Whistleblowing Policy Template

A whistleblowing policy — sometimes called a "speak-up policy" or "public interest disclosure policy" — is a written framework that tells workers how to raise concerns about wrongdoing they reasonably believe is in the public interest, and how the organisation will respond.

Qualifying disclosures under section 43B ERA 1996:

• Criminal offences — including fraud, bribery, theft, modern slavery
• Breach of a legal obligation — statutory, contractual or common law
• Miscarriage of justice
• Danger to health and safety of any individual
• Damage to the environment
• Sexual harassment — added by ERA 2025 s.23, in force from 6 April 2026
• Deliberate concealment of any of the above

The two protection tests:

• Public interest test — the worker must reasonably believe the disclosure is in the public interest, not just a personal grievance.
• Reasonable belief — the worker need not prove the wrongdoing; they only need to hold a reasonable belief based on the information available.

Our template is structured following PIDA 1998, ERA 1996 Part IVA, the Worker Protection (Amendment of Equality Act 2010) Act 2023, and section 23 of the Employment Rights Act 2025 for England, Wales and Scotland.

While there is no general statutory requirement for a private-sector employer to have a written whistleblowing policy, the risks of not having one are significant.

Statutory protections that fire automatically:

• Section 47B ERA 1996 — workers must not be subjected to detriment for making a protected disclosure.
• Section 103A ERA 1996 — dismissal of an employee for making a protected disclosure is automatically unfair, with no qualifying service period and no statutory cap on compensation.
• Section 43J ERA 1996 — confidentiality and gagging clauses in employment contracts, NDAs and settlement agreements are void to the extent they purport to prevent a protected disclosure.

Wider risks:

• Regulator scrutiny — the FCA, PRA, CQC, Ofsted and Charity Commission all expect documented whistleblowing arrangements;
• Reputational damage if a whistleblowing case becomes public;
• Loss of management visibility — without a clear policy, concerns may be raised externally (e.g. to regulators or the press) rather than internally first.

A clear policy can help avoid these outcomes by providing visible internal routes, fixed timeframes, and explicit anti-retaliation commitments.

Our template generates a complete UK-focused whistleblowing policy covering every element a UK regulator, employment tribunal or governance committee would expect to see.

Structure of the generated policy:

• Introduction and purpose — anchored in PIDA 1998 and ERA 1996
• Scope — covering employees, workers, agency staff, contractors, trainees, volunteers (ERA 1996 s.43K)
• Definition of qualifying disclosures — including the new sexual harassment category from 6 April 2026 (ERA 2025 s.23)
• What is not covered — personal grievances signposted to the grievance procedure
• Protection from detriment and dismissal — sections 47B and 103A ERA 1996
• Internal reporting routes — line manager, designated whistleblowing officer, alternative senior contact, optional confidential hotline (including the free Protect Advice Line)
• External disclosure to prescribed persons — ERA 1996 s.43F with examples (HSE, FCA, HMRC, ICO, CQC, Ofsted, EHRC, etc.)
• Confidentiality — including the void effect of gagging clauses (ERA 1996 s.43J)
• Anonymous disclosures policy — three configurable approaches
• Investigation procedure — acknowledgement and outcome timeframes you choose
• False or malicious disclosures — the good-faith standard
• Worker Protection Act 2023 — sexual harassment prevention duty
• Training and awareness — optional, but recommended for compliance
• Records, monitoring and review
• Adoption and signature by an authorised representative

Sector presets pre-fill sensible defaults for general business, financial services, healthcare, education, public sector, charity, construction and IT — all fields remain fully editable.

Even well-meaning organisations regularly trip up on the same handful of issues when adopting or reviewing a whistleblowing policy:

• Treating whistleblowing as a grievance. Personal complaints belong in the grievance procedure. Whistleblowing is for matters affecting the wider public interest — though sexual harassment, since 6 April 2026, expressly qualifies under both routes.
• Single point of failure. Naming only one person to receive disclosures (e.g. "speak to your line manager") fails when the concern is about that person. Best practice: line manager, Designated Whistleblowing Officer, AND an alternative senior contact.
• Stale references. Policies still citing only PIDA 1998 without updating for the Worker Protection Act 2023 and ERA 2025 are now out of date. Our template covers all three.
• Forgetting prescribed persons. Workers retain a statutory right to disclose externally to prescribed persons under section 43F ERA 1996. A policy that pretends otherwise misleads workers and is unenforceable.
• Gagging clauses. Confidentiality clauses in contracts or settlement agreements cannot lawfully prevent a protected disclosure (ERA 1996 s.43J). Any policy that suggests otherwise risks regulator and tribunal criticism.
• No timeframes. A policy that says "we will investigate" without committing to acknowledgement and outcome timeframes leaves workers in the dark and erodes trust.
• No training. The Worker Protection Act 2023 requires "reasonable steps" — without manager training, the steps argument is weak.
• No review cycle. UK whistleblowing and harassment law is changing fast. The policy should be reviewed at least annually, and after any major commencement.

Our template is professionally drafted and updated free for life — when UK whistleblowing law changes, the updated version appears free in your My Templates page.