Whistleblowing at Work: UK Law Guide for Employers and Workers

Whistleblowing — reporting wrongdoing in the public interest — is protected by the Public Interest Disclosure Act 1998 (PIDA), embedded into the Employment Rights Act 1996. Employees who blow the whistle are protected from dismissal and detriment, and the compensation they can receive is uncapped. For employers, understanding the law is essential to avoiding liability and fostering a speak-up culture.

1. What is Whistleblowing?

In law, whistleblowing refers to the act of making a protected disclosure — reporting information about wrongdoing that is in the public interest. It is not the same as making a personal employment grievance (for example, complaining about your own pay or treatment), even though employers sometimes conflate the two.

The legal framework is contained in the Public Interest Disclosure Act 1998 (PIDA), which inserted the relevant provisions into the Employment Rights Act 1996 (ERA 1996, Part IVA). Since the Enterprise and Regulatory Reform Act 2013, disclosures must be made in the reasonable belief that they are in the public interest — a requirement introduced to prevent workers using PIDA to bring purely private employment grievances under the more favourable whistleblowing protection regime.

The law protects the act of disclosure, not the whistleblower personally: this means the employer is liable if it subjects the worker to detriment because of the disclosure, regardless of whether the information disclosed turns out to be accurate.

2. What Qualifies as a Protected Disclosure?

A disclosure qualifies for protection if the worker reasonably believes it tends to show one or more of the following:

• A criminal offence (including fraud, bribery, money laundering, and theft)
• A breach of a legal obligation (statutory or contractual)
• A miscarriage of justice
• A danger to health and safety of any person
• Environmental damage
• Deliberate concealment of information about any of the above

The worker does not need to be correct — the test is reasonable belief. A worker who genuinely but mistakenly believes wrongdoing is occurring can still make a protected disclosure. However, bad faith (e.g. making up allegations to damage a colleague) is not protected and may be treated as misconduct.

Since 2013, the disclosure must also be reasonably believed by the worker to be in the public interest. The public interest test is not demanding — courts have held that even a relatively small number of people (beyond the worker themselves) being affected can satisfy it — but purely private employment disputes will not qualify.

3. Who is Protected?

PIDA protection extends to:

• Employees (the core category)
• Workers — a broader category including those on casual or zero-hours contracts
• Agency workers — since the Enterprise and Regulatory Reform Act 2013
• Trainees and student nurses on work placements
• Job applicants in certain sectors (NHS)
• Former employees — the protection extends to post-employment detriment

The protection does not extend to the genuinely self-employed (those in business on their own account), volunteers, or members of the public who report wrongdoing but have no employment relationship with the employer in question.

There is no qualifying period — protection applies from day one of an employment relationship.

4. Where to Report

The ERA 1996 sets out a hierarchy of disclosure channels, each with different conditions for protection:

• Internal disclosure(to the employer or employer's nominated contact): the broadest protection; the worker only needs a reasonable belief that the information tends to show wrongdoing. Most employers encourage internal reporting first as part of their whistleblowing policy.
• Prescribed persons (regulators): disclosure to a named regulator — such as the FCA, HMRC, HSE, CQC, Environment Agency, Ofsted, or the Serious Fraud Office — is protected provided the worker also reasonably believes the information falls within that regulator's remit and is substantially true. No internal disclosure is required first.
• Wider disclosure (e.g. to the media or an MP): subject to additional conditions — the worker must not be acting for personal gain, must reasonably believe internal or regulatory disclosure would result in victimisation or concealment, or the matter must be of an exceptionally serious nature.
• Legal advisers: disclosure to a solicitor for the purpose of obtaining legal advice is always protected, regardless of any other conditions.

5. Detriment and Dismissal Protections

A worker who makes a protected disclosure is protected from:

• Dismissal: automatically unfair under ERA 1996 s.103A. No qualifying period is required. The compensatory award is uncapped.
• Detriment: any act or deliberate failure to act that subjects the worker to a disadvantage because of the protected disclosure. This includes demotion, ostracism, poor performance reviews, exclusion from meetings, removal of responsibilities, threats, harassment, and reallocation to less desirable work.
• Interim relief: a worker dismissed for whistleblowing can apply for an interim relief order within 7 days of dismissal. The tribunal can order that the worker's employment (or the pay and benefits) continues pending the full hearing — a powerful remedy.

Third-party workers (e.g. a co-worker who victimises the whistleblower) can also be personally liable for detriment, alongside the employer. The employer can avoid liability for a co-worker's detriment only if it took all reasonable steps to prevent it.

6. Anonymous Reporting

Anonymous disclosures are not technically 'protected disclosures' under PIDA because PIDA protection is personal to the worker making the disclosure. If the employer does not know who made the report, it cannot be said to have subjected that worker to detriment.

However, anonymous reporting is still valuable in practice:

• Most prescribed regulators (FCA, HMRC, HSE, CQC) and the Serious Fraud Office accept anonymous tip-offs and may act on them
• Crimestoppers accepts anonymous reports of crime and can pass information to the police
• If an anonymous whistleblower is subsequently identified and suffers detriment, they may still have a claim if they can demonstrate causation

Workers who are uncertain about the risks of disclosure should seek legal advice before reporting — the first disclosure to a lawyer is itself protected.

7. The Public Interest Test

Since June 2013, a disclosure is only protected if the worker reasonably believes it is in the public interest. This amendment was introduced to prevent PIDA from being used as a vehicle for personal grievances dressed up as public interest disclosures.

Key points on the public interest test:

• The test is subjective — the worker's belief must be reasonable, not objectively established
• Even a relatively small group of people being affected beyond the worker personally can satisfy the test (Chesterton Global Ltd v Nurmohamed [2017] CA)
• A disclosure about the employer's breach of contract with the worker (e.g. failure to pay expenses) will typically fail the public interest test if the only person affected is the worker themselves
• A disclosure that has both personal and public interest elements (e.g. systemic underpayment affecting many employees) can still be protected

8. Confidentiality and Legal Advice Privilege

Disclosure to a solicitor for the purpose of obtaining legal advice about the worker's rights is always a protected disclosure, regardless of whether any other conditions are met. Legal advice privilege means the communication is also confidential and cannot be compelled to be disclosed in litigation.

Importantly, non-disclosure agreements (NDAs) cannot lawfully silence a whistleblower. ERA 1996 s.43J makes void any contractual term that purports to prevent a worker from making a protected disclosure. This applies to employment contracts, settlement agreements, and other confidentiality obligations. An NDA that contains such a term is not unenforceable as a whole — only the offending clause is void.

The Solicitors Regulation Authority and Bar Standards Board both have guidance reminding practitioners that NDAs cannot be used to prevent protected disclosures or to prevent reporting criminal conduct to the authorities.

9. Common Mistakes

Workers and employers both make predictable errors in whistleblowing situations:

• Waiting too long: employment tribunal time limits are 3 months minus one day from the detriment or dismissal. The clock does not run from when the original disclosure was made.
• Not putting it in writing: oral disclosures are protected, but it is much harder to prove what was said and when. Workers should keep a contemporaneous record — email, letter, or diary entry.
• Confusing a personal grievance with a protected disclosure: workers who frame a personal dispute (e.g. a pay disagreement) as a whistleblowing complaint risk their claim failing the public interest test and may undermine a genuine grievance case at the same time.
• Employers assuming good faith is sufficient: an employer that investigates a whistleblowing complaint but then takes unrelated disciplinary action against the whistleblower may still be liable if the tribunal infers a causal link.
• Failing to follow a whistleblowing policy: employers with a policy who ignore it face additional credibility problems if a case reaches tribunal.

10. Whistleblowing in Financial Services

The Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) have introduced enhanced whistleblowing obligations for firms in the financial services sector:

• Mandatory internal whistleblowing champion: larger financial services firms (those subject to the Senior Managers and Certification Regime with more than 50 employees, or all deposit-takers) must appoint a Senior Manager as their whistleblowing champion
• The champion is responsible for ensuring the firm has effective internal whistleblowing arrangements
• Firms must tell UK-based employees about the FCA and PRA whistleblowing services at least annually and upon leaving the firm
• The FCA operates its own whistleblowing service and can receive confidential disclosures about breaches of FCA rules, market abuse, and financial crime
• The Senior Managers Regime imposes personal accountability on senior managers — a whistleblower's disclosure about a senior manager's conduct can trigger FCA investigation and potential enforcement action

The FCA's approach to whistleblower protection has been strengthened by rules introduced between 2015 and 2019, and the FCA has indicated it treats information from whistleblowers as a valuable intelligence source in detecting market abuse and financial misconduct.

Key facts at a glance