UK law has granted protection for those who raise concerns of potential wrongdoing in the workplace (whistleblowers) since 1999 through the Public Interest Disclosure Act 1998.

The EU, when considering what its own whistleblowing protection laws should look like, recognised that the UK already grants comprehensive protection for whistleblowers. Nevertheless, there are differences between the position in the UK and the requirements of the EU Whistleblowing Directive (the “Directive”) which Member States were required to transpose into domestic law by 17 December 2021.

This article provides a summary of the UK whistleblowing regime currently in force and the main differences between that and the provisions of the Directive.

The Current Position


The protection provided by whistleblowing legislation is afforded to employees, agency workers, members of limited liability partnerships, judicial office-holders and workers who are not employees.

There is no minimum service requirement in order to bring a whistleblowing claim (protection is a “day one right”) and, significantly, there is no cap on the amount of compensation that may be awarded in whistleblowing claims (unlike in standard unfair dismissal claims). 


If an employee is dismissed because they have made a “protected disclosure” (i.e. blown the whistle), that dismissal is automatically unfair.

Those who are not employees are protected from being subjected to detrimental treatment as a result of making a protected disclosure (for example, by being subjected to unfair treatment, harassment or victimisation).  Similarly, employees are also protected from being subjected to detriment short of dismissal.


In order for someone (the whistleblower) to be protected, they must make a disclosure of information which, in their reasonable belief, is made in the public interest and tends to show that wrongdoing relating to one or more of the following has, is, or is likely to occur:

  • criminal offence
  • failure to comply with a legal obligation
  • miscarriage of justice
  • health and safety
  • damage to the environment; or
  • deliberate concealment of information relating to any of the above.

The most common type of wrongdoing we come across in practice is in relation to a failure to comply with a legal obligation, which is widely interpreted and includes breaches of regulatory requirements.  For example, an employee raising concerns that their employing bank is not complying with the rules of the Financial Conduct Authority (“FCA”) would fall within this category.  

Further, there has been an increase in disclosures regarding health and safety matters in light of issues faced as a result of the pandemic (with regard to the supply of appropriate PPE, or appropriate measures being put in place before individuals are required to return to the workplace, for example).

Other requirements regarding disclosures include the following:

  • There must be a “disclosure of information”, which can include conveying facts which are already known by the person the disclosure is being made to. 
  • The disclosure may be verbal or in writing, though individuals are advised to record their concerns in writing (perhaps in an email, or in notes of meetings/conversations) to ensure that there is a clear record of a disclosure having been made and exactly what information was disclosed.
  • The information being disclosed does not necessarily have to be correct, but the person making the disclosure must have a “reasonable belief” that it is.
  • The person making the disclosure must have a reasonable belief that it is in the public interest to make the disclosure.  This is a fairly low threshold to meet and is judged in light of factors such as: the number of people in the group whose interests the disclosure served; the nature of the alleged wrongdoing and of the interests affected; and the identity of the wrongdoer.
  • The disclosure must be made to one of the categories of people listed in the legislation (see below).


The disclosure should normally be made to the individual’s employer.  If the employer has a whistleblowing policy in place, this should be followed. 

If the employer’s whistleblowing policy authorises the disclosure of concerns to a third party (a whistleblowing hotline, for example), disclosure can be made by that channel in accordance with the policy and the individual will be treated as having made the disclosure to their employer (and therefore qualify for protection).

It is also possible to make a disclosure to a “prescribed person” as specified by statute, such as HM Revenue & Customs, the Health & Safety Executive, the Serious Fraud Office and regulators such as the FCA.

However, it is important to note that, in order to be protected, persons making a disclosure to a “prescribed person” must reasonably believe that the matter being reported is within the remit of that entity and that the information disclosed is “substantially true”.  This is an additional hurdle that does not apply when making the disclosure to the employer.  Contacting a regulator should not, therefore, be a knee jerk reaction without consideration of these principles.

In exceptional circumstances, disclosures made to others such as the media can also be “protected disclosures”, but those are beyond the scope of this note.


One of the most difficult aspects of bringing a whistleblowing claim is establishing causation.  That is, demonstrating that one has been subjected to a detriment (such as being ostracised, bullied, denied promotion or a pay rise, etc) on the ground that they have made a protected disclosure.  This requires a close analysis of the facts of each individual case to establish whether it can be shown that the making of the protected disclosure materially influenced the detrimental treatment. 

This causation test is even more difficult in cases involving dismissal in that, for the dismissal to be automatically unfair on grounds of whistleblowing, it must be shown that the sole or main reason for the dismissal was the making of the protected whistleblowing disclosure. 

In practice, most employers do not simply dismiss employees because of them raising whistleblowing concerns about wrongdoing in the workplace.  More commonly, such raising of concerns may lead to an employee losing support of management and perhaps receiving a poor appraisal or bonus or being subjected to a performance improvement plan on allegedly unrelated grounds and/or being more likely to be made redundant.


Some regulated sectors (health and financial services, for example) have specific and more onerous requirements regarding whistleblowing.

The financial services sector in the UK is regulated by the Prudential Regulation Authority (“PRA”) and the FCA.  Both the PRA Rulebook and the FCA Handbook contain specific rules and policies on whistleblowing. 

Organisations within the scope of those rules are required to appoint a “whistleblowing champion” (a senior manager or director (preferably a non-executive director)) who is responsible for overseeing the effectiveness of whistleblowing policies and procedures within that organisation.  They must also establish internal whistleblowing procedures which comply with the regulators’ rules and inform their staff about those procedures, the role of the PRA and FCA and of their rights under whistleblowing legislation.  

In March 2021, the FCA launched a whistleblowing campaign, “In confidence, with confidence”, encouraging individuals working within the financial services sector to come forward and raise any concerns they have regarding potential wrongdoing, emphasising its commitment to protecting their identity.  The FCA also committed to create a report about all concerns which have been expressed and to provide updates to a whistleblower every three months if so requested.

The Directive

Having left the EU, the UK is not going to implement the Directive, although it is worthy of note that, under the Trade and Cooperation Agreement, the UK and EU are required to commit to “a level playing field” with regard to the levels of protection in labour and social standards. The UK government should be mindful of this when considering any reforms to existing legislation.

Notable differences between the Directive and UK law include:

  • The Directive offers protection to a wider group of individuals than UK law. It goes further, not only in providing protection for self-employed contractors, volunteers, non-executive directors and job applicants, but also to “facilitators” who assist the whistleblower in the whistlebowing process (such as family members and colleagues).
  • The Directive provides protection regarding disclosures of breaches of EU law, whereas UK legislation applies to disclosures of legal obligations (regardless of the source of such legal obligation).
  • There is no general requirement under UK law for entities (of any size) – outside of regulated sectors - to establish internal reporting channels and to respond to whistleblowing concerns within a specified timeframe. The UK legal regime is focussed on protecting whistleblowers and, outside of regulated sectors such as financial services, does not prescribe how whistleblowing concerns should be handled.
  • UK law only provides protection from detrimental treatment to whistleblowers in a work-related context, whereas the Directive allows individuals to rely on whistleblowing in accordance with the Directive as a defence to action taken against them (for defamation, breach of copyright, trade secrets and confidentiality, for example).
  • Whistleblowers in the UK are not entitled to free access to comprehensive and independent legal advice with regard to whistleblowing protection, nor is there a requirement that their identity be kept confidential (except in certain regulated sector cases).


It was reported in March 2021 that the UK Government has committed to reviewing existing whistleblowing laws given the record number of whistleblowing cases brought before the Employment Tribunal in recent years.

The whistleblowing charity, Protect, has also launched a campaign, “Let’s Fix UK Whistleblowing Law” calling for UK law to be updated so as to preserve the UK’s status as a leading example of a country providing comprehensive whistleblowing protection.

Progress has so far been slow. The nature of any reforms that will be made and the timing of their implementation remains to be seen.