Whistleblowing at Work: Your Legal Protections in the UK

What is whistleblowing in law?

In everyday language, "whistleblowing" means raising a concern about wrongdoing at or by your employer. In legal terms, whistleblowing is governed by the Public Interest Disclosure Act 1998 (PIDA), which amended the Employment Rights Act 1996 to create a framework of protections for workers who make "protected disclosures."

PIDA was introduced following high-profile cases where employees suffered serious consequences for raising genuine concerns about matters of public importance — from financial fraud to safety risks to patient harm. The law recognises that employees are often best placed to identify wrongdoing and that the public interest is served by protecting them when they speak out.

The protections apply not just to employees but to a wider category of "workers" including agency workers, contractors, and those in the gig economy — provided they meet the definition of a worker under the Act.

What counts as a qualifying disclosure?

Not every complaint or grievance is a protected disclosure. For the whistleblowing protections to apply, you must make a qualifying disclosure — meaning you must reasonably believe that the information you are disclosing tends to show one of six specific types of wrongdoing:

• Criminal offences — fraud, theft, bribery, money laundering, or any other criminal activity
• Failure to comply with a legal obligation — breaches of regulatory requirements, employment law, health and safety law, data protection obligations, or any other legal duty
• Miscarriages of justice — situations where justice has been obstructed or the wrong outcome reached in a legal proceeding
• Danger to health or safety — risks to the health or safety of any individual, whether colleagues, customers, patients, or the public
• Damage to the environment — activities that cause or are likely to cause environmental damage
• Deliberate concealment of information — where someone is covering up information relating to any of the above

The key word is "reasonably believe." You do not have to be right — you do not have to prove the wrongdoing actually occurred. You must simply hold a reasonable, genuine belief that the information tends to show one of the six categories. This is assessed objectively: would a reasonable person in your position have believed what you believed?

The public interest test

Since 2013, qualifying disclosures must also satisfy a public interest test. This was introduced following the case of Parkins v Sodexho, where employees were using whistleblowing protections to complain about purely personal employment grievances (such as their own contract terms). The public interest requirement was designed to exclude purely private disputes from PIDA protection.

In practice, the public interest threshold is not high. A disclosure can satisfy the test even if the primary motivation is personal (for example, if you are personally affected by the wrongdoing you are disclosing). The test asks whether there is a public interest element — even a modest one — in the disclosure being made. Courts have found that disclosures involving health and safety, financial fraud, and regulatory breaches almost always satisfy the public interest test, particularly where the wrongdoing affects a class of people (colleagues, customers, the public) beyond just the individual making the disclosure.

Who can you make a disclosure to?

The level of protection you receive depends on who you make your disclosure to. The law creates a hierarchy of disclosure routes:

Internal disclosure to your employer (or a person responsible for the failure). This is the most straightforward and attracts the full PIDA protections. Most employers have designated whistleblowing channels — a whistleblowing hotline, a nominated director, or a formal policy for raising concerns. Using these internal channels first is almost always the right starting point.

Disclosure to a prescribed person. Prescribed persons are regulators and public bodies designated by the Secretary of State as appropriate recipients of protected disclosures in their specific sector. Examples include the Financial Conduct Authority (financial services), the Health and Safety Executive (safety concerns), the Care Quality Commission (health and social care), HMRC (tax fraud), the Serious Fraud Office (fraud), and Ofsted (education). Disclosure to a prescribed person requires you to reasonably believe that the information is substantially true and that it falls within the prescribed person's remit. A full list of prescribed persons is published on gov.uk.

Wider disclosure (media, police, MP, etc.). Disclosure to the wider public — including journalists, social media, or an MP — receives protection only in limited circumstances. You must reasonably believe the information is substantially true, the disclosure must not be made for personal gain, it must be reasonable in all the circumstances, and one of the following must also apply: you reasonably believed you would be subjected to a detriment if you disclosed internally or to a prescribed person; there was no prescribed person for the type of wrongdoing; you previously made an internal or prescribed disclosure and the matter was not addressed; or the wrongdoing is exceptionally serious.

Protected vs. unprotected disclosures

A disclosure that meets all the conditions — qualifying disclosure of one of the six types of wrongdoing, reasonable belief, and satisfaction of the public interest test, made to an appropriate person — is a protected disclosure. Any detriment suffered as a consequence is actionable under PIDA.

A disclosure that fails any of these conditions is unprotected — meaning you cannot rely on PIDA if you suffer consequences. Common reasons a disclosure fails to be protected include: it related solely to a personal grievance; it was made to an inappropriate recipient (e.g. a journalist when internal routes had not been tried and no exceptional circumstances existed); or there was no reasonable basis for the belief that wrongdoing had occurred.

It is also important to understand that PIDA protects the disclosure itself — not all conduct associated with it. If you made a protected disclosure but subsequently behaved in an unacceptable way (for example, retaining confidential documents without authorisation, or making seriously defamatory public allegations), the employer may be able to take action based on that conduct, provided the action is not connected to the disclosure itself.

What is a detriment?

A "detriment" in PIDA terms is any act or deliberate failure to act that puts you at a disadvantage because you made a protected disclosure. The definition is intentionally broad and covers a wide range of employer behaviour:

• Demotion — being moved to a lower grade, role, or position after making a disclosure
• Dismissal — being dismissed (automatically unfair if the reason or principal reason is the protected disclosure)
• Disciplinary action — being subjected to performance management, warnings, or other disciplinary steps as a result of your disclosure
• Bullying and harassment — being subject to intimidatory behaviour, ostracism, or targeted criticism from managers or colleagues
• Isolation — being excluded from meetings, projects, or communications in a way that disadvantages your career or wellbeing
• Denial of promotion or training — being passed over for opportunities that you would otherwise have received
• Changes to terms and conditions — having your working hours, location, or other contractual terms changed to your disadvantage
• Refusal to provide a reference — or providing a negative reference in retaliation for a disclosure
• Victimisation by colleagues — where the employer fails to take reasonable steps to prevent colleagues from subjecting you to a detriment

The detriment does not have to be obvious or dramatic. Subtle forms of treatment — a freeze on pay progression, exclusion from certain projects, a change in tone from management — can all constitute a detriment if causally connected to the disclosure.

Automatic unfair dismissal for whistleblowers

If you are dismissed and the reason, or principal reason, for your dismissal is that you made a protected disclosure, your dismissal is automatically unfair under section 103A of the Employment Rights Act 1996. This is one of the strongest protections in employment law:

• No qualifying period — You do not need two years' continuous employment. Automatic unfair dismissal protection applies from day one of employment.
• No upper age limit — The protection applies regardless of your age.
• The employer has no reasonable response defence — Unlike ordinary unfair dismissal, the employer cannot argue that dismissing you was within the band of reasonable responses. If the tribunal finds that the protected disclosure was the reason or principal reason for dismissal, the claim succeeds automatically.
• Interim relief available — If you are dismissed and apply for interim relief within seven days, a tribunal can order that your employment be maintained (or treated as maintained) pending the final hearing. This is a powerful and rare remedy, available only in automatically unfair dismissal cases including whistleblowing.

The challenge is causation — you must show that the protected disclosure was the reason or principal reason for the dismissal. Employers will often argue that the dismissal was for an unrelated reason (poor performance, redundancy, misconduct). The tribunal will look at the sequence of events, the proximity in time between the disclosure and the dismissal, and any contemporaneous documents to assess the true reason.

Compensation — no cap for whistleblowing claims

One of the most significant features of PIDA claims is that compensation is uncapped. Unlike ordinary unfair dismissal (where the compensatory award is currently capped at £115,115 or one year's gross pay, whichever is lower), whistleblowing claims can result in awards that reflect the full extent of your losses — including future career loss, pension loss, and injury to feelings.

Components of a whistleblowing compensation award may include:

• Past loss of earnings — Income lost from dismissal to the tribunal hearing
• Future loss of earnings — Where your dismissal has affected your long-term career prospects or earning capacity
• Injury to feelings — Compensation for the distress, anxiety, and reputational harm caused by the detriment. Tribunals use the Vento guidelines to assess this, with awards ranging from approximately £1,000 for the least serious cases to over £45,000 for the most serious.
• Personal injury — If you have suffered a recognisable psychiatric condition as a result of the detriment, you may be able to claim for personal injury (though this requires medical evidence)
• Aggravated damages — Where the employer's conduct was particularly high-handed or malicious

Whistleblowing awards can run into six figures where careers have been genuinely derailed. This, combined with the reputational and regulatory sensitivities associated with whistleblowing allegations, makes these cases among the most valuable settlement situations in employment law.

How to document and protect yourself

If you believe you have made or are about to make a protected disclosure, taking proactive steps to document and protect yourself is essential:

Put your disclosure in writing. An oral disclosure is protected, but a written record is far easier to prove. Use your employer's formal whistleblowing channel if one exists, or write a clear email to HR or the relevant senior person setting out what you are disclosing and why you believe it shows wrongdoing. Keep a copy.

Keep a contemporaneous diary. From the moment you make your disclosure, record everything: dates, times, what was said, who was present, and how your treatment changes. Courts place significant weight on contemporaneous notes compared to recollections made months later.

Preserve evidence carefully. You may legitimately retain copies of documents you received in the course of your employment and which are relevant to your disclosure or the detriment you are suffering — but only material you had legitimate access to. Do not access systems without authorisation or remove company property. Forward relevant emails to your personal account before you lose access, but only emails you were legitimately sent or copied on.

Do not delay seeking advice. The time limit for bringing a PIDA detriment claim is 3 months minus one day from the act of detriment (or the last in a series of acts). For dismissal claims, it is 3 months minus one day from the effective date of termination. These limits apply even to whistleblowing claims — miss them and your claim is likely gone.

Consider whether to use the formal whistleblowing process carefully. If your employer has a formal process, using it creates a clear record and may trigger statutory protections immediately. However, if you have reason to believe the process is compromised (for example, if the person responsible for handling disclosures is involved in the wrongdoing), consider disclosing to a prescribed person instead.