Whistleblowing Law and Worker Protections Under PIDA

Whistleblowing Law in Brief

Public Interest Disclosure Act 1998 protects workers making qualifying disclosures - things like criminal offences, danger to health and safety, environmental damage or miscarriage of justice - if they raise concerns through the proper channels.

The Whistleblowing Framework in UK Law

The Public Interest Disclosure Act 1998 (PIDA) is the foundation of UK whistleblowing law. It does not stand alone - it operates by inserting Part IVA into the Employment Rights Act 1996, sections 43A to 43L. Three core protections apply to UK workers who make a qualifying disclosure:

Section 47B - it is unlawful to subject a worker to any detriment because they made a protected disclosure
Section 103A - dismissing an employee for making a protected disclosure is automatically unfair, with no qualifying period of employment needed
Section 43J - any clause in a contract or agreement (including NDAs and settlement agreements) that purports to prevent a worker making a protected disclosure is void

Compensation for whistleblowing dismissal is uncapped, and tribunals can award interim relief in some cases. The protections apply from day one - there is no two-year qualifying period that applies to ordinary unfair dismissal claims.

The "worker" definition in section 43K is wider than ordinary employment law. It includes employees, agency workers, contractors providing personal service, NHS practitioners, trainees and certain other categories. Self-employed contractors are not generally covered, though there are exceptions.

What Counts as a Qualifying Disclosure

For a disclosure to qualify for protection under section 43B of the Employment Rights Act 1996, the worker must reasonably believe that:

The disclosure is in the public interest (added by the Enterprise and Regulatory Reform Act 2013 to exclude purely personal grievances), and
The information tends to show one of the listed categories of wrongdoing

Until April 2026, six categories of wrongdoing are recognised:

A criminal offence has been, is being, or is likely to be committed
A person has failed, is failing, or is likely to fail to comply with a legal obligation
A miscarriage of justice has occurred, is occurring, or is likely to occur
The health or safety of any individual has been, is being, or is likely to be endangered
The environment has been, is being, or is likely to be damaged
Information tending to show any of the above has been, is being, or is likely to be deliberately concealed

From 6 April 2026, under the Employment Rights Act 2025, sexual harassment becomes the seventh qualifying disclosure category. A worker reporting that sexual harassment has occurred, is occurring, or is likely to occur will have the same protected disclosure status as someone reporting fraud or a health and safety breach.

The disclosure must be of information, not just an allegation - the worker needs to point to specific facts rather than just expressing dissatisfaction. The reasonable belief test is subjective (the worker's belief) but judged on whether that belief was reasonable in the circumstances. The information does not have to turn out to be true - what matters is whether the worker reasonably believed it.

Most whistleblowing concerns in normal businesses are not the dramatic scandals you read about. They are the warehouse worker who notices stock going missing on a particular shift. They are the bookkeeper who sees expense claims that do not add up. They are the care worker who flags a colleague's behaviour with a vulnerable resident. These are the people whistleblowing law was designed to protect, and most of them never want to be a whistleblower - they just want the issue to be looked at and to keep their job. A working whistleblowing policy is the route that lets them do that.

What I look for on whistleblowing is not just whether a policy exists, but whether it works. Has anyone used it in the last few years? Are there records of disclosures, the action taken in response, and the outcomes? Are alternative reporting routes in place for situations where the line manager is the issue, or where the report is about senior management? Has the policy been communicated through induction and refresher training? An organisation with a polished policy and zero recorded disclosures is not necessarily clean - more often it is a sign that staff do not know the policy exists, do not trust it, or have learned that raising concerns leads nowhere.

The day-one protection point is one I emphasise on audits. Unlike ordinary unfair dismissal claims, there is no qualifying period - a worker can bring a whistleblowing claim from their first day of employment. Compensation is uncapped. So managers responding to disclosures need to be especially careful about anything that looks like detriment - a sudden change in shifts, exclusion from meetings, performance management started just after a disclosure - because the burden of proof on causation is real.

For SMEs, whistleblowing is one of the areas where the law treats small employers and large ones identically. There is no exemption based on size. The Public Interest Disclosure Act 1998 applies to a five-employee firm in the same way as it applies to a multinational. The practical answer for an SME is a written whistleblowing policy in the staff handbook, a named alternative contact for situations where the line manager cannot be used, basic training during induction, and management awareness of the day-one protection rule. None of this is elaborate, but it needs to be there and it needs to be visible.

Where Disclosures Can Be Made

For a qualifying disclosure to be a protected disclosure, it must be made through one of the routes set out in sections 43C to 43H of the Employment Rights Act 1996. The available routes, in roughly increasing order of formality, are:

To the employer (s.43C) - the standard route. Most disclosures should go through internal channels first. The employer can designate specific people or routes (such as a whistleblowing officer or hotline) in its policy
To the person responsible for the failure (s.43C) - where this is someone other than the employer (for example, a parent company or a contractor)
To a legal adviser (s.43D) - the only route where no further conditions apply, as long as the disclosure is in the course of obtaining legal advice
To a Minister of the Crown (s.43E) - applies to public sector workers in specific circumstances
To a prescribed person (s.43F) - the list of prescribed regulators is set by statutory instrument and includes the FCA, HSE, HMRC, the Charity Commission, the ICO, the SFO, the CMA and many others. The disclosure must concern a matter within the prescribed person's remit
Wider disclosure (s.43G and s.43H) - including to media or other external parties, but only where stricter conditions are met. Generally a worker would need to show that internal disclosure would not be acceptable, the matter was sufficiently serious, and the disclosure was reasonable in the circumstances

The practical implication is that a workable internal whistleblowing route protects both the worker (who has a reasonable channel) and the organisation (which gets a chance to address concerns before external escalation).

Building a Whistleblowing Framework for an SME

For most SMEs, the framework needed for compliance with the Public Interest Disclosure Act 1998 is modest in scale but needs to cover specific elements:

A written whistleblowing policy - communicated through the staff handbook and induction. The policy should explain what counts as a qualifying disclosure, who to raise concerns with, what protections apply, and what the organisation will do in response
Named contacts - typically the line manager as the default, with at least one alternative (a director or external adviser) for situations where the line manager is the issue or is too senior
A clear process for handling disclosures - including acknowledgement, investigation, feedback to the worker on outcomes, and protection from retaliation
Training - basic awareness for all staff at induction and refreshers; more detailed training for managers on how to receive disclosures and respond appropriately
A record of disclosures - so the organisation can demonstrate that the policy is being used and concerns are being acted on
Connection to other policies - the whistleblowing policy interacts with grievance, disciplinary, anti-harassment, anti-bribery and data protection policies, and these should be cross-referenced consistently

The most common issue auditors find is not policy absence but policy invisibility - a policy that exists in the handbook but that staff do not know about and have never used. Periodic awareness reminders and an active reference in induction and one-to-ones are what make the difference.

Sexual Harassment as a Protected Disclosure - April 2026

Under the Employment Rights Act 2025, from 6 April 2026 sexual harassment becomes a qualifying disclosure category in its own right. The change is significant because:

Workers reporting sexual harassment - their own or that of a colleague - are protected as whistleblowers, separately from any harassment claim they may bring
The protection applies retrospectively to harassment or disclosures that occurred before 6 April 2026, where the dismissal or detriment happens after that date
This sits alongside the proactive duty under the Worker Protection (Amendment of Equality Act 2010) Act 2023 - the two together make the legal position on sexual harassment significantly stronger from 2026

For SMEs, the practical answer is to update the whistleblowing policy and the sexual harassment policy together to reflect the new category, and to make sure staff training covers both.

Settlement Agreements and NDAs

Section 43J of the Employment Rights Act 1996 renders any contractual term void to the extent that it purports to prevent a worker making a protected disclosure. This means:

Standard NDAs cannot prevent disclosures to regulators, prescribed persons or in the course of legal advice
Settlement agreements cannot lawfully prevent the worker from raising concerns about whistleblowing-protected matters
Attempting to enforce such a clause may itself amount to a detriment

The Victims and Prisoners Act 2024 further restricts the use of NDAs to prevent disclosures to law enforcement, lawyers, regulators and victim support services. The Employment Rights Act 2025 also voids NDAs that prevent allegations of harassment or discrimination from being raised.

Tribunal Claims for Whistleblowing

If a worker is subjected to detriment or dismissed for whistleblowing, they can bring a tribunal claim:

No qualifying period - unlike ordinary unfair dismissal, the employee does not need two years' service. Day-one protection
Time limit - currently 3 months less one day (extending to 6 months for most rights under the Employment Rights Act 2025)
Compensation - uncapped for both dismissal and detriment claims, which can produce significantly higher awards than ordinary unfair dismissal cases
Burden of proof - once the worker shows facts from which it could be inferred that the disclosure was the reason for the treatment, the burden shifts to the employer to show otherwise
Interim relief - in unfair dismissal cases, the worker can apply within 7 days for a tribunal order continuing employment until the full hearing. Rarely granted but available

Practical Advice

For most SMEs, whistleblowing compliance comes down to having a written, accessible policy with a working alternative reporting route, basic awareness training, and managers who understand the day-one protection rule. The toolkit and policy below provide the documented basis.

The April 2026 expansion of qualifying disclosures to include sexual harassment means most policies will need updating in early 2026, alongside the sexual harassment policy required by the Worker Protection Act 2023.

alphaZ document	How to use it
IMS Toolkit (ISO 9001/14001/45001)	The integrated management system toolkit. Includes the staff handbook and policy framework that hold the whistleblowing content - the documented basis for the management system addressing whistleblowing compliance.
P-14 Whistleblowing Policy	The standalone whistleblowing policy. Sets out the protected disclosure categories, the internal and external reporting routes, the protection from detriment and dismissal, and the consequences of breach.
P-121 Sexual Harassment Policy	The sexual harassment policy. Used alongside the whistleblowing policy from April 2026 when sexual harassment becomes a qualifying disclosure category in its own right.
ER9 Legal Register	The legal register entry for the Employment Rights Act 1996, the Public Interest Disclosure Act 1998, and the upcoming Employment Rights Act 2025 changes sits here, alongside the wider employment legislation.

Note: subscribers to alphaZ documents can download all of the documents above as part of the subscription.

Frequently Asked Questions

Does whistleblowing law apply to small employers?

Yes. The Public Interest Disclosure Act 1998 applies to all UK employers regardless of size, with no SME exemption. A two-employee firm is subject to the same protected disclosure framework as a multinational. The day-one protection rule, the uncapped compensation, and the unlawful detriment provisions all apply identically. The practical scale of the policy and procedure can be proportionate to the size of the organisation, but the underlying legal framework is the same.

What is the difference between a grievance and a whistleblowing concern?

A grievance is a complaint about how the employee personally has been treated - their pay, working conditions, treatment by colleagues, and so on. A whistleblowing concern is a disclosure of information about wrongdoing that is in the public interest - a criminal offence, breach of legal obligation, danger to health and safety, environmental damage, miscarriage of justice or cover-up. The same incident can sometimes be both, but the routes and protections differ. A grievance is handled through the grievance procedure; a whistleblowing concern needs to be handled through the whistleblowing policy with the protected disclosure framework applied. From April 2026, sexual harassment becomes a recognised whistleblowing category.

Can a settlement agreement prevent whistleblowing?

No. Section 43J of the Employment Rights Act 1996 renders any contractual term void to the extent that it purports to prevent a worker making a protected disclosure. This applies to NDAs, settlement agreements and confidentiality clauses. The Victims and Prisoners Act 2024 further protects disclosures to law enforcement, lawyers, regulators and victim support services. The Employment Rights Act 2025 also voids NDAs that prevent allegations of harassment or discrimination from being raised. Standard confidentiality protections remain valid for legitimate commercial or personal information not connected to protected disclosures.

Who can make a protected disclosure?

The "worker" definition in section 43K of the Employment Rights Act 1996 is wider than the standard employment law definition. It includes employees, agency workers, contractors providing personal service, trainees, NHS practitioners and certain other categories such as police officers and student nurses. Genuinely self-employed contractors operating through their own business are generally not covered, though the courts have extended the definition in some cases. If in doubt, the safer position for the employer is to assume coverage and apply the protected disclosure framework consistently.

What changes in April 2026?

From 6 April 2026, under the Employment Rights Act 2025, sexual harassment becomes a qualifying disclosure category in its own right. A worker reporting sexual harassment - whether their own experience or that of a colleague - will be protected from detriment and dismissal as a whistleblower, separately from any harassment claim. The protection applies retrospectively, in that it covers harassment or disclosures that occurred before 6 April 2026 where the dismissal or detriment happens after that date. SMEs should review their whistleblowing policy and sexual harassment policy together in early 2026 to make sure both reflect the new category.

UK Legislation

Further Resources