Whistleblowing: A Complete Guide to Policies, Reporting and Training
Whistleblowing gives employees and other workers a way to raise concerns about serious wrongdoing in the workplace. Effective whistleblowing arrangements can help organisations identify misconduct, fraud, unsafe practices and other risks early, while giving people confidence that concerns can be raised appropriately.
For employers, effective whistleblowing is about more than having a reporting channel. Firms need clear policies and procedures, appropriate protection for whistleblowers, informed employees and managers who know how to respond when a concern is raised.
This guide explains what whistleblowing is, how whistleblower protection works, what employers need to consider and how training can support an effective whistleblowing culture.
Whistleblowing is the process of reporting certain types of wrongdoing at work. A whistleblower may raise a concern about matters such as fraud, criminal activity, breaches of legal obligations, risks to health and safety or other wrongdoing covered by whistleblowing law.
Whistleblowing is distinct from raising a routine workplace grievance. A grievance is generally concerned with an individual's own employment, whereas a qualifying whistleblowing disclosure concerns wrongdoing in the public interest.
Read more: 7 Things to Consider When Whistleblowing
What disclosures qualify for whistleblowing protection?
Not every workplace complaint is legally protected as whistleblowing. Under UK whistleblowing law, a disclosure generally needs to be a qualifying disclosure that the worker reasonably believes is made in the public interest and relates to one of the types of wrongdoing covered by the legislation. These are known as protected disclosures when the relevant legal requirements are met.
Examples include concerns about:
-
Criminal offences
-
Breach of a legal obligation
-
Miscarriages of justice
-
Danger to the health or safety of any individual
-
Damage to the environment
-
The deliberate concealment of information about any of the above
This is a useful distinction for employees and employers alike: whistleblowing protection does not automatically apply to every complaint or workplace grievance.
Organisations should ensure that employees know what types of concerns need to be raised through whistleblowing channels and the process for raising other types of workplace complaints.
Under UK whistleblowing law, certain disclosures can qualify for statutory protection where they meet the relevant requirements.
The distinction matters because not every complaint or allegation made at work is automatically a protected whistleblowing disclosure.
Employees therefore need to understand:
- What constitutes a qualifying concern
- Where to raise it
- What information to provide
- How confidentiality works
- What protection may be available
Employers should make this information accessible and ensure employees are not discouraged from raising genuine concerns.
1. Recognising a concern
An employee identifies suspected wrongdoing or another issue that may fall within the organisation's whistleblowing arrangements.
2. Choosing an appropriate reporting channel
Every organisation should provide clear channels for raising concerns and explain when different routes should be used.
3. Raising the concern
The whistleblower provides relevant information about the issue, where appropriate including what happened, who was involved and any supporting evidence.
4. Assessing and investigating
The organisation should then assess the concern appropriately and determine whether further investigation or action is required.
5. Protecting the whistleblower
Organisations need to protect whistleblowers from retaliation or detriment and handle disclosures confidentially where possible.
6. Following up
Employees should understand what happens after they report a concern and how the organisation responds.
Strengthen employee awareness
Why clear reporting routes matter
Employees are more likely to speak up when they understand how to report concerns, who will receive them and what protections are available.
A clear whistleblowing policy can help establish those expectations.
Learn more in this blog: Setting up a Workplace Whistleblowing Policy
What should a workplace whistleblowing policy include?
An effective whistleblowing policy should clearly explain:
- What types of concerns can be raised
- Who can raise a concern
- How concerns can be reported
- Who is responsible for handling reports
- How confidentiality is managed
- How whistleblowers are protected
- How concerns will be assessed and investigated
- What happens after a report is made
The policy also needs to be communicated effectively so employees know it exists and understand how to use it.
Whistleblowing e-learning course
What are employers' responsibilities
Employers have a duty to create an environment in which employees can raise genuine concerns without fear of retaliation.
To do this, employers are responsible for:>
- Clear policies and procedures
Employees should know how and where to report concerns. - Appropriate reporting channels
Organisations need to provide suitable routes for raising concerns. - Confidentiality and protection
Whistleblowers should understand how their information will be handled and what protections apply. - Effective response
Concerns need to be assessed and handled appropriately. - Employee awareness
Staff should understand what whistleblowing is, when to use it and how the organisation expects concerns to be raised.
Provide a secure whistleblowing reporting channel
A clear policy and employee training are important, but organisations also need an effective way for employees to raise concerns and for compliance teams to manage those reports.
A Whistleblowing Register can provide a secure channel for employees to report misconduct, unethical behaviour or compliance concerns anonymously, while creating an audit trail to support follow-up and investigation. This encourages a speak-up culture while ensuring regulatory compliance.
Give your employees a safer way to speak up.
What role do managers play in whistleblowing?
Managers may be among the first people employees approach when they have a concern. They therefore need to understand how to respond appropriately without discouraging the employee from raising the issue.
Managers should understand:
- How to recognise a potential whistleblowing concern
- What to do when an employee raises an allegation
- Which reporting channels to use How to protect confidentiality
- How to avoid retaliation or victimisation
- When to escalate a matter
Whistleblowing in Financial Services
Whistleblowing is particularly important in regulated financial services, where concerns may involve misconduct, regulatory breaches, financial crime or risks to customers and markets.
The FCA has specific whistleblowing arrangements for regulated firms, meaning organisations need to consider both general whistleblowing obligations and relevant financial services requirements.
Financial services firms may therefore need training that reflects their regulatory environment.
Whistleblowing in insurance
Insurance firms may also need to consider requirements under both FCA and PRA whistleblowing rules.
Whistleblowing and the Employment Rights Act
Employment law continues to shape how employers approach workplace whistleblowing and related concerns. Recent developments have also increased attention on the relationship between whistleblowing and workplace harassment. Under the Employment Rights Act (ERA 2025), sexual harassment disclosures are now protected under whistleblowing laws.
Read more: ERA 2025: Whistleblowing and Harassment Across the UK
Employers are responsible for keeping their policies, procedures and training under review as legislation and regulatory expectations develop.
Whistleblowing training
A strong whistleblowing culture depends on people knowing when to speak up, how to report concerns and what happens when they do.
Training can help organisations
- Build awareness of whistleblowing responsibilities
- Explain reporting channels and procedures
- Help employees recognise potential wrongdoing
- Reinforce protections for whistleblowers
- Give managers confidence to respond appropriately
- Support a culture where employees feel able to speak up
The right training approach will depend on your workforce, regulatory environment and learning needs.
Find the right whistleblowing training
For all employees
Whistleblowing Training Course for Global Companies
Help employees understand what whistleblowing is, when to raise concerns, how to report wrongdoing and the protections available to whistleblowers.
Whistleblowing Training Course
Whistleblowing E-Learning Course for UK Companies
Deliver focused whistleblowing compliance training online, with interactive learning designed for UK employees.Whistleblowing E-Learning Course
For EU requirements
EU Whistleblowing Training
Support employees working across European operations with training focused on EU whistleblowing requirements.
EU Whistleblowing Training Course
For financial services
Whistleblowing in Financial Services
Train employees on whistleblowing in a financial services context, including the expectations that apply to regulated firms.
Whistleblowing in Financial Services Training Course
For insurance firms
Whistleblowing in Insurance
Provide insurance employees with training covering whistleblowing and relevant FCA and PRA requirements.
Whistleblowing in Insurance Training Course
For managers
Whistleblowing for managers in Financial Services
Give managers the knowledge they need to recognise concerns, respond appropriately and support employees who speak up.
Whistleblowing for Managers Training Course
For refresher training
Whistleblowing Refresher Course
Refresh employees' understanding of whistleblowing, reporting channels and whistleblower protection in a short, engaging course.
Whistleblowing Refresher Training Course
Explore wider compliance training
Whistleblowing forms part of a broader compliance framework. Depending on your organisation and sector, related training may include:
- Fraud prevention
- Financial crime
- Risk management
- Anti-bribery and corruption
- Conduct risk
- Non-financial misconduct
- Workplace harassment
- FCA compliance
- Market abuse
- Consumer Duty
- SMCR
Explore all compliance courses
Build a stronger speak-up culture
Give staff and managers the knowledge they need to recognise wrongdoing, raise concerns appropriately and understand the protections available to whistleblowers. Awareness will encourage employees to speak-up and ensure misconduct in the workplace is reported.
Start your free trial
What is the difference between whistleblowing and a grievance?
A grievance generally concerns an individual's own employment or workplace situation, while whistleblowing involves raising concerns about qualifying wrongdoing or other matters of public interest.
Can whistleblowers remain anonymous?
Organisations may provide anonymous reporting channels, although the availability and operation of anonymous reporting will depend on the reporting process and circumstances.
What protection do whistleblowers have?
Qualifying whistleblowers can have legal protection against certain forms of detriment or retaliation. The exact protection depends on whether the disclosure meets the relevant legal requirements.
Does every company need a whistleblowing policy?
The legal requirements depend on the organisation and its circumstances, but a clear whistleblowing policy is an important part of establishing effective reporting arrangements and ensuring employees understand how to raise concerns.
Do financial services firms have additional whistleblowing requirements?
Yes. Certain FCA and PRA-regulated firms are subject to specific regulatory expectations around whistleblowing.
What training should employees receive on whistleblowing?
Training should help all employees understand what whistleblowing is, how to raise concerns, reporting channels, protections and their responsibilities. Managers may need additional training on handling concerns appropriately.