labor and Employment (DOLE) govern employment matters. The Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission (NPC) protect personal data. The Bureau of Internal Revenue (BIR) administers tax obligations under the National Internal Revenue Code. Parties executing a Whistleblower Policy (Philippines) in Philippines should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Revised Corporation Code (RA 11232, 2019) sets the foundational requirements.

A Whistleblower Policy is required or strongly recommended for Philippine corporations and organizations in several circumstances.

All publicly listed companies on the PSE must establish a whistleblower or integrity reporting mechanism under SEC Memorandum Circular No. 19, Series of 2016, and must describe this mechanism in their Annual Corporate Governance Report (ACGR) submitted to the SEC.

All covered persons under the Anti-Money Laundering Act (RA 9160, as amended) — including banks, insurance companies, and securities dealers — must protect employees who report suspicious or covered transactions to the AMLC from employer retaliation, making a formal whistleblower policy a practical necessity.

Any Philippine corporation that has adopted a Code of Ethics or Code of Conduct needs a Whistleblower Policy to provide a credible reporting mechanism for violations of that Code, without which the Code of Conduct becomes largely unenforceable.

Government-owned and controlled corporations (GOCCs) governed by the GCG under the GOCC Governance Act (RA 10149) must have integrity and whistleblowing mechanisms as part of their governance frameworks.

Philippine corporations with international operations, foreign investors, or that are subsidiaries of multinational corporations often need a Whistleblower Policy to comply with the requirements of foreign anti-corruption laws — such as the US Foreign Corrupt Practices Act (FCPA), the UK Bribery Act 2010, and the OECD Anti-Bribery Convention — which apply extraterritorially and require companies to have internal reporting mechanisms for bribery and corruption concerns.

Any organization receiving foreign grants, development funding, or official development assistance (ODA) from agencies such as USAID, the World Bank, or the Asian Development Bank (ADB) is typically required by the grant agreement to have a whistleblower protection policy.

Parties in Philippines should prepare a Whistleblower Policy (Philippines) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Philippine law, the Civil Code of the Philippines (Republic Act No. 386) governs contractual obligations. The Revised Corporation Code (Republic Act No. 11232) regulates corporate entities through the Securities and Exchange Commission (SEC). The Labor Code of the Philippines (Presidential Decree No. 442) and Department of Labor and Employment (DOLE) govern employment matters. The Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission (NPC) protect personal data. The Bureau of Internal Revenue (BIR) administers tax obligations under the National Internal Revenue Code. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A thorough Philippine Whistleblower Policy must include the following essential elements.

Scope and Covered Concerns: Definition of what types of conduct may be reported — including violations of Philippine law (Revised Penal Code, Anti-Graft Act, AMLA, Securities Regulation Code), violations of company policies, financial fraud, workplace safety issues, and environmental violations — and who may file a report (employees, contractors, suppliers, customers, and other parties).

Reporting Channels: Multiple reporting mechanisms, including: an anonymous online reporting portal or hotline; direct reporting to the Compliance Officer, Internal Audit, or Audit Committee; and an escalation path to the Board or a designated independent director where the concern involves senior management.

Confidentiality Protections: Commitment to maintain the confidentiality of the whistleblower's identity to the extent permitted by law and consistent with the need to conduct an adequate investigation. Limitations on confidentiality where disclosure is required by a court order, AMLC, SEC, or other regulatory authority should be clearly stated.

Anti-Retaliation Protections: Explicit prohibition on retaliation against any person who reports a concern in good faith, including protection from termination, demotion, suspension, harassment, or discrimination. The policy should reference the Labor Code (Presidential Decree 442) provisions on constructive dismissal and the NLRC's jurisdiction over retaliation claims.

Investigation Process: Description of the investigation procedure — intake, preliminary assessment, full investigation, findings report, and resolution — with timelines and the involvement of the Audit Committee or board-level oversight for significant matters.

Good Faith Requirement: Statement that the policy protects only good-faith reporters, and that knowingly false reports may be subject to disciplinary action consistent with Civil Code Articles 19 and 20 on abuse of rights.

External Reporting: Reference to external reporting channels — SEC Enforcement and Investor Protection Department at [email protected], AMLC at amlc.gov.ph, Office of the Ombudsman, and NBI — where internal reporting is inadequate or the concern involves the corporation itself.

Additional compliance elements for a Whistleblower Policy (Philippines) used in Philippines include: Under Philippine law, the Civil Code of the Philippines (Republic Act No. 386) governs contractual obligations. The Revised Corporation Code (Republic Act No. 11232) regulates corporate entities through the Securities and Exchange Commission (SEC). The Labor Code of the Philippines (Presidential Decree No. 442) and Department of Labor and Employment (DOLE) govern employment matters. The Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission (NPC) protect personal data. The Bureau of Internal Revenue (BIR) administers tax obligations under the National Internal Revenue Code. Forms-legal.com provides this template as a starting point for Philippines-compliant documentation.