Whistleblowing

Effective whistleblowing arrangements have become a cornerstone of good corporate governance. Across many jurisdictions, organisations are increasingly expected to provide employees with safe, accessible and trusted mechanisms for raising concerns, while ensuring those concerns are investigated fairly, confidentially and without fear of retaliation.

Whistleblowing is no longer viewed simply as a legal compliance requirement. Increasingly, it is recognised as an important risk management tool, enabling organisations to identify misconduct, regulatory breaches and cultural issues at an early stage before they develop into wider legal, financial or reputational risks.

As legal frameworks continue to evolve, the focus is shifting beyond the existence of reporting channels to the effectiveness of the employer's response. Regulators and courts are placing increasing emphasis on governance, accountability and the practical handling of concerns, including the quality of investigations, protection against retaliation and appropriate oversight of outcomes.

UK

For international employers operating in or engaging staff connected to the UK, whistleblowing remains a high-risk area of employment law. Protection can apply not only to employees but also more broadly, to workers and compensation is uncapped. Claims can arise where individuals suffer dismissal or other detriment after raising protected concerns.

This is particularly relevant for multinational organisations because UK protection may apply even where the underlying wrongdoing takes place overseas, provided the individual has a sufficient connection with Great Britain. Employers should also be aware that disclosures about sexual harassment are expressly protected under the UK whistleblowing regime from 6 April 2026, increasing the need to align grievance, harassment and speak-up procedures.

For employers, whistleblowing should be viewed as both a legal compliance issue and a workplace culture issue. Clear reporting channels, careful handling of concerns, manager training and strong safeguards against retaliation are they key tools that employers can deploy to mitigate litigation, regulatory and reputational risk.

Read our full article here

Middle East 

Across the GCC, whistleblowing is increasingly viewed as an important component of corporate governance rather than simply a legal compliance issue. Although legal frameworks continue to differ across jurisdictions, employers are facing growing expectations to establish trusted reporting channels, investigate concerns promptly and fairly, and protect individuals who raise concerns in good faith.

The UAE's financial free zones have developed sophisticated whistleblowing frameworks, while Saudi Arabia has strengthened statutory protections for individuals reporting misconduct and Qatar continues to promote effective internal reporting within regulated sectors. Together, these developments reflect a broader regional trend towards stronger governance, greater transparency and more structured investigation processes.

For employers, the focus should extend beyond implementing a reporting hotline. Effective whistleblowing arrangements require trusted reporting mechanisms, robust investigations, appropriate confidentiality safeguards and clear governance over how concerns are escalated, investigated and resolved.

Read our full article here

Singapore

Singapore does not currently have a standalone whistleblower protection regime applicable to all employees. Instead, protections are found in specific legislation and regulatory requirements. For example, certain statutes protect the identities of informers who report particular offences, while companies listed on the Singapore Exchange are required to maintain a whistleblowing policy and appropriate procedures for reporting misconduct or wrongdoing.

The position will be strengthened when the Workplace Fairness Act comes into force, which is expected at the end of 2027. The Act will require employers to establish grievance-handling processes, protect the confidentiality of individuals who report grievances to the extent reasonably possible and prohibit retaliation against employees who raise genuine grievances concerning workplace discrimination or harassment. However, these protections are directed at workplace fairness grievances and will not amount to a general whistleblower protection framework covering every form of corporate wrongdoing.

Employers should therefore not rely solely on the minimum protections available under specific legislation. Clear reporting channels, confidentiality safeguards, protections against retaliation and a consistent process for investigating and escalating concerns remain important components of effective governance. 

Hong Kong

Hong Kong does not currently have a single, comprehensive whistleblower protection regime, with protections instead spread across various ordinances. However, increasing governance expectations, including the ICAC's forthcoming Integrity Compliance Management System (ICMS) guidance and HKEX whistleblowing requirements, place greater emphasis on effective internal reporting mechanisms. Employers should review their whistleblowing policies, investigation procedures and training programmes to mitigate regulatory, governance and employment-related risks.

Read our full article here

Australia

The effective handling of whistleblower complaints remains a critical governance and compliance issue for organisations globally. Strong whistleblower frameworks (namely, Part 9.4AAA of the Corporations Act 2001 (Cth)) play an important role in helping organisations identify misconduct, manage risk and foster a culture of transparency and accountability.

In Australia, whistleblower protections provide important safeguards for individuals who report suspected misconduct or other serious workplace concerns. Against this backdrop, the Australian Securities and Investments Commission (ASIC) is reviewing how the auditing companies manage whistleblower reports and whether existing processes adequately support and protect those who come forward.

Against this backdrop, the corporate regulator, Australian Securities and Investments Commission (ASIC) is reviewing how the audit companies handle whistleblower complaints and whether existing processes adequately support and protect individuals who come forward. ASIC has indicated that whistleblowers must have greater confidence that their disclosures will be taken seriously, investigated appropriately and managed in accordance with legislative requirements.

The review serves as a timely reminder for organisations to ensure they have comprehensive whistleblower frameworks in place. This includes maintaining clear and accessible whistleblower policies, ensuring confidentiality obligations are understood, providing appropriate protections against victimisation and detriment, and establishing processes that enable disclosures to be raised, assessed, investigated and escalated appropriately.

The corporate regulator’s review signals a broader push for possible reforms. Potential reforms could include expanding the regulator’s powers beyond investigating individual wrongdoing to examining the conduct of partnerships’ more broadly, as well as introducing more significant penalties for non-compliance.

Chile

Chile has no general whistleblowing framework applicable to the private sector. In the public sector, Law No. 21,592 establishes a statutory protection regime for whistleblowers, with a reporting channel administered by the Office of the Comptroller General, identity protection and temporary protection extending until ninety days after the investigation is closed. In the private sector, the approach is indirect: Law No. 21,595 requires crime prevention models to include secure reporting channels as a condition for the legal entity to rely on those models as a defence to criminal liability, while the Karin Act protects employees solely in respect of complaints of harassment and workplace violence. As a result, Chilean law has not yet completed the transition from whistleblowing as a compliance tool to whistleblowing as an organisational risk management instrument: reporting channels exist, but the framework surrounding them does not guarantee their effectiveness.

The gap is conceptual rather than merely regulatory. Chilean employment law is built around private disputes — breaches that personally affect the employee — rather than matters of public interest, the prosecution of which remains a State monopoly. When legislation invites employees to report public interest irregularities, it does so without providing them with an equivalent set of statutory guarantees: those investigations are conducted by the compliance function, without the procedural safeguards that the Karin Act does provide for harassment complaints, and without any regulation of the role of the external investigator retained by the employer itself.

The natural avenue for redress would be a fundamental rights claim based on retaliation, but its design is ill-suited to these cases: the statutory protection against retaliation under Article 485 of the Labour Code is built around complaints to the authorities or judicial proceedings, rather than the activation of an internal reporting channel, notwithstanding that some labour courts have recently extended that protection to internal investigations. For the multinational employer, this means that a global whistleblowing policy will not find full legal backing in Chile; it is advisable to voluntarily incorporate identity protection, safeguards against retaliation and investigator impartiality, rather than assuming the law provides them. From December 2026, consideration must also be given to the fact that reporting channels operated through a global platform involve an international transfer of personal data, subject to the authorisation requirements of Law No. 21,719.

Egypt

Egypt does not yet have a dedicated whistleblowing statute for the private sector, and reporting channels tend to be shaped by internal policy and by the Labour Law's disciplinary and investigation framework rather than by a standalone protective regime. 

That said, employers are under growing practical pressure to formalise how concerns are raised and handled. The Labour Law now requires that internal investigations be conducted by the employer's legal department (or a delegate only in defined circumstances), completed within a strict three-month timeframe, and properly documented in each employee's file while the Personal Data Protection Law (No. 151 of 2020) imposes separate confidentiality and data-handling obligations over how information gathered during an investigation is used and retained. 

For employers, the practical focus in Egypt should extend well beyond having a reporting channel in place. Effective arrangements require a trusted mechanism for raising concerns, investigations run through the correct internal function within the statutory timeframe, confidentiality safeguards consistent with the PDPL, and clear governance over escalation and resolution all joined into a legal environment where investigation procedure, rather than whistleblower specific protection, is where the compliance risk currently sits.

Kenya

Kenya does not have a single statute governing workplace whistleblowing, but the protections afforded to whistleblowers are drawn from a range of statutes with both internal and overarching repercussions.
Whistleblowing is expressly identified as an invalid reason for imposing disciplinary penalties on an employee under the 2007 Employment Act, and courts continue to critically assess the facts surrounding employment disputes to ensure the same. Where the report relates to offences such as bribery, corruption or economic crimes, there is a statutory duty to report and whistleblower protections are escalated beyond internal procedures and into the statutory realm, where they are governed by the Anti-Bribery Act, Anti-Corruption and Economic Crimes Act, and the Witness Protection Act.

Internally, employers are increasingly expected to adopt clear reporting structures. While the Employment Act requires complaint-handling systems for sexual harassment, courts have established that complaint-handling and whistleblowing policies are expected. Employers are bound by the policies they adopt, but sector-specific whistleblower regulations are common in high-risk sectors, for example, the Capital Markets (Whistleblower) Regulations.

Tanzania

Whistleblowing in Tanzania sits at the intersection of general employment protections and sector-specific regulatory requirements, particularly in financial services, mining and NGO-regulated sectors, rather than a single consolidated statute. Employers are increasingly expected to build internal reporting channels that are genuinely trusted and confidential, since poorly handled complaints readily convert into unfair termination or constructive dismissal claims under the ELRA.

The 2025 amendments reinforce this indirectly: the new restriction on continuing disciplinary action once a matter reaches the CMA means employers who mishandle a whistleblowing complaint internally may find little room to correct course once the employee escalates. Getting the investigation right the first time has become a practical necessity rather than best practice.

Employers with group-wide whistleblowing hotlines should confirm that Tanzanian employees can access and trust the channel in practice, including in Swahili, and that escalation and investigation timelines are realistic given local institutional processes.

Takeaways 

• Create trusted reporting channels: Ensure employees can raise concerns safely, confidentially and through accessible reporting routes.
• Protect those who speak up: Implement effective safeguards against retaliation and respond promptly to concerns about victimisation.
• Investigate consistently: Follow structured, impartial and well-documented investigation procedures appropriate to the nature of the concern.
• Maintain confidentiality: Share information only on a need-to-know basis while balancing fairness and legal obligations.
• Strengthen governance: Regularly review whistleblowing frameworks to ensure they remain effective, trusted and aligned with evolving legal and regulatory expectations.